The Samsung Android 7 with Knox must be configured to Add the MDM Client application to the Battery optimizations modes Whitelist.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-76617	KNOX-07-018200	SV-91313r1_rule		Low

Description
Doze and App Standby are power-saving features that extend battery life by deferring background CPU and network activity. If the MDM Client is put into Doze or App Standby mode, the MDM Administrator may not be able to administer the MDM. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Samsung Android OS 7 with Knox 2.x Security Technical Implementation Guide	2019-10-01

Details

Check Text ( C-76287r1_chk )
Review Samsung Android 7 with Knox configuration settings to determine if the mobile device is configured to add the MDM Client application to the Battery optimizations modes Whitelist. This validation procedure is performed on both the MDM Administration Console only. On the MDM console, do the following: 1. Ask the MDM administrator to display the "Battery optimizations modes Whitelist" setting in the "Android Application" rule. 2. Verify the list contains the MDM Client. If the MDM console "Battery optimizations modes Whitelist" does not contain the MDM Client, this is a finding.

Check Text ( C-76287r1_chk )

Review Samsung Android 7 with Knox configuration settings to determine if the mobile device is configured to add the MDM Client application to the Battery optimizations modes Whitelist.

This validation procedure is performed on both the MDM Administration Console only.

On the MDM console, do the following:
1. Ask the MDM administrator to display the "Battery optimizations modes Whitelist" setting in the "Android Application" rule.
2. Verify the list contains the MDM Client.

If the MDM console "Battery optimizations modes Whitelist" does not contain the MDM Client, this is a finding.

Fix Text (F-83311r1_fix)
Configure the Samsung Android 7 with Knox to add the MDM Client application to the Battery optimizations modes Whitelist. On the MDM console, add the MDM Client Package name to the "Battery optimizations modes Whitelist" in the "Android Applications" rule. Note: Some MDM consoles may require (or take as an optional input) the MDM Client Signature.