MOTO-09-002300 - Motorola Android Pie must be configured to disable trust agents.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. If compromised, this technology would allow unauthorized users to have access to DoD sensitive data. Not permitting the use of non-password authentication mechanisms forces users to use passcodes that meet DoD passcode requirements.

SFR ID: FMT_SMF_EXT.1.1 #23, FIA_UAU.5.1

Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation - NA for specific biometric authentication factors included in the products Common Criteria evaluation.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure Motorola Android Pie to disable trust agents.

On the MDM console:
1. Open Lock screen restrictions section.
2. Set 'Disable trust agents' to on.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOT_Android_9-x_Y21M04_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, CCI|CCI-000370, CCI|CCI-000381, Rule-ID|SV-230087r569708_rule, STIG-ID|MOTO-09-002300, Vuln-ID|V-230087

Plugin: MDM

Control ID: 1f1dc35e23637e0df86fefef2def6b9f90b3f44c70befd158507bd64d9f636b8