← Back to VMware Workspace ONE UEM Security Technical Implementation Guide

V-221646

CAT I (High)

The Workspace ONE UEM server must be maintained at a supported version.

Rule ID

SV-221646r986316_rule

STIG

VMware Workspace ONE UEM Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000366

Discussion

The MDM/EMM vendor maintains specific product versions for a specific period of time. MDM/EMM server versions no longer supported by the vendor will not receive security updates for new vulnerabilities which leaves them subject to exploitation. SFR ID: FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.2

Check Content

Verify the installed version of Workspace ONE UEM server is currently supported.

On the Workspace ONE UEM server console, do the following to determine the version number of the server:
1. Authenticate to the Workspace ONE UEM console as the administrator.
2. Click "About" on the bottom of the left hand menu. The version and build of the installed software will be displayed.

List of current supported versions: https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/product-lifecycle-matrix.pdf, scroll to Workspace ONE UEM Console.

If the displayed Workspace ONE server version is not currently supported, this is a finding.

Fix Text

Update the Workspace ONE UEM server to a supported version. See (https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/product-lifecycle-matrix.pdf) for the list of current Workspace ONE UEM supported versions.