← Back to BlackBerry PlayBook OS V2.1 Security Technical Implementation Guide

V-38710

CAT III (Low)

BlackBerry PlayBook OS must enforce a maximum lifetime of 120 days for the device unlock password (password age).

Rule ID

SV-50515r1_rule

STIG

BlackBerry PlayBook OS V2.1 Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000199

Discussion

Changing passcodes regularly prevents an attacker who has compromised the password from re-using it to regain access. This is an unlikely scenario, but is addressed by setting a password expiration. The IA control only needs to be enforced in product level STIGs, if there is a need for such rotation based on the expected operational use of the device.

Check Content

If the local command determines that there is not a need for password rotation based on the expected operational use of the device, this requirement does not apply.

On BlackBerry Device Service:
"Maximum Password Age" IT Policy rule must be set to 60 or less. Otherwise, this is a finding

Fix Text

On BlackBerry Device Service:
Set "Maximum Password Age" IT Policy rule to: 60.