TMA-ANDROID-1.16
Ensure 'Allow remote lock and erase' is set to 'Enabled'
Description
The allow remote lock and erase setting allows users to remotely lock their device with a new passcode or erase all data in the event of loss or theft. The recommended state for this setting is: Enabled.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Follow the below steps to verify that Allow remote lock and erase setting is Enabled: phone's Settings app > Security > Device admin apps > Verify that Find My Device is Enabled and Allow remote lock and erase is listed underneath.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the below steps to enable Allow remote lock and erase: phone's Settings app > Security > Device admin apps > Find My Device toggle > Activate this device.
Properties
- Operating systems
- Any
- Tags
- androiddevice-settings
- Reference
- CIS Google Android Benchmark v1.6.0 - 1.16 Ensure 'Allow remote lock and erase' is set to 'Enabled'