Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-256868 | HMC0010 | SV-256868r991589_rule | High |
Description |
---|
The Hardware Management Console is used to perform Initial Program Load (IPLs) and control the Processor Resource/System Manager (PR/SM). If the Hardware Management Console is not located in a secure location, unauthorized personnel can bypass security, access the system, and alter the environment. This can lead to loss of secure operations if not corrected immediately. |
STIG | Date |
---|---|
IBM Hardware Management Console (HMC) Security Technical Implementation Guide | 2024-06-24 |
Check Text ( C-60543r890948_chk ) |
---|
Verify the location of the Hardware Management Console. It should be located in a controlled area. Access to it should be restricted. If the Hardware Management Console is not located in a secure location this is a FINDING. |
Fix Text (F-60486r890949_fix) |
---|
Move the Hardware Management Console to a secure location and implement access controls for authorized personnel. |