BlackBerry Web Desktop Manager must be configured to permit users to activate new BlackBerry devices only.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
BBDS-00-000200	BBDS-00-000200	BBDS-00-000200_rule		Medium

Description
The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When these configurations are not set as required, users may have the capability to activate unauthorized BlackBerry devices.

STIG	Date
BlackBerry Device Service 6.2 STIG	2013-05-03

Details

Check Text ( C-BBDS-00-000200_chk )
Verify the BlackBerry Administration Service (BAS) has been configured to permit users to activate new BlackBerry devices only. Log into the BAS as an administrator with Security Administrator role. In the BAS Organization Administration menu, expand Organization. - Click My organization. - Click BlackBerry Web Desktop Manager Information. - On the Allowed user operations, verify "Allow user wireline activation" is set to "Activate unused PIN only." If BAS has not been configured to permit users to activate only new devices, this is a finding.

Check Text ( C-BBDS-00-000200_chk )

Verify the BlackBerry Administration Service (BAS) has been configured to permit users to activate new BlackBerry devices only.

Log into the BAS as an administrator with Security Administrator role.

In the BAS Organization Administration menu, expand Organization.
- Click My organization.
- Click BlackBerry Web Desktop Manager Information.
- On the Allowed user operations, verify "Allow user wireline activation" is set to "Activate unused PIN only."

If BAS has not been configured to permit users to activate only new devices, this is a finding.

Fix Text (F-BBDS-00-000200_fix)
Configure BlackBerry Administration Service to permit users to activate new BlackBerry devices only via BlackBerry Web Desktop Manager.