Zebra Android 14 STIG (Y26M01)

16 items · Security · Hard difficulty · 4 hours

Implement Zebra Android 14 STIG controls for secure COBO/COPE Zebra devices.

• Apply Zebra Android 14 STIG baseline profile

  Deploy the official STIG configuration profile to managed Zebra devices.

• Verify device ownership mode is set to COBO or COPE

  Confirm enrolled devices use corporate-owned modes; BYOD/BYOAD are out of scope.

• Disable installation of unmanaged (personal) apps

  Prevent user-installed apps unless explicitly authorized by the AO.

• Restrict sideloading and block unknown sources

  Ensure only approved app stores and deployment channels are allowed.

• Enforce device encryption (file and/or full-disk)

  Ensure data at rest is encrypted using platform-approved crypto.

• Configure lock screen: PIN/password and complexity

  Set mandatory authentication and appropriate timeout/complexity controls.

• Set minimum PIN length to at least 6 digits

  Use a minimum length to reduce brute-force risk.

• Set auto-lock timeout to 1 minute or less

  Short timeout reduces exposure from unattended devices.

• Set maximum failed login attempts and auto-wipe

  Configure device to lock or wipe after repeated failures.

• Enable verified boot and secure boot settings

  Prevent boot-time tampering by enforcing verified boot.

• Apply latest OS security patches and updates

  Install vendor and Google security patches promptly.

• Disable developer options and USB debugging

  Prevent elevated access vectors via ADB and dev tools.

• Configure Wi-Fi and VPN per Network Infrastructure STIG

  Ensure only approved networks and secure VPN profiles are used.

• Require device attestation and MDM enrollment

  Enforce attestation to verify device integrity and MDM control.

• Enable logging and reporting to central management

  Forward audit logs and compliance reports to your SIEM/MDM.

• Test settings in a representative environment before production rollout

  Validate compatibility and user impact in a lab/test group.

Printed from TickYouOff — the interactive version tracks your progress and can be shared with others.