← Back to Google Android 17 COBO Security Technical Implementation Guide

V-284732

CAT III (Low)

Android 17 devices must be configured to enable Common Criteria (CC) mode.

Rule ID

SV-284732r1240518_rule

STIG

Google Android 17 COBO Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

The CC mode feature is a superset of other features and behavioral changes that are mandatory MDFPP requirements. If CC mode is not implemented, the device will not be operating in the NIAP-certified compliant CC mode of operation. CC mode implements the following behavioral/functional changes: How the Bluetooth and Wi-Fi keys are stored using different types of encryption. SFR ID: FMT_SMF.1.1 #47

Check Content

Review the managed Google Android 17 configuration settings to confirm CC mode is enabled. 
 
This procedure is performed on the EMM administration console.
 
COBO and COPE:

1. Open Device owner management.
2. Verify that "Enable Common Criteria mode" is toggled to "ON".

If CC mode is not enabled, this is a finding.

Fix Text

Configure the Google Android 17 device to implement CC mode. 
 
On the EMM console:

COBO and COPE:

1. Open Device owner management.
2. Toggle "Enable Common Criteria mode" to "ON".

Configuration API: setCommonCriteriaModeEnabled