UCF STIG Viewer Logo

CA-ACF2 database must be on a separate physical volume from its backup and recovery data sets.


Finding ID Version Rule ID IA Controls Severity
V-223478 ACF2-ES-000600 SV-223478r533198_rule Medium
Configuring the operating system to implement organization-wide security implementation guides and security checklists ensures compliance with federal standards and establishes a common security baseline across DoD that reflects the most restrictive security posture consistent with operational requirements.
IBM z/OS ACF2 Security Technical Implementation Guide 2022-06-22


Check Text ( C-25151r504546_chk )
From the ACF Command screen enter:

If the ESM database is not located on the same volume as either its alternate or backup file, this is not a finding.

If the ESM database is collocated with either its alternate or backup, this is a finding.
Fix Text (F-25139r504547_fix)
Configure the placement of ESM files are on a separate volume from its backup and recovery data sets to provide backup and recovery in the event of physical damage to a volume.

Identify the ESM database(s), backup database(s), and recovery data set(s). Develop a plan to keep these data sets on different physical volumes. Implement the movement of these critical ESM files.

File location is an often overlooked factor in system integrity. It is important to ensure that the effects of hardware failures on system integrity and availability are minimized. Avoid collocation of files such as primary and alternate databases. For example, the loss of the physical volume containing the ESM database should not also cause the loss of the ESM backup database as a result of their collocation. Files that will be segregated from each other on separate physical volumes include, but are not limited to, the ESM database and its alternate or backup file.