HONW-09-002300 - The Honeywell Mobility Edge Android Pie device must be configured to disable trust agents.

Information

NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. This technology would allow unauthorized users to have access to DoD sensitive data if compromised. By not permitting the use of non-password authentication mechanisms, users are forced to use passcodes that meet DoD passcode requirements.

SFR ID: FMT_SMF_EXT.1.1 #23, FIA_UAU.5.1

Solution

Configure Honeywell Android Pie to disable trust agents.

On the MDM console:
1. Open Lock screen restrictions section.
2. Set 'Disable trust agents' to on.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_HW_Android_9-x_Y24M01_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6(1), 800-53|CM-6b., 800-53|CM-7a., CAT|II, CCI|CCI-000366, CCI|CCI-000370, CCI|CCI-000381, Rule-ID|SV-235044r626530_rule, STIG-ID|HONW-09-002300, Vuln-ID|V-235044

Plugin: MDM

Control ID: 7f8b3a3a48cd15672750f0d20a3783e45e98602c9dea5ce097650d50369dcf25