MOTS-11-002300 - Motorola Solutions Android 11 must be configured to disable trust agents.

Information

Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

Trust agents allow a user to unlock a mobile device without entering a passcode when the mobile device is, for example, connected to a user-selected Bluetooth device or in a user-selected location. This technology would allow unauthorized users to have access to DoD sensitive data if compromised. By not permitting the use of non-password authentication mechanisms, users are forced to use passcodes that meet DoD passcode requirements.

SFR ID: FMT_SMF_EXT.1.1 #23, FIA_UAU.5.1

Solution

Configure Motorola Solutions Android 11 device to disable trust agents.

On the EMM console:
1. Open 'Lock screen restrictions' section.
2. Select 'Personal Profile'.
3. Toggle 'Disable trust agents' to 'On'.
4. Select 'Work Profile'.
5. Toggle 'Disable trust agents' to 'On'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOT_Solutions_Android_11_V1R2_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, CCI|CCI-000370, CCI|CCI-000381, Rule-ID|SV-251087r803910_rule, STIG-ID|MOTS-11-002300, Vuln-ID|V-251087

Plugin: MDM

Control ID: f280dd1526aad77c12eba397fe49f88116cee4ec8c19f5319c20f8a55b469e8f