← Back to Unified Endpoint Management Agent Security Requirements Guide

V-234244

CAT II (Medium)

The UEM Agent must perform the following functions: Import the certificates to be used for authentication of UEM Agent communications.

Rule ID

SV-234244r961596_rule

STIG

Unified Endpoint Management Agent Security Requirements Guide

Version

V2R1

CCIs

CCI-002470

Discussion

It is critical that the UEM agent only use validated certificates for policy updates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the code or policy. Satisfies: FMT_SMF_EXT.4.1

Check Content

Verify the UEM Agent performs the following functions: Import the certificates to be used for authentication of UEM Agent communications.

If the UEM Agent does not perform the following functions: Import the certificates to be used for authentication of UEM Agent communications, this is a finding.

Fix Text

Configure the UEM Agent to perform the following functions: Import the certificates to be used for authentication of UEM Agent communications.