STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The PASSWORD expiration day(s) value must be set to equal or less then 60 days.

DISA Rule

SV-256879r998332_rule

Vulnerability Number

V-256879

Group Title

SRG-OS-000076-GPOS-00044

Rule Version

HMC0120

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Have the SA go into the Password Profile and set the Expiration day(s) to equal or less then 60 days.

Check Contents

Have the system administrator (SA) display the Password Profile Task window on the Hardware Management Console and validate that the Expiration day(s) is set to equal or less than 60 days.

If the expiration day(s) is set to equal or less then 60 days, this is not a finding.

If the expiration day(s) is greater than 60 days, then this is a finding.

Vulnerability Number

V-256879

Documentable

False

Rule Version

HMC0120

Severity Override Guidance

Have the system administrator (SA) display the Password Profile Task window on the Hardware Management Console and validate that the Expiration day(s) is set to equal or less than 60 days.

If the expiration day(s) is set to equal or less then 60 days, this is not a finding.

If the expiration day(s) is greater than 60 days, then this is a finding.

Check Content Reference

M

Target Key

5533