← Back to Google Android 14 COBO Security Technical Implementation Guide

V-258403

CAT III (Low)

Android 14 devices must be configured to disable the use of third-party keyboards.

Rule ID

SV-258403r959010_rule

STIG

Google Android 14 COBO Security Technical Implementation Guide

Version

V2R4

CCIs

CCI-000366

Discussion

Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Review the managed Google Android 14 configuration settings to confirm that no third-party keyboards are enabled. 
 
This procedure is performed on the EMM console.
 
On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify only the approved keyboards are selected.

If third-party keyboards are allowed, this is a finding.

Fix Text

Configure the Google Android 14 device to disallow the use of third-party keyboards. 
 
On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Select only the approved keyboard.

Additionally, Admins can configure application allowlists for Google Play that do not have any third-party keyboards for user installation.