STIGQter STIGQter: STIG Summary: CA IDMS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

CA IDMS must secure the ability to create, alter, drop, grant, and revoke user and/or system profiles to users or groups.

DISA Rule

SV-251607r960960_rule

Vulnerability Number

V-251607

Group Title

SRG-APP-000133-DB-000362

Rule Version

IDMS-DB-000270

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

The SRTT module must be coded to secure SYSADMIN. When using an ESM, this could be done in the following manner:

#SECRTT TYPE=ENTRY, X
RESTYPE=SYSA, X
SECBY=EXTERNAL , X
EXTNAME=(ENVIR,RESTYPE), X
EXTCLS='CA@IDMS'

Using the above example and supposing that was specified ENVNAME=TESTSYS on the INITIAL SRTT entry, the external resource name would be TESTSYS.SYSA. To give access using to a user in Top Secret the command would be:
TSS PER(user_id) CA@IDMS(TESTSYS.SYSA)

After making the above changes, assemble and link RHDCSRTT to create a new SRTT. To implement the new SRTT, either recycle any CVs that use the SRTT or issue these commands:

DCMT VARY NUCLEUS MODULE RHDCSRTT NEW COPY
DCMT VARY NUCLEUS RELOAD

Check Contents

Examine load module RHDCSRTT by executing CA IDMS utility IDMSSRTD, or by issuing command "DCMT DISPLAY SRTT" while signed onto the CV, and reviewing the output.

Note: This requires PTFs SO07995 and SO09476.

Check the SRTT for externally secured RESTYPE=SYSA. If none is found, this is a finding. If the entry is secured internally, this is a finding.

Vulnerability Number

V-251607

Documentable

False

Rule Version

IDMS-DB-000270

Severity Override Guidance

Examine load module RHDCSRTT by executing CA IDMS utility IDMSSRTD, or by issuing command "DCMT DISPLAY SRTT" while signed onto the CV, and reviewing the output.

Note: This requires PTFs SO07995 and SO09476.

Check the SRTT for externally secured RESTYPE=SYSA. If none is found, this is a finding. If the entry is secured internally, this is a finding.

Check Content Reference

M

Target Key

5418