STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

Central processors must be restricted for classified/restricted Logical Partitions (LPARs).

DISA Rule

SV-256867r958472_rule

Vulnerability Number

V-256867

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

HLP0060

Severity

CAT I

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Review the Processor Page under PR/SM and turn on the Dedicated Central Processor option for classified or restricted LPARs. For unclassified LPARs, this option should not be turned on, unless determined by the site.

Check Contents

Have the system administrator or systems programmer use the Hardware Management Console; to verify that the LPAR processors are dedicated for exclusive use by classified LPARs.

Use the Processor Page to do this. The Dedicated Central Processors option must be turned on.

If Central processors are not restricted for classified/restricted LPARs, this is a FINDING.

Vulnerability Number

V-256867

Documentable

False

Rule Version

HLP0060

Severity Override Guidance

Have the system administrator or systems programmer use the Hardware Management Console; to verify that the LPAR processors are dedicated for exclusive use by classified LPARs.

Use the Processor Page to do this. The Dedicated Central Processors option must be turned on.

If Central processors are not restricted for classified/restricted LPARs, this is a FINDING.

Check Content Reference

M

Target Key

5533