Skip to content

IBM Hardware Management Console (HMC) STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • HLESC085

    <GroupDescription></GroupDescription>
    Group
  • A maximum of 60-minute delay must be specified for the password retry after 3 failed attempts to enter your password

    &lt;VulnDiscussion&gt;The Maximum failed attempts before disable delay is not set to 3. This specifies the number of consecutive incorrect password...
    Rule Low Severity
  • HMC0225

    <GroupDescription></GroupDescription>
    Group
  • Connection to the Internet for IBM remote support must be in compliance with mitigations specified in the Ports and Protocols and Services Management (PPSM) requirements.

    &lt;VulnDiscussion&gt;Failure to securely connect to remote sites can leave systems open to multiple attacks and security violations through the ne...
    Rule High Severity
  • HMC0090

    <GroupDescription></GroupDescription>
    Group
  • Hardware Management Console management must be accomplished by using the out-of-band or direct connection method.

    &lt;VulnDiscussion&gt;Removing the management traffic from the production network diminishes the security profile of the Hardware Management Consol...
    Rule Medium Severity
  • Predefined task roles to the Hardware Management Console (HMC) must be specified to limit capabilities of individual users.

    &lt;VulnDiscussion&gt;Individual task roles with access to specific resources if not created and restricted, will allow unrestricted access to syst...
    Rule Medium Severity
  • HMC0100

    <GroupDescription></GroupDescription>
    Group
  • Individual user accounts with passwords must be maintained for the Hardware Management Console operating system and application.

    &lt;VulnDiscussion&gt;Without identification and authentication, unauthorized users could reconfigure the Hardware Management Console or disrupt it...
    Rule Medium Severity
  • HMC0110

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules