STIGQter: STIG Summary: Samsung Android 16 COPE Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Samsung Android must be configured to disable authentication mechanisms providing user access to protected data other than a Password Authentication Factor: Face recognition.

DISA Rule

SV-276664r1139514_rule

Vulnerability Number

V-276664

Group Title

PP-MDF-333110

Rule Version

KNOX-16-006100

Severity

CAT II

CCI(s)

CCI-000765 - Implement multifactor authentication for network access to privileged accounts.

Weight

Fix Recommendation

Note: This requirement is not applicable for specific biometric authentication factors included in the product's Common Criteria evaluation.

Configure the Samsung Android devices to disable Face Recognition.

On the management tool, in the device restrictions, set "Face Recognition" to "Disable".

API: setKeyguardDisabledFeatures, KEYGUARD_DISABLE_FACE

Check Contents

Note: This requirement is not applicable for specific biometric authentication factors included in the product's Common Criteria evaluation.

Review the configuration to determine if the Samsung Android devices are disabling Face Recognition.

This validation procedure is performed on both the management tool and the Samsung Android device.

On the management tool in the device restrictions, verify "Face recognition" is set to "Disable".

On the Samsung Android device:
1. Open Settings >> Lock screen and AOD >> Screen lock and biometrics.
2. Enter current password.
3. Open "Face recognition" and, if required, register a face.
4. Verify the "Face unlock" option is disabled and cannot be enabled.

If on the management tool "Face recognition" is not set to "Disable", or on the Samsung Android device "Face unlock" can be enabled, this is a finding.

Vulnerability Number

V-276664

Documentable

False

Rule Version

KNOX-16-006100

Severity Override Guidance

Check Content Reference

Target Key

5715