Android GOOG-17-009200
DISA STIG recommends
GOOG-17-009200 CAT II
Google Android 17 must be configured to disallow configuration of date and time.
NIST SP 800-53: CM-6
Check
Review the managed Google Android 17 device configuration settings to confirm that configuration of date and time are disabled. This procedure is performed on both the EMM administration console and the managed Google Android 17 device. On the EMM console: COBO: 1. Open "Set user restrictions". 2. Verify that "Disallow config date time" is toggled to "ON". COPE: 1. Open "Set user restrictions on parent". 2. Verify that "Disallow config date time" is toggled to "ON". On the managed Google Android 17 device: COBO and COPE: 1. Open Settings. 2. Tap "System". 3. Tap "Date & time". 4. Verify that "Set time automatically" is grayed out and is "Enabled by admin". If on the EMM console "Disallow config date time" is not set to "ON", or on the managed Android 17 device "Set time automatically" is not grayed out, this is a finding.
Fix
Configure the Google Android 17 device to set auto network time. On the EMM console: COBO: 1. Open "Set user restrictions". 2. Toggle "Disallow config date time" to "ON". COPE: 1. Open "Set user restrictions on parent". 2. Toggle "Disallow config date time" to "ON". Configuration API: SetAutoTimeRequired – on Parent DISALLOW_CONFIG_DATE_TIME – on User
Our decision
Apply as published
No decision recorded: the recommendation stands. The owner signs in to change it.
All Android decisions · The Android baseline · The Android test plan