STIGQter: STIG Summary: Omnissa WS1 UEM Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 May 2026:

The Omnissa WS1 UEM server must prohibit password reuse for a minimum of five generations.

DISA Rule

SV-284350r1224093_rule

Vulnerability Number

V-284350

Group Title

SRG-APP-000165-UEM-000095

Rule Version

OMW1-00-011500

Severity

CAT II

CCI(s)

• CCI-004061 - For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Weight

10

Fix Recommendation

Authenticate to the Workspace ONE UEM console as an administrator.

1. Navigate to Groups & Settings >> All Settings >> Admin >> Console Security >> Passwords.
2. Configure "Enforced password history" to "5 passwords remembered".
3. Click "Save".

Note: If this procedure is not seen on the console, the CSP is managing the setting. Contact the CSP to implement the required setting.

Check Contents

Authenticate to the Workspace ONE UEM console as an administrator.

Navigate to Groups & Settings >> All Settings >> Admin >> Console Security >> Passwords.

If "Enforced password history" is not set to "5 passwords remembered", this is a finding.

Note: If this procedure is not seen on the console, the Cloud Service Provider (CSP) is managing the setting. Contact the CSP to review the required setting.

Vulnerability Number

V-284350

Documentable

False

Rule Version

OMW1-00-011500

Severity Override Guidance

Authenticate to the Workspace ONE UEM console as an administrator.

Navigate to Groups & Settings >> All Settings >> Admin >> Console Security >> Passwords.

If "Enforced password history" is not set to "5 passwords remembered", this is a finding.

Note: If this procedure is not seen on the console, the Cloud Service Provider (CSP) is managing the setting. Contact the CSP to review the required setting.

Check Content Reference

M

Target Key

5751