STIGQter: STIG Summary: IBM Hardware Management Console (HMC) STIG Version: 1 Release: 5 Benchmark Date: 20 Jan 2015:

Predefined task roles to the Hardware Management Console (HMC) must be specified to limit capabilities of individual users.

DISA Rule

SV-30022r2_rule

Vulnerability Number

V-24354

Group Title

HMC0090

Rule Version

HMC0090

Severity

CAT II

CCI(s)

• CCI-000213 - The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

The System Administrator must set up a list of Users

Note: Sites must have a list of valid HMC users, indicating their USER IDs, Date of DD2875, and roles and responsibilities
and these must match the users defined to the HMC.

To display user roles chose User Profiles and then select the user for modification. View Task Roles and Manager Resources Roles.

Check Contents

Have the System Administrator display the user profiles and demonstrate that valid users are defined to valid roles and that authorities are restricted to the site list of users.

Note: Sites must have a list of valid HMC users, indicating their USER IDs, Date of DD2875, and roles and responsibilities.

To display user roles chose User Profiles and then select the user for modification. View Task Roles and Manager Resources Roles.

If the different roles are not properly displayed or are not properly restricted, then this is a FINDING.

Vulnerability Number

V-24354

Documentable

False

Rule Version

HMC0090

Severity Override Guidance

Have the System Administrator display the user profiles and demonstrate that valid users are defined to valid roles and that authorities are restricted to the site list of users.

Note: Sites must have a list of valid HMC users, indicating their USER IDs, Date of DD2875, and roles and responsibilities.

To display user roles chose User Profiles and then select the user for modification. View Task Roles and Manager Resources Roles.

If the different roles are not properly displayed or are not properly restricted, then this is a FINDING.

Check Content Reference

M

Responsibility

Systems Programmer

Target Key

1891

Comments