What changed in Samsung Android OS 15 with Knox 3.x COPE STIG V1R3V1R3 changes

Samsung Android OS 15 with Knox 3.x COPE STIG V1R3 (2026-04-01) replaced V1R2 (2025-10-01): 1 check added, 1 updated. It has 49 checks, against 48 in V1R2.

V1R3 checklistV1R2 checklist Compare V1R2 and V1R3 in STIG Compare

  • 1 added
  • 0 removed
  • 1 updated

Updated fields: Check text 1Fix text 1

Added in V1R3 (1)

  • V-282961All Samsung Android 15 installations must be removed.

Updated in V1R3 (1)

V-277017CAT IISamsung Android 15 must disable the ability of the user to wipe the device.Check text, Fix text

Check text

ReviewVerify, configurationthe settingsAndroid todevice confirm that he user ishas unablebeen trained to not perform a factory resetwipe andwithout the adminapproval hasof the abilityauthorizing toofficial inject a recovery account on the device to unlock Factory Reset Protection (FRPAO). This checkConform procedureby isreviewing performedsite onmobile the device managementtraining toolrecords andor the SamsungUser Android 15 deviceAgreement. On theThis MDM console: Verify factory reset configuration: COBO and COPE: 1. Open user restrictions. 2. Verify that "Disallow Factory Reset" is enabled. Verifya factoryUser-Based resetEnforcement protection policy configuration: 1. From the Android Enterprise policy management, go to the Factory Reset Protection section. 2. Verify that "Factory Reset Protection" is set to "Allow/Enabled". 3. Verify that the correct Google Account ID(sUBE) is/are listed as allowed to unlock the FRPcontrol. OnIf the managed Samsung Android 15 device, verifyuser factoryhas reset configuration: COBO and COPE: 1. Open Settings >> General management >> Reset. 2. Tap the "Factory data reset" option. 3. Verify that the "Action not allowed"been pop-uptrained appearsto and the factory data reset does not proceed. If the Android device user is able to perform a factory resetwipe orwithout the adminapproval cannotof unlock the Android phone after an FRP eventAO, this is a finding.

Fix text

ConfigureTrain theusers Samsung Android 15 device to disablenot theperform abilitya offactory thereset useron to wipe the Android device. Enablewithout theAO adminapproval. toDocument injecttraining avia recoverysite accountmobile on the device sotraining theyrecords canor unlock FRP. On the MDMUser console: Disallow factory reset: COBO and COPE: 1Agreement. OpenThis useris restrictions. 2.a EnableUser-Based "DisallowEnforcement Factory(UBE) Reset"control. Set factory reset protection policyNote: COBO andIt COPE: 1.is Selectnot Devicepossible ownerfor management >> Set factory reset protection. 2. From the "Accounts"MDM section, go to Addenforce Accountthis >>control Enterwhen recovery account and press "Ok". 3. From the "Enabled"Android section,device selectis "Enabled"deployed toin enableCOPE factory reset protection policymode. 4. Press "Save" to confirm all changes. API: addUserRestriction, DISALLOW_FACTORY_RESET and setFactoryResetProtectionPolicy

V-277017 in V1R3

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R3 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.