PWS_TE_00. DoD Enterprise Mobility Authorized Devices and Peripherals for DMUC_SEP_2024.pdf

DEFENSE INFORMATION SYSTEMS AGENCY

P. O. BOX 549

FORT MEADE, MARYLAND 20755-0549

1 UNCLASSIFIED DoD Enterprise Mobility

September 30, 2024 DoD Enterprise Mobility, DISA

MEMORANDUM FOR DMUC AUTHORIZED DEVICES

SUBJECT: Department of Defense (DoD) Enterprise Mobility Authorized Devices and

Peripherals for DoD Mobility Unclassified Capability (DMUC)

References: (a) DISA Memo, AO, Authorization to Operate for the DoD Mobility, eMASS System

ID 12, DITPR ID 15599 (U), 26 Sep 2014

(b) FIPS 140-2/3 Security Requirements for Cryptographic Modules, National Institute for Standards and Technology (NIST) FIPS Publication

(c) Department of Defense Instruction (DODI) 8100.04 DoD Unified Capabilities

(UC), 9 Dec 2010

(d) Chairman of the Joint Chiefs of Staff Instruction (CJCSI) 6211.02D, Defense

Information Systems Network (DISN) Responsibilities, 24 Jan 2012

1. (U) This memorandum supersedes any previously issued authorizations pertaining to DoD Enterprise Mobility authorized devices.

2. (U) All device requests must meet the following criteria:

a. Combatant Command/Service/Agency/Field Activity (CC/S/A/FA) must be a sponsor.

b. Device Operating System (OS) must be approved based on reference (a) and amendments.

c. Device must be Federal Information Processing Standards (FIPS) 140-2/3 compliant based on reference (b).

d. Device must be evaluated against an active and appropriate DISA Security Technical

Implementation Guide (STIG).

e. Device must be able to receive security patches from the vendor and/or carrier.

Note: Devices are routinely evaluated based on changes to their OSs or commercial market availability and may result in End-of-Support (EOS) or End-of-Life (EOL) labeling by DMUC.

3. (U) In accordance with provisions set forth in references (a) through (d), DoD Enterprise Mobility authorizes the use of the following iOS, iPadOS, and Android mobile devices on the Mobility infrastructure. Apple devices will be labeled EOS when Apple has announced them to be incompatible with the upcoming major OS updates. These EOS Apple devices will become EOL when they stop receiving critical security updates or are no longer included in the JFHQ-DoDIN Information Assurance Vulnerability Alert (IAVA). Android devices will be labeled EOS 90 days before they stop receiving security updates or support an active STIG. After 90 days, these EOS Android devices will become EOL.

IN REPLY

REFER TO:

2 UNCLASSIFIED DoD Enterprise Mobility

*Zebra devices require non-standard configurations. Coordination with

DMUC PMO is required prior to support. It is not recommended to procure without prior authorization.

Apple Devices (iOS/iPadOS 18.X) iPhone XS / XS Max / XR iPhone 11 / 11 Pro / 11 Pro Max iPhone 12 / 12 mini / 12 Pro / 12 Pro Max iPhone 13 / 13 mini / 13 Pro / 13 Pro Max iPhone 14 / 14 Plus / 14 Pro / 14 Pro Max iPhone 15 / 15 Plus / 15 Pro / 15 Pro Max iPhone 16 / 16 Plus / 16 Pro / 16 Pro Max iPhone SE 2 / 3 iPad 7 / 8 / 9 / 10 iPad Air 3 / 4 / 5 / 11-inch (M2) / 13-inch (M2) iPad mini 5 / 6 iPad Pro 11-inch 1 / 2 / 3 / 4 / (M4) iPad Pro 12.9-inch 3 / 4 / 5 / 6 iPad Pro 13-inch (M4)

Devices Approaching Retirement (EOS) None

Retired Devices (EOL) iPhone 4 / 4s iPhone 5 / 5c / 5s iPhone 6 / 6 Plus / 6s / 6s Plus iPhone 7 / 7 Plus iPhone 8 / 8 Plus iPhone X iPhone SE 1st Gen iPod touch 6 / 7 iPad 2 / 3 / 4 / 5 / 6 iPad Air 1 / 2 iPad mini 1 / 2 / 3 / 4 iPad Pro 9.7-inch iPad Pro 10.5-inch iPad Pro 12.9-inch 1 / 2

Google Devices (Android 14.X) Pixel 6 / 6 Pro / 6a Pixel 7 / 7 Pro / 7a Pixel 8 / 8 Pro / 8a Pixel Fold Pixel Tablet

Devices Approaching Retirement (EOS) Pixel 5a 5G

Retired Devices (EOL) Pixel 4a / 4a 5G Pixel 5 / 5a 5G

Zebra Devices* (Android 13.X)

TC72 / TC73

Samsung Galaxy Devices (Android 14.X) S21 / S21 5G / S21+ / S21+ 5G S21 Ultra / S21 Ultra 5G / S21 FE 5G S22 / S22+ / S22 Ultra S23 / S23+ / S23 Ultra / S23 FE S24 / S24+ / S24 Ultra A52 / A52 5G A53 5G XCover6 Pro Z Fold3 5G / Z Fold4 5G / Z Fold5 / Z Fold6 Z Flip3 5G / Z Flip4 5G / Z Flip5 / Z Flip6 Tab S8 / Tab S8+ / Tab S8 Ultra Tab S9 / Tab S9+ / Tab S9 Ultra / Tab S9 FE Tab Active4 Pro

Devices Ineligible to Receive Android 14 Tab Active3

Devices Approaching Retirement (EOS) XCover Pro Note20 Ultra / Note20 Ultra 5G Note20 / Note20 5G S20 / S20 5G / S20+ / S20+ 5G S20 Ultra / S20 Ultra 5G Z Fold2 / Z Fold2 5G Tab S7 / Tab S7 5G

Retired Devices (EOL) S4 / S5 S6 / S6 Active / S6 Edge / S6 Edge+ S7 / S7 Active / S7 Edge S8 / S8+ / S8 Active S9 / S9+ S10 / S10 5G / S10+ / S10e

S20 FE / S20 FE 5G

A42 5G A51 / A51 5G A71 / A71 5G Note 10.1 2014 Edition Note Pro 12.2 Note5 / Note8 / Note9 Note10 / Note10 5G / Note10+ / Note10+ 5G XCover FieldPro Fold / Fold 5G Z Flip / Z Flip 5G Tab S2 8.0” / Tab S2 9.7” Tab S3 / Tab S4 / Tab S6 / Tab S6 5G Tab S7+ / Tab S7+ 5G / Tab S7 FE 5G

3 UNCLASSIFIED DoD Enterprise Mobility

4. (U) Facial recognition (Face ID) is disabled on iOS and iPadOS devices for customers with disabled camera policies.

5. (U) Smart Card Readers – Purebred Derived Credentials is the approved digital certificate solution for all device platforms on DMUC. Purebred offers the ability to derive, install, and use digital certificates for Secure/Multipurpose Internet Mail Extensions (S/MIME) capability on DMUC devices.

6. (U) Bluetooth – DoD CIO directives and DISA STIG do not prohibit certain classes of Bluetooth. Pairing a DMUC device with AirPods and similar wireless Bluetooth headphones and headsets is allowed. However, DISA STIG prohibits pairing of a DMUC device with an Apple Watch.

7. (U) Apple Business Manager (ABM) – Apple requires all devices be Supervised (enables MDM-managed iOS and iPadOS devices to have an extra layer of security enforced), regardless of device type or version. To meet this requirement, DISA’s preferred method is for all Mission Partners to enroll in ABM which is a free program and the most efficient way to enable supervision. To enroll, Mission Partners must procure Apple devices from Apple, Apple Authorized Reseller, or wireless carrier that has a Reseller ID. When setting up device and carrier procurement contracts, it is recommended that language be included in the Performance Work Statement (PWS) that references the requirement for vendors to be able to provide a Reseller ID. This will ensure all Apple devices procured from the contract vehicle are ABM enabled. Details on DMUC ABM are located on the ABM Site.

8. (U) Android Enterprise (AE) – DMUC Android devices require AE enrollment. Details on Android Enterprise are located on the AE Site.

9. (U) Android Device Compliance – Attempting to enroll EOS, EOL, or unapproved Android devices is prohibited and will result in the following error message, “Unable to complete registration (Invalid Manufacturer). Please contact your administrator.” If this error occurs when you are trying to enroll an approved Android device, please contact your Tier I Administrator.

10. (U) Apple Device Compliance – Attempting to enroll EOL or unapproved Apple devices is prohibited. EOL devices will be removed from the Mobility infrastructure.

11. (U) For questions or concerns, please contact the Customer Support Team.

Pravin Ponnuri DMUC Device & OS DoD Enterprise Mobility, DISA https://dod365.sharepoint-mil.us/sites/DISA-DOD-Mobility/SitePages/DEPImplementation.aspx https://dod365.sharepoint-mil.us/sites/DISA-DOD-Mobility/SitePages/Android%20Enterprise.aspx mailto:disa.meade.j-9.mbx.hc411-cst@mail.mil