The Samsung Android device must be provisioned as a fully managed device and configured to create a work profile.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-269071KNOX-15-009900SV-269071r1036343_ruleCCI-000366medium
Description
The Android Enterprise work profile is the designated application group for the COPE use case. SFRID: FMT_SMF.1.1 #47
STIGDate
Samsung Android OS 15 with Knox 3.x COPE Security Technical Implementation Guide2024-12-10

Details

Check Text (C-269071r1036343_chk)

Verify requirement KNOX-15-008800 (COPE enrollment) has been implemented. If "COPE enrollment" has not been implemented, this is a finding.

Fix Text (F-73002r1036308_fix)

Implement "COPE enrollment" (refer to requirement KNOX-15-008800).