STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

Hardware Management Console management must be accomplished by using the out-of-band or direct connection method.

DISA Rule

SV-256888r991589_rule

Vulnerability Number

V-256888

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

HMC0200

Severity

CAT II

CCI(s)

• CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

10

Fix Recommendation

The System Administrator will work with the NSO to see that the Hardware Management Console management is set up with encryption on an out-of band network.

Check Contents

The System Administrator will validate that the Hardware Management Console management connection will use TCP/IP with encryption on an out-of-band network.

If the Hardware Management Console management connection does not use TCP/IP with encryption on an out-of-band network then this is a FINDING.

Vulnerability Number

V-256888

Documentable

False

Rule Version

HMC0200

Severity Override Guidance

The System Administrator will validate that the Hardware Management Console management connection will use TCP/IP with encryption on an out-of-band network.

If the Hardware Management Console management connection does not use TCP/IP with encryption on an out-of-band network then this is a FINDING.

Check Content Reference

M

Target Key

5533