STIGQter: STIG Summary: Jamf Pro v10.x EMM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 03 Feb 2020:

The Jamf Pro EMM local accounts must be configured with at least one lowercase character.

DISA Rule

SV-108715r1_rule

Vulnerability Number

V-99611

Group Title

PP-MDM-991000

Rule Version

JAMF-10-100710

Severity

CAT II

CCI(s)

• CCI-000193 - The information system enforces password complexity by the minimum number of lower case characters used.

Weight

10

Fix Recommendation

To configure the "Require lowercase character" of the local accounts password, do the following:

1. Open the Jamf Pro EMM console.
2. Click "Settings".
3. Click "System Settings".
4. Click "Jamf Pro System User Accounts & Groups".
5. Click "Password Policy".
6. Click "Edit".
7. Select "Require lowercase character"

Check Contents

To verify the "Require lowercase character" of the local accounts password is selected, do the following:

1. Open the Jamf Pro EMM console.
2. Click "Settings".
3. Click "System Settings".
4. Click "Jamf Pro System User Accounts & Groups".
5. Click "Password Policy".
6. Verify "Require lowercase character" is selected.

If "Require lowercase character" is not selected, this is a finding.

Vulnerability Number

V-99611

Documentable

False

Rule Version

JAMF-10-100710

Severity Override Guidance

To verify the "Require lowercase character" of the local accounts password is selected, do the following:

1. Open the Jamf Pro EMM console.
2. Click "Settings".
3. Click "System Settings".
4. Click "Jamf Pro System User Accounts & Groups".
5. Click "Password Policy".
6. Verify "Require lowercase character" is selected.

If "Require lowercase character" is not selected, this is a finding.

Check Content Reference

M

Target Key

3593

Comments