The Samsung Android device must be provisioned as a fully managed device and configured to create a work profile.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-258696KNOX-14-225040SV-258696r959010_ruleCCI-000366medium
Description
The Android Enterprise work profile is the designated application group for the COPE use case. SFR ID: FMT_SMF_EXT.1.1 #47
STIGDate
Samsung Android OS 14 with Knox 3.x COPE Security Technical Implementation Guide2024-12-06

Details

Check Text (C-258696r959010_chk)

Verify requirement KNOX-14-210010 (COPE enrollment) has been implemented. If "COPE enrollment" has not been implemented, this is a finding."

Fix Text (F-62345r931287_fix)

Implement "COPE enrollment" (refer to requirement KNOX-14-210010).