STIGQter: STIG Summary: BlackBerry Enterprise Mobility Server 2.x Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

If the BlackBerry Connect service is installed on the BlackBerry Enterprise Mobility Server (BEMS), it must be configured to use Windows Authentication for the database connection.

DISA Rule

SV-93743r1_rule

Vulnerability Number

V-79037

Group Title

SRG-APP-000516-AS-000237

Rule Version

BEMS-00-014200

Severity

CAT II

CCI(s)

• CCI-000764 - The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users).

Weight

10

Fix Recommendation

Set up Windows Authentication for the database connection for the BlackBerry Connect service in BEMS:

1. In the BEMS Dashboard, under "BlackBerry Services Configuration", click "Connect".
2. Click "Database".
3. In the "Database" field, type the database name.
4. In the Windows Authentication drop-down list, select "Windows Authentication".
5. Click "Save".

Check Contents

This requirement is not applicable if the BlackBerry Connect service is not enabled on BEMS.

Verify the BlackBerry Connect service in BEMS is configured for Windows Authentication for the database connection as follows:

1. In the BEMS Dashboard, under "BlackBerry Services Configuration", click "Connect".
2. Click "Database".
3. In the "Database" field, type the database name.
4. In the Windows Authentication drop-down list, verify "Windows Authentication" is selected.

If "Windows Authentication" is not selected for the BlackBerry Connect database connection, this is a finding.

Vulnerability Number

V-79037

Documentable

False

Rule Version

BEMS-00-014200

Severity Override Guidance

This requirement is not applicable if the BlackBerry Connect service is not enabled on BEMS.

Verify the BlackBerry Connect service in BEMS is configured for Windows Authentication for the database connection as follows:

1. In the BEMS Dashboard, under "BlackBerry Services Configuration", click "Connect".
2. Click "Database".
3. In the "Database" field, type the database name.
4. In the Windows Authentication drop-down list, verify "Windows Authentication" is selected.

If "Windows Authentication" is not selected for the BlackBerry Connect database connection, this is a finding.

Check Content Reference

M

Target Key

3259

Comments