← Back to BlackBerry PlayBook OS V2.1 Security Technical Implementation Guide

V-38712

CAT II (Medium)

BlackBerry PlayBook OS must enforce a minimum length for the work area password.

Rule ID

SV-50517r1_rule

STIG

BlackBerry PlayBook OS V2.1 Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000205

Discussion

Password complexity, or strength, is a measure of the effectiveness of a password in resisting guessing and brute force attacks. The ability to crack a password is a function of how many times an attempt to crack the password, how quickly the adversary can do each attempt, and the size of the password space. The longer the minimum length of the password is, the larger the password space.

Check Content

1. Navigate to "Options -> BlackBerry Balance".
2. Select the Pencil icon.
3. Select "Change Password".
4. Select "Password Rules".
5. Verify the dialog states: "Password must be at least 8 characters long". Otherwise, this is a finding.

Fix Text

On BlackBerry Device Service:
Set "Minimum Password Length" IT Policy rule to: 8.