STIGQter: STIG Summary: Omnissa WS1 UEM Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 May 2026:

The Omnissa WS1 UEM server must enforce a 60-day maximum password lifetime restriction.

DISA Rule

SV-284354r1224097_rule

Vulnerability Number

V-284354

Group Title

SRG-APP-000174-UEM-000104

Rule Version

OMW1-00-012200

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Authenticate to the Workspace ONE UEM console as an administrator.

1. Navigate to Groups & Settings >> All Settings >> Admin >> Console Security >> Passwords.
2. Configure "Password Expiration Period (days)" to "60" or less.
3. Click "Save".

Note: If this procedure is not seen on the console, the CSP is managing the setting. Contact the CSP to implement the required setting.

Check Contents

Authenticate to the Workspace ONE UEM console as an administrator.

Navigate to Groups & Settings >> All Settings >> Admin >> Console Security >> Passwords.

If "Password Expiration Period (days)" is not set to "60" (or less), this is a finding.

Note: If this procedure is not seen on the console, the Cloud Service Provider (CSP) is managing the setting. Contact the CSP to review the required setting.

Vulnerability Number

V-284354

Documentable

False

Rule Version

OMW1-00-012200

Severity Override Guidance

Authenticate to the Workspace ONE UEM console as an administrator.

Navigate to Groups & Settings >> All Settings >> Admin >> Console Security >> Passwords.

If "Password Expiration Period (days)" is not set to "60" (or less), this is a finding.

Note: If this procedure is not seen on the console, the Cloud Service Provider (CSP) is managing the setting. Contact the CSP to review the required setting.

Check Content Reference

M

Target Key

5751