STIGQter STIGQter: STIG Summary: Samsung Android 16 COPE Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Samsung Android must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including DOD-approved commercial app repository, management tool server, or mobile application store.

DISA Rule

SV-276649r1139469_rule

Vulnerability Number

V-276649

Group Title

PP-MDF-333050

Rule Version

KNOX-16-005400

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Samsung Android devices to disable unauthorized application repositories.

COPE:
On the management tool, in the Work profile restrictions, set "installs from unknown sources globally" to "Disallow".

COBO:
On the management tool, in the device restrictions, set "installs from unknown sources globally" to "Disallow".

Note: Google Play must not be disabled. Disabling Google Play will cause system instability and critical updates will not be received.

API: addUserRestriction, DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY

Check Contents

Review the configuration to determine if the Samsung Android devices are disabling unauthorized application repositories.

This validation procedure is performed on both the management tool and the Samsung Android device.

On the management tool, in the Work profile restrictions, verify "installs from unknown sources globally" is set to "Disallow".

On the Samsung Android device:
1. Open Settings >> Security and privacy >> More security settings >> Install unknown apps.
2. Verify each app listed has the status "Disabled" under the app name or no apps are listed. On COPE devices, confirm this in both the "Personal" and "Work" tabs.

If on the management tool "installs from unknown sources globally" is not set to "Disallow", or on the Samsung Android device an app is listed with a status other than "Disabled", this is a finding.

Vulnerability Number

V-276649

Documentable

False

Rule Version

KNOX-16-005400

Severity Override Guidance

Review the configuration to determine if the Samsung Android devices are disabling unauthorized application repositories.

This validation procedure is performed on both the management tool and the Samsung Android device.

On the management tool, in the Work profile restrictions, verify "installs from unknown sources globally" is set to "Disallow".

On the Samsung Android device:
1. Open Settings >> Security and privacy >> More security settings >> Install unknown apps.
2. Verify each app listed has the status "Disabled" under the app name or no apps are listed. On COPE devices, confirm this in both the "Personal" and "Work" tabs.

If on the management tool "installs from unknown sources globally" is not set to "Disallow", or on the Samsung Android device an app is listed with a status other than "Disabled", this is a finding.

Check Content Reference

M

Target Key

5715