STIGQter STIGQter: STIG Summary: Samsung Android OS 7 with Knox 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 25 Oct 2019: The Samsung Android 7 with Knox must implement the management setting: Disable Manual Date Time Changes.

DISA Rule

SV-91287r1_rule

Vulnerability Number

V-76591

Group Title

PP-MDF-991000

Rule Version

KNOX-07-013100

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Samsung Android 7 with Knox to disable manual date and time changes.

On the MDM console, deselect the "Date Time Changes Enabled" checkbox in the "Android Date Time" rule.

Check Contents

Review Samsung Android 7 with Knox configuration settings to determine if the mobile device is configured to implement to disable manual date and time changes.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 7 with Knox device.

On the MDM console, do the following:
1. Ask the MDM administrator to display the "Date Time Changes Enabled" checkbox in the "Android Date Time" rule.
2. Verify the checkbox is not selected.

On the Samsung Android 7 with Knox device, do the following:
1. Open the device settings.
2. Select "Date and time".
3. Verify the "Automatic date and time" is on.
4. Verify a user cannot turn off the "Automatic date and time".

If the MDM console "Date Time Changes Enabled" is set or on the Samsung Android 7 with Knox device, "Automatic date and time" is not set, or the user is able to turn off this option, this is a finding.

Vulnerability Number

V-76591

Documentable

False

Rule Version

KNOX-07-013100

Severity Override Guidance

Review Samsung Android 7 with Knox configuration settings to determine if the mobile device is configured to implement to disable manual date and time changes.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 7 with Knox device.

On the MDM console, do the following:
1. Ask the MDM administrator to display the "Date Time Changes Enabled" checkbox in the "Android Date Time" rule.
2. Verify the checkbox is not selected.

On the Samsung Android 7 with Knox device, do the following:
1. Open the device settings.
2. Select "Date and time".
3. Verify the "Automatic date and time" is on.
4. Verify a user cannot turn off the "Automatic date and time".

If the MDM console "Date Time Changes Enabled" is set or on the Samsung Android 7 with Knox device, "Automatic date and time" is not set, or the user is able to turn off this option, this is a finding.

Check Content Reference

M

Target Key

3253

Comments