STIGQter: STIG Summary: Samsung SDS EMM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 27 Jul 2022:

The Samsung SDS EMM local accounts must be configured with password maximum lifetime of 60 Days.

DISA Rule

SV-245528r836815_rule

Vulnerability Number

V-245528

Group Title

PP-MDM-991000

Rule Version

SSDS-00-200210

Severity

CAT II

CCI(s)

• CCI-000174 - Compile audit records from organization-defined information system components into a system-wide (logical or physical) audit trail that is time-correlated to within an organization-defined level of tolerance for relationship between time stamps of individual records in the audit trail.

Weight

10

Fix Recommendation

Configure Samsung SDS EMM local accounts with password maximum lifetime of 60 Days. On the MDM console, do the following:

1. Log in to the SDS EMM console.
2. Go to Setting >> Server >> Configuration >> Manage Validity Period (Days).
3. Set the Manage Validity Period (Days) to 60.
4. Save setting.

Check Contents

Verify Samsung SDS EMM local accounts have been configured to prohibit password reuse for a minimum of five generations.

1. Log in to the SDS EMM console.
2. Go to Setting >> Server >> Configuration >> Manage Password History (Times).
3. Verify the Manage Password History (Times) is set to 5.

If the Manage Password History (Times) is not set to 5, this is a finding.

Vulnerability Number

V-245528

Documentable

False

Rule Version

SSDS-00-200210

Severity Override Guidance

Verify Samsung SDS EMM local accounts have been configured to prohibit password reuse for a minimum of five generations.

1. Log in to the SDS EMM console.
2. Go to Setting >> Server >> Configuration >> Manage Password History (Times).
3. Verify the Manage Password History (Times) is set to 5.

If the Manage Password History (Times) is not set to 5, this is a finding.

Check Content Reference

M

Target Key

4216