The PASSWORD History Count value must be set to 10 or greater.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-256878	HMC0110	SV-256878r998329_rule		Medium

Description
History Count specifies the number of previous passwords saved for each USERID and compares it with an intended new password. If there is a match with one of the previous passwords, or with the current password, it will reject the intended new password. The improper setting of any of these fields, individually or in combination with another, can compromise the security of the processing environment.

Description

History Count specifies the number of previous passwords saved for each USERID and compares it with an intended new password. If there is a match with one of the previous passwords, or with the current password, it will reject the intended new password. The improper setting of any of these fields, individually or in combination with another, can compromise the security of the processing environment.

STIG	Date
IBM Hardware Management Console (HMC) Security Technical Implementation Guide	2024-06-24

Details

Check Text ( C-60553r998327_chk )
Have the system administrator (SA) display the Password Profile Task window on the Hardware Management Console and validate that the History Count is set to 10. If the History Count is less than 10, then this is a finding.

Fix Text (F-60496r998328_fix)
Have the SA go into the Password Profile and set the History Count to 10 or greater.