Information
Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. If compromised, this technology would allow unauthorized users to have access to DoD sensitive data. Not permitting the use of non-password authentication mechanisms forces users to use passcodes that meet DoD passcode requirements.
SFR ID: FMT_SMF_EXT.1.1 #23, FIA_UAU.5.1
Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.
Solution
Configure Motorola Android Pie to disable trust agents.
On the MDM console:
1. Open Lock screen restrictions section.
2. Set 'Disable trust agents' to on.