Skip to content

IBM Hardware Management Console (HMC) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000080-GPOS-00048

    Group
  • Access to the Hardware Management Console (HMC) must be restricted by assigning users proper roles and responsibilities.

    Access to the HMC if not properly controlled and restricted by assigning users proper roles and responsibilities, could allow modification to areas outside the need-to-know and abilities of the ind...
    Rule Medium Severity
  • SRG-OS-000324-GPOS-00125

    Group
  • Automatic Call Answering to the Hardware Management Console must be disabled.

    Automatic Call Answering to the Hardware Management Console allows unrestricted access by unauthorized personnel and could lead to a bypass of security, access to the system, and an altering of the...
    Rule Medium Severity
  • SRG-OS-000062-GPOS-00031

    Group
  • The Hardware Management Console Event log must be active.

    The Hardware Management Console controls the operation and availability of the Central Processor Complex (CPC). Failure to create and maintain the Hardware Management Console Event log could result...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    Group
  • SRG-OS-000080-GPOS-00048

    Group
  • SRG-OS-000104-GPOS-00051

    Group
  • Individual user accounts with passwords must be maintained for the Hardware Management Console operating system and application.

    Without identification and authentication, unauthorized users could reconfigure the Hardware Management Console or disrupt its operation by logging in to the system or application and execute unau...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules