IBM Hardware Management Console (HMC) STIG
Rules, Groups, and Values defined within the XCCDF Benchmark
-
HLP0030
<GroupDescription></GroupDescription>Group -
Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.
<VulnDiscussion>Unrestricted control over the issuing of system commands by a Logical Partition could result in unauthorized data access and ...Rule Medium Severity -
HLP0040
<GroupDescription></GroupDescription>Group -
Classified Logical Partition (LPAR) channel paths must be restricted.
<VulnDiscussion>Restricted LPAR channel paths are necessary to ensure data integrity. Unrestricted LPAR channel path access could result in a...Rule High Severity -
HLP0050
<GroupDescription></GroupDescription>Group -
On Classified Systems the Processor Resource/Systems Manager (PR/SM) must not allow access to system complex data.
<VulnDiscussion>Allowing unrestricted access to all Logical Partition data could result in the possibility of unauthorized access and updatin...Rule Medium Severity -
HLP0060
<GroupDescription></GroupDescription>Group -
Central processors must be restricted for classified/restricted Logical Partitions (LPARs).
<VulnDiscussion>Allowing unrestricted access to classified processors for all LPARs could cause the corruption and loss of classified data se...Rule High Severity -
HMC0035
<GroupDescription></GroupDescription>Group -
Dial-out access from the Hardware Management Console Remote Support Facility (RSF) must be disabled for all classified systems.
<VulnDiscussion>This feature will not be activated for any classified systems. Allowing dial-out access from the Hardware Management Console ...Rule High Severity -
HLESC085
<GroupDescription></GroupDescription>Group -
A maximum of 60-minute delay must be specified for the password retry after 3 failed attempts to enter your password
<VulnDiscussion>The Maximum failed attempts before disable delay is not set to 3. This specifies the number of consecutive incorrect password...Rule Low Severity -
HMC0225
<GroupDescription></GroupDescription>Group -
Connection to the Internet for IBM remote support must be in compliance with mitigations specified in the Ports and Protocols and Services Management (PPSM) requirements.
<VulnDiscussion>Failure to securely connect to remote sites can leave systems open to multiple attacks and security violations through the ne...Rule High Severity -
HMC0090
<GroupDescription></GroupDescription>Group -
Hardware Management Console management must be accomplished by using the out-of-band or direct connection method.
<VulnDiscussion>Removing the management traffic from the production network diminishes the security profile of the Hardware Management Consol...Rule Medium Severity -
Predefined task roles to the Hardware Management Console (HMC) must be specified to limit capabilities of individual users.
<VulnDiscussion>Individual task roles with access to specific resources if not created and restricted, will allow unrestricted access to syst...Rule Medium Severity -
HMC0100
<GroupDescription></GroupDescription>Group -
Individual user accounts with passwords must be maintained for the Hardware Management Console operating system and application.
<VulnDiscussion>Without identification and authentication, unauthorized users could reconfigure the Hardware Management Console or disrupt it...Rule Medium Severity -
HMC0110
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.