BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide

The BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide (V1 R2) has 27 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

27STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Jul 26 2023

The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use HTTPS.

BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide

Assessment Title

Rule Text

The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use HTTPS.

Description

Discussion Text

Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism to protect the information during transmission to web applications. This is usually achieved through the use of HTTPS.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-254716

Rule

SV-254716r879887_rule

Severity

high

Rule Version

BEMS-03-013500

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify BEMS has been configured to use HTTPS as follows:

1. In the BEMS Dashboard, under "BEMS System Settings", click "BEMS Configuration".
2. Click "BlackBerry Dynamics".
3. In the Protocol drop-down list, verify "HTTPS" is selected.

If HTTPS is not configured on BEMS, this is a finding.

Implementation Procedure

Fix Text

Configure BEMS to use HTTPS as follows:

1. In the BEMS Dashboard, under "BEMS System Settings", click "BEMS Configuration".
2. Click "BlackBerry Dynamics".
3. In the Protocol drop-down list, select "HTTPS".

STIG check 11 of 27 in the BlackBerry Enterprise Mobility Server 3.x STIG checklist

← Previous · V-254715The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use Windows Authentication for the database connection.Next · V-254717 →The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use DOD certificates for SSL.