IBM Passtickets must be configured to be KeyEncrypted.
An XCCDF Rule
Description
Passwords such as IBM Passtickets need to be protected at all times, and encryption is the standard method for protecting such passwords. If passwords are not encrypted, they may be plainly read (i.e., clear text) and easily compromised.
- ID
- SV-257135r998383_rule
- Version
- RACF-ES-000860
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Ensure that all Passticket profiles are configured to be KeyEncrypted.