Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Unified Endpoint Management Agent Security Requirements Guide

The Unified Endpoint Management Agent Security Requirements Guide (V2 R1) has 14 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

14STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

ArchivedPublished Tue Oct 28 2025

The UEM Agent must use managed endpoint device key storage for all persistent secret and private keys.

Unified Endpoint Management Agent Security Requirements Guide

Assessment Title

Rule Text

Description

Discussion Text

If validated secure storage locations are not used for keys, they could be compromised.

Satisfies: FCS_STG_EXT.1(2)

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-234240

Rule

SV-234240r961041_rule

Severity

medium

Rule Version

SRG-APP-000176-UEM-100001

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

This requirement is not applicable if the UEM Agent is provided by the managed endpoint device operating system.

Verify the UEM Agent uses the managed endpoint device key storage for all persistent secret and private keys.

If the UEM Agent does not use the managed endpoint device key storage for all persistent secret and private keys, this is a finding.

Implementation Procedure

Fix Text

Configure the UEM Agent must use the managed endpoint device key storage for all persistent secret and private keys.

STIG check 6 of 14 in the Unified Endpoint Management Agent Security Requirements Guide checklist

← Previous · V-234239The UEM Agent must not install policies if the policy-signing certificate is deemed invalid.Next · V-234241 →The UEM Agent must queue alerts if the trusted channel is not available.