STIGQter STIGQter: STIG Summary: CA IDMS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

The system storage used for data collection by the CA IDMS server must be protected.

DISA Rule

SV-251645r961638_rule

Vulnerability Number

V-251645

Group Title

SRG-APP-000441-DB-000378

Rule Version

IDMS-DB-000810

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Use the following system generation parameters to enable the use of high performance storage protection:

Set STORAGE KEY parameter of the SYSTEM statement to "9".

Set PROTECT/NOPROTECT parameter of the SYSTEM statement to "PROTECT".

Set PROTECT/NOPROTECT parameter of the PROGRAM statement to "PROTECT" for PROGRAMS required to run with the alternate protect key (i.e., 9).

DCMT DISPLAY ALL STORAGE POOLS can be used to take note of what pools support any type of user storage; that is, user, user-kept, shared, shared-kept, or ALL, in preparation for the next step.

If necessary, redefine storage pools so all forms of user-oriented storage (user, user-kept, shared, and shared-kept) are segregated from the system storage (database, terminal). For example:
ADD STORAGE POOL 1
CONTAINS TYPES ( SHARED SHARED-KEPT USER USER-KEPT )
ADD XA STORAGE POOL 128
CONTAINS TYPES ( USER USER-KEPT )
ADD XA STORAGE POOL 129
CONTAINS TYPES ( SHARED SHARED-KEPT )
ADD XA STORAGE POOL 130
CONTAINS TYPES ( TERMINAL DATABASE )

Generate and start the system. The storage pool definitions have been set up correctly if the message "DC004001 HPSPO HAS BEEN DISABLED DUE TO INCORRECT STORAGE POOL DEFINITIONS" is not issued at startup.

Check Contents

Log on to IDMS DC system and issue DCPROFIL.

If HPSPO ENABLED: display is "NO", this is a finding.

Vulnerability Number

V-251645

Documentable

False

Rule Version

IDMS-DB-000810

Severity Override Guidance

Log on to IDMS DC system and issue DCPROFIL.

If HPSPO ENABLED: display is "NO", this is a finding.

Check Content Reference

M

Target Key

5418