What changed in Samsung Android OS 13 with Knox 3.x COBO STIG V2R3V2R3 changes

Title

Samsung Android must be configured to enable authentication of personal hotspot connections to the device using a pre-shared key.

Check text

Review the configuration to determine if the Samsung Android devices are either enabling dataauthentication atof restpersonal protectionhotspot forconnections removableto media,the ordevice areusing disablinga theirpreshared usekey. This requirement is not applicable for devices that do not support removable storage media. This validation procedure is performed on both the management tool and the Samsung Android device. On the management tool, in the device restrictions, verify that "MountConfigure physical mediatethering" is set to "Disallow". On the Samsung Android device,: verify 1. thatOpen aSettings microSD>> card cannot be mountedConnections. The2. deviceVerify should"Mobile ignoreHotspot the inserted SD card and noTethering" notificationsis forgrayed the transfer of media files should appear, nor should any files be listed using a file browser, such as Samsung My Filesout. If on the management tool "MountConfigure physical mediatethering" is not set to "Disallow", or on the Samsung Android device a"Mobile microSDHotspot cardand canTethering" beis mountednot grayed out, this is a finding. If the deployment requires the use of microMobile SDHotspot cardsand Tethering, follow this alternative procedure: On the management tool, in the device restrictionsWi-Fi section, verify "EnforceUnsecured external storage encryptionhotspot" is set to "EnableDisallow". On the Samsung Android device, do the following: 1. InsertOpen aSettings freshly>> formattedConnections microSD>> card. 2.Mobile VerifyHotspot thatand aTethering prompt>> appearsMobile toHotspot. 2. encryptTap the microSD card"Configure". 3. PerformTap the encryption."Security" section 4. RemoveTap andoption reinsert"Open" in the microSD"Security" carddrop-down andbox. 5. verifyIf that a notificationwarning appearsmessage statingis thatdisplayed, thetap mounted"Continue". 6. microSDVerify card"Save" is encrypteddisabled. If on the management tool "ExternalUnsecured storage encryptionhotspot" is not set to "EnableDisallow", or on the Samsung Android device a"Open" microSD card can be usedselected withoutin firstthe being"Security" encrypteddrop-down box and the configuration can be saved, this is a finding.

Fix text

Configure the Samsung Android devices to enable authentication of personal hotspot connections to the device using a pre-sharedpreshared key. On the management tool, in the device restrictions, set "Configure tethering" to "Disallow". If the deployment requires the use of Mobile Hotspot and Tethering, KPE policy can be used to allow its usage in a STIG-approved configuration. In this case, do not configure the policy above, and instead: On the management tool, in the device Wi-Fi section, set "Unsecured hotspot" to "Disallow" and add Training Topic "Don't use Wi-Fi Sharing" (see supplemental document for additional information).

V-255122 in V2R3