STIGQter: STIG Summary: BlackBerry Enterprise Mobility Server 2.x Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

If the BlackBerry Docs service is installed on the BlackBerry Enterprise Mobility Server (BEMS), it must be configured to use Windows Authentication for the database connection.

DISA Rule

SV-93747r1_rule

Vulnerability Number

V-79041

Group Title

SRG-APP-000516-AS-000237

Rule Version

BEMS-00-014400

Severity

CAT II

CCI(s)

• CCI-000764 - The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users).

Weight

10

Fix Recommendation

Set up Windows Authentication for the database connection for the BlackBerry Docs service in BEMS:

1. In the BEMS Dashboard, under "BlackBerry Services Configuration", click "Docs".
2. Click "Database".
3. In the "Database" field, type the database name.
4. In the Windows Authentication drop-down list, select "Windows Authentication".
5. Click "Save".

Check Contents

This requirement is not applicable if the BlackBerry Docs service is not enabled on BEMS.

Verify the BlackBerry Docs service in BEMS is configured for Windows Authentication for the database connection as follows:

1. In the BEMS Dashboard, under "BlackBerry Services Configuration", click "Docs".
2. Click "Database".
3. In the "Database" field, type the database name.
4. In the Windows Authentication drop-down list, verify "Windows Authentication" is selected.

If "Windows Authentication" is not selected for the BlackBerry Docs database connection, this is a finding.

Vulnerability Number

V-79041

Documentable

False

Rule Version

BEMS-00-014400

Severity Override Guidance

This requirement is not applicable if the BlackBerry Docs service is not enabled on BEMS.

Verify the BlackBerry Docs service in BEMS is configured for Windows Authentication for the database connection as follows:

1. In the BEMS Dashboard, under "BlackBerry Services Configuration", click "Docs".
2. Click "Database".
3. In the "Database" field, type the database name.
4. In the Windows Authentication drop-down list, verify "Windows Authentication" is selected.

If "Windows Authentication" is not selected for the BlackBerry Docs database connection, this is a finding.

Check Content Reference

M

Target Key

3259

Comments