Skip to content

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000470-GPOS-00214

    Group
  • The IBM z/VM Journal option must be specified in the Product Configuration File.

    Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an in...
    Rule Medium Severity
  • SRG-OS-000066-GPOS-00034

    Group
  • SRG-OS-000067-GPOS-00035

    Group
  • The IBM z/VM TCP/IP Key database for LDAP or SSL server must be created with the proper permissions.

    If the private key is discovered, an attacker can use the key to authenticate as an authorized user and gain access to the network infrastructure. The cornerstone of the PKI is the private key use...
    Rule Medium Severity
  • SRG-OS-000073-GPOS-00041

    Group
  • CA VM:Secure product Password Encryption (PEF) option must be properly configured to store and transmit cryptographically-protected passwords.

    Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily c...
    Rule High Severity
  • SRG-OS-000076-GPOS-00044

    Group
  • SRG-OS-000078-GPOS-00046

    Group
  • IBM zVM CA VM:Secure product PASSWORD user exit must be in use.

    The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised. Password complexity, or strength, is a measure of the effectivene...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules