The Samsung Android device must be provisioned as a fully managed device and configured to create a work profile.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-258696 | PP-MDF-993300 | KNOX-14-225040 | SV-258696r959010_rule | 2025-08-28 | 2 |
Description
The Android Enterprise work profile is the designated application group for the COPE use case.
SFR ID: FMT_SMF_EXT.1.1 #47
ℹ️ Check
Verify requirement KNOX-14-210010 (COPE enrollment) has been implemented.
If "COPE enrollment" has not been implemented, this is a finding."
✔️ Fix
Implement "COPE enrollment" (refer to requirement KNOX-14-210010).