specifying a set of allowed applications based on [a digital signature or application name and version] (an application whitelist), denying installation of applications] import keys/secrets into the secure key M - √ √ storage destroy imported keys/secrets and [[any M - √ √ other keys/secrets]] in the secure key storage import X.509v3 certificates into the Trust M √ √ Anchor Database remove imported X.509v3 certificates M Windows Windows and [[all X.509v3 certificates]] in the 10 Mobile 10 Trust Anchor Database enroll the TOE in management M Windows Windows - 10 Mobile 10 remove applications M √ √ update system software M √ √ install applications M √ √ remove Enterprise applications M √ √ configure the Bluetooth trusted channel: M √ disable/enable the Discoverable mode (for BR/EDR) change the Bluetooth device name [ √ c. allow/disallow additional wireless technologies to be used with Bluetooth, d. disable/enable Advertising (for LE), e. disable/enable the Connectable mode f. disable/enable the Bluetooth services and/or profiles available on the device, g. specify minimum level of security for each pairing , h. configure allowable methods of Out of Band pairing i. no other Bluetooth configuration] enable/disable display notification in the M √ locked state of: [ email notifications, calendar appointments,
specifying a set of allowed applications based on [a digital signature or application name and version] (an application whitelist), denying installation of applications] import keys/secrets into the secure key storage M √ √ - destroy imported keys/secrets and [[any other keys/secrets]] in the secure key storage M √ √ - import X.509v3 certificates into the Trust Anchor Database M √ √ remove imported X.509v3 certificates and [[all X.509v3 certificates]] in the Trust Anchor Database M Windows 10 Mobile Windows 10 enroll the TOE in management M Windows 10 Mobile Windows 10 - remove applications M √ √ update system software M √ √ install applications M √ √ remove Enterprise applications M √ √ configure the Bluetooth trusted channel: disable/enable the Discoverable mode (for BR/EDR) change the Bluetooth device name M √ [ c. allow/disallow additional wireless technologies to be used with Bluetooth, d. disable/enable Advertising (for LE), e. disable/enable the Connectable mode f. disable/enable the Bluetooth services and/or profiles available on the device, g. specify minimum level of security for each pairing , h. configure allowable methods of Out of Band pairing i. no other Bluetooth configuration] √ enable/disable display notification in the locked state of: [ email notifications, calendar appointments, M √
windows%2010%20anniversary%20update%20mdf%20security%20target%20-%20public%20(april%203%202017).docx