STIGQter STIGQter: STIG Summary: Jamf Pro v10.x EMM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 03 Feb 2020:

The Jamf Pro EMM server must be configured to display the required DoD warning banner upon administrator logon. Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).

DISA Rule

SV-108681r1_rule

Vulnerability Number

V-99577

Group Title

PP-MDM-411056

Rule Version

JAMF-10-000550

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure the Jamf Pro EMM server for customized login page:

Go to /path/to/JSS/Tomcat/webapps/ROOT/WEB-INF/frontend>>Open the login.jsp with a text editor application.

Scroll to the bottom of the page by the line "<input type="submit" class="button" value="log in" />"
Under the </div> create a new line and paste the following:

NOTE: Anything under "style" and "body" can be customized to fit your environments needs.<head>
<style>
p {margin-top:1em}
p {margin-bottom:0em}
p {color:red}
p {text-align:center}
p {font-family:courier}
p {font-size:100%}
</style>
</head>
<body>
<p>""Place DoD warning banner first line here""</p>
<p>""place second (or next) line here""</p>
</body>

Restart Tomcat for changes to take effect.

Check Contents

Verify the Jamf Pro EMM server for customized login page:

Go to /path/to/JSS/Tomcat/webapps/ROOT/WEB-INF/frontend folder.

Find the login.jsp.

Locate new <body> content related to customized text for DoD classification.

Verify the DoD warning banner text is correct.

If the Jamf Pro EMM server is not configured to display DoD warning banner when the system administrator logs on to the server, this is a finding.

Vulnerability Number

V-99577

Documentable

False

Rule Version

JAMF-10-000550

Severity Override Guidance

Verify the Jamf Pro EMM server for customized login page:

Go to /path/to/JSS/Tomcat/webapps/ROOT/WEB-INF/frontend folder.

Find the login.jsp.

Locate new <body> content related to customized text for DoD classification.

Verify the DoD warning banner text is correct.

If the Jamf Pro EMM server is not configured to display DoD warning banner when the system administrator logs on to the server, this is a finding.

Check Content Reference

M

Target Key

3593

Comments