STIGQter STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 02 Jul 2025:

The HP FlexFabric Switch must allow the use of a temporary password for system logons with an immediate change to a permanent password.

DISA Rule

SV-230178r961863_rule

Vulnerability Number

V-230178

Group Title

SRG-APP-000516-NDM-000317

Rule Version

HFFS-ND-000113

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to allow the use of a temporary password for system logons with an immediate change to a permanent password.

[HP] password-control enable

Note: Once password control feature is enabled, user is forced to change password upon next logon.

Check Contents

Determine if the HP FlexFabric Switch allows the use of a temporary password for system logons with an immediate change to a permanent password. This requirement may be verified by demonstration, configuration review, or validated test results. This requirement may be met through use of a properly configured authentication server if the device is configured to use the authentication server.

[HP] display password-control

Global password control configurations:
Password control: Enabled

If the use of a temporary password for system logons with an immediate change to a permanent password is not allowed, this is a finding.

Vulnerability Number

V-230178

Documentable

False

Rule Version

HFFS-ND-000113

Severity Override Guidance

Determine if the HP FlexFabric Switch allows the use of a temporary password for system logons with an immediate change to a permanent password. This requirement may be verified by demonstration, configuration review, or validated test results. This requirement may be met through use of a properly configured authentication server if the device is configured to use the authentication server.

[HP] display password-control

Global password control configurations:
Password control: Enabled

If the use of a temporary password for system logons with an immediate change to a permanent password is not allowed, this is a finding.

Check Content Reference

M

Target Key

4037