STIGQter: STIG Summary: Motorola Android 9.x COPE Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 14 Oct 2020:

The Motorola Android Pie must be configured to not allow passwords that include more than two repeating or sequential characters.

DISA Rule

SV-230078r569708_rule

Vulnerability Number

V-230078

Group Title

GOOG-09-000200

Rule Version

MOTO-09-000200

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the Motorola Android device to prevent passwords from containing more than two repeating or sequential characters.

On the MDM console:
1. Open password requirements.
2. Open device password section.
3. Set password quality to "Complex".

Check Contents

Review Motorola Android device configuration settings to determine if the mobile device is prohibiting passwords with more than two repeating or sequential characters.

This validation procedure is performed on both the MDM Administration Console and the Android Pie device.

On the MDM console:
1. Open password requirements.
2. Open device password section.
3. Verify the password quality is set to "Complex".

On the Android Pie device:
1. Open Settings >> Security & location >> Screen lock.
2. Enter current password.
3. Tap on "Password".
4. Verify Password complexity requirements are listed: must contain at least one letter, one numeric digit, one special symbol.

If the MDM console device policy is set to a password with more than two repeating or sequential characters, or on the Android Pie device, the device policy is set to a password with more than two repeating or sequential characters, this is a finding.

Vulnerability Number

V-230078

Documentable

False

Rule Version

MOTO-09-000200

Severity Override Guidance

Review Motorola Android device configuration settings to determine if the mobile device is prohibiting passwords with more than two repeating or sequential characters.

This validation procedure is performed on both the MDM Administration Console and the Android Pie device.

On the MDM console:
1. Open password requirements.
2. Open device password section.
3. Verify the password quality is set to "Complex".

On the Android Pie device:
1. Open Settings >> Security & location >> Screen lock.
2. Enter current password.
3. Tap on "Password".
4. Verify Password complexity requirements are listed: must contain at least one letter, one numeric digit, one special symbol.

If the MDM console device policy is set to a password with more than two repeating or sequential characters, or on the Android Pie device, the device policy is set to a password with more than two repeating or sequential characters, this is a finding.

Check Content Reference

M

Target Key

4230

Comments