STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

Automatic Call Answering to the Hardware Management Console must be disabled.

DISA Rule

SV-256873r958726_rule

Vulnerability Number

V-256873

Group Title

SRG-OS-000324-GPOS-00125

Rule Version

HMC0050

Severity

CAT II

CCI(s)

• CCI-002227 - Restrict privileged accounts on the system to organization-defined personnel or roles.
• CCI-002235 - Prevent non-privileged users from executing privileged functions.

Weight

10

Fix Recommendation

The System Administrator must set dial-in facility to off. Do this by ensuring that both the Enable Remote Operations parameter and the Automatic Call Answering parameter are turned off.

In Check Content: Enable Remote Operations is found under Customize Remote Services and Automatic Call Answering is found under Customize Auto Answer Settings.

Check Contents

Have the System Administrator verify if either the Enable Remote Operations parameter or the Automatic Call Answering parameter are active on the Enable Hardware Management Console Services panel.

The Enable Remote Operations is found under Customize Remote Services and Automatic Call Answering is found under Customize Auto Answer Settings.

If either of the above options are active, then this is a FINDING.

Vulnerability Number

V-256873

Documentable

False

Rule Version

HMC0050

Severity Override Guidance

Have the System Administrator verify if either the Enable Remote Operations parameter or the Automatic Call Answering parameter are active on the Enable Hardware Management Console Services panel.

The Enable Remote Operations is found under Customize Remote Services and Automatic Call Answering is found under Customize Auto Answer Settings.

If either of the above options are active, then this is a FINDING.

Check Content Reference

M

Target Key

5533