Information
Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. If compromised, this technology would allow unauthorized users to have access to DoD sensitive data. Not permitting the use of non-password authentication mechanisms forces users to use passcodes that meet DoD passcode requirements.
SFR ID: FMT_SMF_EXT.1.1 #23, FIA_UAU.5.1
Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation - NA for specific biometric authentication factors included in the products Common Criteria evaluation.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure Motorola Android Pie to disable trust agents.
On the MDM console:
1. Open Lock screen restrictions section.
2. Set 'Disable trust agents' to on.