The UEM server must require end-point devices to reauthenticate when organization-defined circumstances or situations requiring reauthentication.
An XCCDF Rule
Description
<VulnDiscussion>This requirement refers to the end-point device user reauthenticating to the device. The following are examples of organization-defined circumstances or situations requiring reauthentication: (i) After a screen lock; (ii) After device reboot; (iii) Before installation of new device policy or profile; (iv) Before executing a device reset or wipe. Satisfies:FMT_SMF.1.1(2) b Reference:PP-MDM-431016</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-234533r879763_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure the UEM server to require end-point devices to reauthenticate when organization-defined circumstances or situations requiring reauthentication.