STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The PASSWORD History Count value must be set to 10 or greater.

DISA Rule

SV-256878r998329_rule

Vulnerability Number

V-256878

Group Title

SRG-OS-000077-GPOS-00045

Rule Version

HMC0110

Severity

CAT II

CCI(s)

• CCI-004061 - For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Weight

10

Fix Recommendation

Have the SA go into the Password Profile and set the History Count to 10 or greater.

Check Contents

Have the system administrator (SA) display the Password Profile Task window on the Hardware Management Console and validate that the History Count is set to 10.

If the History Count is less than 10, then this is a finding.

Vulnerability Number

V-256878

Documentable

False

Rule Version

HMC0110

Severity Override Guidance

Have the system administrator (SA) display the Password Profile Task window on the Hardware Management Console and validate that the History Count is set to 10.

If the History Count is less than 10, then this is a finding.

Check Content Reference

M

Target Key

5533