STIGQter: STIG Summary: Samsung Android OS 8 with Knox 3.x COBO Use Case Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 25 Oct 2019: Samsung Android 8 with Knox must implement the management setting: Disable Manual Date Time Changes.

DISA Rule

SV-94939r1_rule

Vulnerability Number

V-80235

Group Title

PP-MDF-991000

Rule Version

KNOX-08-015500

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure Samsung Android 8 with Knox to disable manual date and time changes.

On the MDM console, deselect the "Date Time Changes Enabled" check box in the "Android Date Time" rule.

Check Contents

Review Samsung Android 8 with Knox configuration settings to determine if the mobile device is configured to disable manual date and time changes.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device.

On the MDM console, do the following:
1. Ask the MDM Administrator to display the "Date Time Changes Enabled" check box in the "Android Date Time" rule.
2. Verify the check box is not selected.

On the Samsung Android 8 with Knox device, do the following:
1. Open the device settings.
2. Select "General management".
3. Select "Date and time".
4. Verify "Automatic date and time" is on.
5. Verify a user cannot turn off "Automatic date and time".

If the MDM console "Date Time Changes Enabled" is set or on the Samsung Android 8 with Knox device, "Automatic date and time" is not set or the user is able to turn off this option, this is a finding.

Vulnerability Number

V-80235

Documentable

False

Rule Version

KNOX-08-015500

Severity Override Guidance

Review Samsung Android 8 with Knox configuration settings to determine if the mobile device is configured to disable manual date and time changes.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device.

On the MDM console, do the following:
1. Ask the MDM Administrator to display the "Date Time Changes Enabled" check box in the "Android Date Time" rule.
2. Verify the check box is not selected.

On the Samsung Android 8 with Knox device, do the following:
1. Open the device settings.
2. Select "General management".
3. Select "Date and time".
4. Verify "Automatic date and time" is on.
5. Verify a user cannot turn off "Automatic date and time".

If the MDM console "Date Time Changes Enabled" is set or on the Samsung Android 8 with Knox device, "Automatic date and time" is not set or the user is able to turn off this option, this is a finding.

Check Content Reference

M

Target Key

3369

Comments