The UEM Agent must perform the following functions: Import the certificates to be used for authentication of UEM Agent communications.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-234244	SRG-APP-000427-UEM-100009	SV-234244r617354_rule		Medium

Description

It is critical that the UEM agent only use validated certificates for policy updates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the code or policy. Satisfies: FMT_SMF_EXT.4.1

STIG	Date
Unified Endpoint Management Agent Security Requirements Guide	2020-12-14

Details

Check Text (C-37429r612038_chk)

Verify the UEM Agent performs the following functions: Import the certificates to be used for authentication of UEM Agent communications.

If the UEM Agent does not perform the following functions: Import the certificates to be used for authentication of UEM Agent communications, this is a finding.

Fix Text (F-37394r612039_fix)

Configure the UEM Agent to perform the following functions: Import the certificates to be used for authentication of UEM Agent communications.