STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The terminal or workstation must lock out after a maximum of 15 minutes of inactivity, requiring the account password to resume.

DISA Rule

SV-256883r958402_rule

Vulnerability Number

V-256883

Group Title

SRG-OS-000029-GPOS-00010

Rule Version

HMC0150

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

The System Administrator will display the User Properties window and will ensure that the Verify timeout minutes are set to a maximum of 15.

Check Contents

Have the System Administrator display the User Properties window on the Hardware Management Console and check that the timeout minutes are set to a maximum of 15.

If the Verify Timeout minutes are set to more than 15, then this is a FINDING.

Vulnerability Number

V-256883

Documentable

False

Rule Version

HMC0150

Severity Override Guidance

Have the System Administrator display the User Properties window on the Hardware Management Console and check that the timeout minutes are set to a maximum of 15.

If the Verify Timeout minutes are set to more than 15, then this is a FINDING.

Check Content Reference

M

Target Key

5533