STIGQter: STIG Summary: Jamf Pro v10.x EMM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Jul 2024:

The Jamf Pro EMM local accounts must be configured with at least one lowercase character.

DISA Rule

SV-241805r1015737_rule

Vulnerability Number

V-241805

Group Title

PP-MDM-991000

Rule Version

JAMF-10-100710

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

To configure the "Require lowercase character" of the local accounts password, do the following:

1. Open the Jamf Pro EMM console.
2. Click "Settings".
3. Click "System Settings".
4. Click "Jamf Pro System User Accounts & Groups".
5. Click "Password Policy".
6. Click "Edit".
7. Select "Require lowercase character".

Check Contents

To verify the "Require lowercase character" of the local accounts password is selected, do the following:

1. Open the Jamf Pro EMM console.
2. Click "Settings".
3. Click "System Settings".
4. Click "Jamf Pro System User Accounts & Groups".
5. Click "Password Policy".
6. Verify "Require lowercase character" is selected.

If "Require lowercase character" is not selected, this is a finding.

Vulnerability Number

V-241805

Documentable

False

Rule Version

JAMF-10-100710

Severity Override Guidance

To verify the "Require lowercase character" of the local accounts password is selected, do the following:

1. Open the Jamf Pro EMM console.
2. Click "Settings".
3. Click "System Settings".
4. Click "Jamf Pro System User Accounts & Groups".
5. Click "Password Policy".
6. Verify "Require lowercase character" is selected.

If "Require lowercase character" is not selected, this is a finding.

Check Content Reference

M

Target Key

5357