Skip to content
Log In

Zebra Android 11 COBO Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Zebra Android 11 must be configured to enable audit logging.

    Audit logs enable monitoring of security-relevant events and subsequent forensics when breaches occur. To be useful, Administrators must have the ability to view the audit logs. SFR ID: FMT_SMF_EX...
    Rule Medium Severity
    Show

  • PP-MDF-301420

    Group
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 users must complete required training.

    The security posture of Zebra devices requires the device user to configure several required policy rules on their device. User-Based Enforcement (UBE) is required for these controls. In addition, ...
    Rule Medium Severity
    Show

  • PP-MDF-991000

    Group
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 must have the DoD root and intermediate PKI certificates installed.

    DoD root and intermediate PKI certificates are used to verify the authenticity of PKI certificates of users and web services. If the root and intermediate certificates are not available, an adversa...
    Rule Medium Severity
    Show

  • PP-MDF-992000

    Group
    Show

  • Zebra Android 11 must allow only the administrator (EMM) to install/remove DoD root and intermediate PKI certificates.

    DoD root and intermediate PKI certificates are used to verify the authenticity of PKI certificates of users and web services. If the user is allowed to remove root and intermediate certificates, th...
    Rule Medium Severity
    Show

  • PP-MDF-991000

    Group
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 work profile must be configured to disable automatic completion of work space internet browser text input.

    The autofill functionality in the web browser allows the user to complete a form that contains sensitive information, such as personally identifiable information (PII), without previous knowledge o...
    Rule Medium Severity
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 Work Profile must be configured to disable the autofill services.

    The autofill services allow the user to complete text inputs that could contain sensitive information, such as personally identifiable information (PII), without previous knowledge of the informati...
    Rule Medium Severity
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 must be configured to disallow configuration of date and time.

    Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Periodically synchronizing interna...
    Rule Medium Severity
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 devices must have the latest available Zebra Android 11 operating system installed.

    Required security features are not available in earlier operating system versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF_EXT.1.1 #47
    Rule High Severity
    Show

  • PP-MDF-991000

    Group
    Show

  • Zebra Android 11 devices must be configured to disable the use of third-party keyboards.

    Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF_EXT.1.1 #47
    Rule Low Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules