Check: HMC0010
IBM Hardware Management Console (HMC) STIG:
HMC0010
(in versions v2 r1 through v1 r5)
Title
The Hardware Management Console must be located in a secure location. (Cat I impact)
Discussion
The Hardware Management Console is used to perform Initial Program Load (IPLs) and control the Processor Resource/System Manager (PR/SM). If the Hardware Management Console is not located in a secure location, unauthorized personnel can bypass security, access the system, and alter the environment. This can lead to loss of secure operations if not corrected immediately.
Check Content
Verify the location of the Hardware Management Console. It should be located in a controlled area. Access to it should be restricted. If the Hardware Management Console is not located in a secure location this is a FINDING.
Fix Text
Move the Hardware Management Console to a secure location and implement access controls for authorized personnel.
Additional Identifiers
Rule ID: SV-256868r991589_rule
Vulnerability ID: V-256868
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000366 |
Implement the security configuration settings. |
| CCI-002916 |
Defines the physical access control systems or devices or guards that control ingress and egress to the facility where the system resides. |