ºÚÁϺ£½Ç91Èë¿Ú

Create an Android Common Criteria Mode Policy

The Android Common Criteria Mode Policy lets you configure Common Criteria (CC) Mode for fully managed and dedicated Android devices. CC Mode simplifies device configuration and ensures that devices are compliant with security standards set in the . This policy works for devices running Android 6.0 and later.

Warning:

CC Mode enforces a strict security model typically only required for IT products used in national security systems and other highly sensitive organizations. Standard device use might be affected. 

Prerequisites

To create an Android Common Criteria Mode policy:

  1. Log in to the ºÚÁϺ£½Ç91Èë¿Ú Admin Portal: .
  2. Go to DEVICE MANAGEMENT > Policy Management.
  3. In the All tab, click (+).
  4. On the New Policy panel, select the Android tab.
  5. Select the Common Criteria Mode policy from the list, then click configure.
  6. On the New Policy panel, optionally enter a new name for the policy, or keep the default. Policy names must be unique.
  7. For Policy Notes, enter details like when you created the policy, where you tested it, and where you deployed it.
  8. Under Settings, select the Common Criteria Mode:
    • Select Disable to disable CC Mode. This is the default option.
    • Selected Enable to enable CC Mode to increase security for components such as AES-GCM encryption for Bluetooth Long Term keys, as well as WiFi configuration stores.
      New Android Common Criteria Mode Policy window in the ºÚÁϺ£½Ç91Èë¿Ú Admin Console.
  9. (Optional) Select the Device Groups tab. Select one or more device groups where you will apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
  10. (Optional) Select the Devices tab. Select one or more devices where you will apply this policy.

Tip:

For this policy to take effect, you must specify a device or a device group in Step 9 or Step 10.

  1. Click save.
Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case