Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-24345 | HMC0010 | SV-29999r1_rule | PECF-1 PECF-2 PEPF-1 PEPF-2 | High |
Description |
---|
The Hardware Management Console is used to perform Initial Program Load (IPLs) and control the Processor Resource/System Manager (PR/SM). If the Hardware Management Console is not located in a secure location, unauthorized personnel can bypass security, access the system, and alter the environment. This can lead to loss of secure operations if not corrected immediately. |
STIG | Date |
---|---|
IBM HARDWARE MANAGEMENT CONSOLE (HMC) STIG | 2014-04-10 |
Check Text ( C-2873r1_chk ) |
---|
Verify the location of the Hardware Management Console. It should be located in a controlled area. Access to it should be restricted. If the Hardware Management Console is not located in a secure location this is a FINDING. |
Fix Text (F-2339r1_fix) |
---|
Move the Hardware Management Console to a secure location and implement access controls for authorized personnel. |