The Samsung Android 7 with Knox must be configured to Add the MDM Client application to the Battery optimizations modes Whitelist.

From Samsung Android OS 7 with Knox 2.x Security Technical Implementation Guide

Part of PP-MDF-991000

Associated with: CCI-000366

SV-91313r1_rule The Samsung Android 7 with Knox must be configured to Add the MDM Client application to the Battery optimizations modes Whitelist.

Vulnerability discussion

Doze and App Standby are power-saving features that extend battery life by deferring background CPU and network activity.If the MDM Client is put into Doze or App Standby mode, the MDM Administrator may not be able to administer the MDM.SFR ID: FMT_SMF_EXT.1.1 #47

Check content

Review Samsung Android 7 with Knox configuration settings to determine if the mobile device is configured to add the MDM Client application to the Battery optimizations modes Whitelist. This validation procedure is performed on both the MDM Administration Console only. On the MDM console, do the following: 1. Ask the MDM administrator to display the "Battery optimizations modes Whitelist" setting in the "Android Application" rule. 2. Verify the list contains the MDM Client. If the MDM console "Battery optimizations modes Whitelist" does not contain the MDM Client, this is a finding.

Fix text

Configure the Samsung Android 7 with Knox to add the MDM Client application to the Battery optimizations modes Whitelist. On the MDM console, add the MDM Client Package name to the "Battery optimizations modes Whitelist" in the "Android Applications" rule. Note: Some MDM consoles may require (or take as an optional input) the MDM Client Signature.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer