STIGQter: STIG Summary: z/OS BMC MAINVIEW for z/OS for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

BMC MAINVIEW for z/OS configuration/parameter values are not specified properly.

DISA Rule

SV-224255r1141594_rule

Vulnerability Number

V-224255

Group Title

SRG-OS-000018

Rule Version

ZMVZA040

Severity

CAT II

CCI(s)

• CCI-000015 - Support the management of system accounts using (organization-defined automated mechanisms).
• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

The BMC MAINVIEW for z/OS Systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct. Set the standard values for the BMC MAINVIEW for z/OS security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Statement(values)
ESMTYPE(AUTO|ACF2)

Check Contents

Refer to the Configuration Location dataset and member specified in the z/OS Dialog Management Procedures for BMC MAINVIEW for z/OS.

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZMVZ0040).

The following keywords will have the specified values in the BMC MAINVIEW for z/OS security parameter member, this is not a finding.

Statement(values)
ESMTYPE(AUTO|ACF2)

Vulnerability Number

V-224255

Documentable

False

Rule Version

ZMVZA040

Severity Override Guidance

Refer to the Configuration Location dataset and member specified in the z/OS Dialog Management Procedures for BMC MAINVIEW for z/OS.

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZMVZ0040).

The following keywords will have the specified values in the BMC MAINVIEW for z/OS security parameter member, this is not a finding.

Statement(values)
ESMTYPE(AUTO|ACF2)

Check Content Reference

M

Target Key

4109