The UEM server must provide digitally signed policies and policy updates to the UEM agent.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-256892
SRG-APP-000427-UEM-000500
SV-256892r985785_rule
High
Description
It is critical that the UEM server sign all policy updates with validated certificates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the code or policy.
Satisfies: FMT_POL_EXT.1.1