← Back to Unified Endpoint Management Server Security Requirements Guide

V-256892

CAT I (High)

The UEM server must provide digitally signed policies and policy updates to the UEM agent.

Rule ID

SV-256892r985785_rule

STIG

Unified Endpoint Management Server Security Requirements Guide

Version

V2R4

CCIs

CCI-002470

Discussion

It is critical that the UEM server sign all policy updates with validated certificates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the code or policy. Satisfies: FMT_POL_EXT.1.1

Check Content

Verify the UEM server is signing all policy updates sent to the UEM Agent with validated certificates.

If the UEM server is not signing all policy updates sent to the UEM Agent with validated certificates, this is a finding.

Fix Text

Configure the UEM server to sign all policy updates sent to the UEM Agent with validated certificates.