STIGQter: STIG Summary: BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use Windows Authentication for the database connection.

DISA Rule

SV-254715r879887_rule

Vulnerability Number

V-254715

Group Title

SRG-APP-000516-AS-000237

Rule Version

BEMS-03-013400

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

Set up Windows Authentication for the database connection on the BEMS console. In the Database Information dialog box, perform the following actions:

1. In the "Host" field, type the instance name of the SQL Server.
2. In the "Database" name field, type the name for the BEMS-Core database.
3. In the "Port" field, type the port number that connects to the SQL Server.
4. Select "Windows Authentication".
5. Click "Next".

Check Contents

Verify BEMS is configured for Windows Authentication for the database connection as follows:

In the Database Information dialog box, verify "Windows Authentication" is selected.

If "Windows Authentication" is not selected for the BEMS database connection, this is a finding.

Vulnerability Number

V-254715

Documentable

False

Rule Version

BEMS-03-013400

Severity Override Guidance

Verify BEMS is configured for Windows Authentication for the database connection as follows:

In the Database Information dialog box, verify "Windows Authentication" is selected.

If "Windows Authentication" is not selected for the BEMS database connection, this is a finding.

Check Content Reference

M

Target Key

5488