STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must disable remote access.

DISA Rule

SV-283038r1193804_rule

Vulnerability Number

V-283038

Group Title

SRG-APP-000315-WSR-000003

Rule Version

ASMP-WS-000740

Severity

CAT II

CCI(s)

• CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

10

Fix Recommendation

Configure the system to disable remote access:

Stop the RDA service:
cli% stoprda
Are you sure you want to stop RDA service?
select q=quit y=yes n=no:

Enter "y" to confirm the action.

Set the recovery authentication to ciphertext:
cli% controlrecoveryauth setmethod ciphertext

Check Contents

Verify the RDA service is disabled and controlrecoveryauth is set to use ciphertext with the following commands:

cli% stoprda
RDA service is already disabled.

cli% controlrecoveryauth status
Recovery authentication method is Ciphertext.

If the message returned is not "RDA service is already disabled", this is a finding.

If the message returned is not "Recovery authentication method is Ciphertext", this is a finding.

Vulnerability Number

V-283038

Documentable

False

Rule Version

ASMP-WS-000740

Severity Override Guidance

Verify the RDA service is disabled and controlrecoveryauth is set to use ciphertext with the following commands:

cli% stoprda
RDA service is already disabled.

cli% controlrecoveryauth status
Recovery authentication method is Ciphertext.

If the message returned is not "RDA service is already disabled", this is a finding.

If the message returned is not "Recovery authentication method is Ciphertext", this is a finding.

Check Content Reference

M

Target Key

5741