STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

Maximum failed password attempts before disable delay must be set to 3 or less.

DISA Rule

SV-256880r958388_rule

Vulnerability Number

V-256880

Group Title

SRG-OS-000021-GPOS-00005

Rule Version

HMC0130

Severity

CAT II

CCI(s)

• CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

The System Administrator will display the User Properties window on the Hardware Management Console for each user and verify that the maximum attempts before disable delay is set to 3 or less and will update them if this is not true.

Maximum Failed Attempts and Disable Delay are found in User Profiles by selecting the user, selecting modify user and then selecting User Properties.

Check Contents

Have the System Administrator display the maximum failed attempts on the user properties table on the Hardware Management Console before disable delay is invoked.

Maximum Failed Attempts and Disable Delay are found in User Profiles by selecting the user, selecting modify user and then selecting User Properties.

If the Maximum failed attempts before disable delay is invoked is set at greater than 3, then this is a FINDING.

Vulnerability Number

V-256880

Documentable

False

Rule Version

HMC0130

Severity Override Guidance

Have the System Administrator display the maximum failed attempts on the user properties table on the Hardware Management Console before disable delay is invoked.

Maximum Failed Attempts and Disable Delay are found in User Profiles by selecting the user, selecting modify user and then selecting User Properties.

If the Maximum failed attempts before disable delay is invoked is set at greater than 3, then this is a FINDING.

Check Content Reference

M

Target Key

5533