STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must have an SNMPv3 user account configured.

DISA Rule

SV-283073r1193911_rule

Vulnerability Number

V-283073

Group Title

SRG-APP-000795-WSR-000130

Rule Version

ASMP-WS-001150

Severity

CAT II

CCI(s)

CCI-003831 - Alert organization-defined personnel or roles upon detection of unauthorized access, modification, or deletion of audit information.

Weight

Fix Recommendation

Configure SNMPv3 alert notifications using the following sequence of operations:

Create and enable an SNMPv3 user, and create associated keys for authentication and privacy.

cli% createuser Alletrasnmpuser all browse

Enter the password and confirm.

cli% createsnmpuser Alletrasnmpuser

At the prompt, enter the password.

At the next prompt, reenter the password.

Check Contents

Verify an SNMPv3 user account is configured:

cli% showsnmpuser

Username AuthProtocol PrivProtocol
Alletrasnmpuser HMAC-SHA-96 CFB128-AES-128

If the output is not displayed in the above format, this is a finding.

The HPE Alletra Storage ArcusOS device must have an SNMPv3 user account configured.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key