STIGQter STIGQter: STIG Summary: z/OS TDMF for TSS Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

Transparent Data Migration Facility (TDMF) configuration/parameter/option values are not specified properly.

DISA Rule

SV-225612r1146166_rule

Vulnerability Number

V-225612

Group Title

SRG-OS-000018

Rule Version

ZTDM0040

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

The product systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct.

See the required parameters below:

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Note: The ISSO will ensure that volume resource protection is defined to the ACP and access to volumes be given to the appropiate personnel.

Check Contents

Have the products systems programmer display the configuration/parameters control statements used in the current running product to define or enable security.

If the following keywords specify the values in the Transparent Data Migration Facility (TDMF) security parameter member, this is not a finding.

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Vulnerability Number

V-225612

Documentable

False

Rule Version

ZTDM0040

Severity Override Guidance

Have the products systems programmer display the configuration/parameters control statements used in the current running product to define or enable security.

If the following keywords specify the values in the Transparent Data Migration Facility (TDMF) security parameter member, this is not a finding.

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Check Content Reference

M

Target Key

4209