The UEM server must provide digitally signed policies and policy updates to the UEM agent.
An XCCDF Rule
Description
It is critical that the UEM server sign all policy updates with validated certificates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the code or policy. Satisfies: FMT_POL_EXT.1.1
- ID
- SV-256892r985785_rule
- Version
- SRG-APP-000427-UEM-000500
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the UEM server to sign all policy updates sent to the UEM Agent with validated certificates.