The UEM Agent must queue alerts if the trusted channel is not available.

Alerts providing notification of a change in enrollment state facilitate verification of the correct operation of security functions. When an UEM server receives such an alert from an UEM Agent, it indicates the security policy may no longer be enforced on the mobile device. This enables the UEM administrator to take an appropriate remedial action.

Satisfies: FAU_ALT_EXT.2.2

Verify the UEM Agent queues alerts if the trusted channel is not available.

If the UEM Agent does not queue alerts if the trusted channel is not available, this is a finding.

Configure the UEM Agent to queue alerts if the trusted channel is not available.