STIGQter: STIG Summary: Honeywell Android 9.x COPE Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 14 Jan 2021:

On all Honeywell Mobility Edge Android Pie devices, cryptography must be configured to be in FIPS 140-2 validated mode.

DISA Rule

SV-235094r626527_rule

Vulnerability Number

V-235094

Group Title

PP-MDF-301010

Rule Version

HONW-09-008400

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the Honeywell Android device to enable FIPS mode.

On the MDM console:
1. Ask the MDM Administrator to edit the following item in DeviceConfig.xml:
Modify item: DeviceConfig >> HoneywellSetting >> EnforceOSFipsMode
Value sample: 1: Enable OS FIPS mode; 0: Disable OS FIPS mode
2. In MDM console, the MDM Administrator will package this DeviceConfig.xml and push this package to the CN80G device.

On the Honeywell Android Pie device:
1. Open Settings >> Honeywell Settings >> FIPS Enforce Mode.
2. Enable FIPS Enforce mode.

Check Contents

Review Honeywell Android device configuration settings to determine if the mobile device is in FIPS enforce mode.

This validation procedure is performed on the Android Pie device.

On the Honeywell Android Pie device:
1. Open Settings >> Honeywell Settings >> FIPS Enforce Mode.
2. Verify the option of "FIPS Enforce Mode" is enabled.

If the option of "FIPS Enforce Mode" is disabled on the Honeywell Android Pie device, this is a finding.

Vulnerability Number

V-235094

Documentable

False

Rule Version

HONW-09-008400

Severity Override Guidance

Review Honeywell Android device configuration settings to determine if the mobile device is in FIPS enforce mode.

This validation procedure is performed on the Android Pie device.

On the Honeywell Android Pie device:
1. Open Settings >> Honeywell Settings >> FIPS Enforce Mode.
2. Verify the option of "FIPS Enforce Mode" is enabled.

If the option of "FIPS Enforce Mode" is disabled on the Honeywell Android Pie device, this is a finding.

Check Content Reference

M

Target Key

5276

Comments