The Samsung Android device must be provisioned as a fully managed device and configured to create a work profile.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-276742KNOX-16-009900SV-276742r1139748_ruleCCI-000366medium
Description
The Android Enterprise work profile is the designated application group for the COPE use case. SFR ID: FMT_SMF.1.1 #47
STIGDate
Samsung Android 16 COPE Security Technical Implementation Guide2026-02-11

Details

Check Text (C-276742r1139748_chk)

Verify requirement KNOX-16-008800 (COPE enrollment) has been implemented. If "COPE enrollment" has not been implemented, this is a finding."

Fix Text (F-80802r1139747_fix)

Implement "COPE enrollment" (refer to requirement KNOX-16-008800).