An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-ES-000790 V-223497 CA-ACF2 defined user accounts must uniquely identify system users. Cat II
ACF2-ES-000800 V-223498 CA-ACF2 userids found inactive for more than 35 days must be suspended. Cat II
ACF2-ES-000810 V-223499 CA-ACF2 PWPHRASE GSO record must be properly defined. Cat II
ACF2-ES-000820 V-223500 CA-ACF2 must enforce password complexity by requiring that at least one special character be used. Cat II
ACF2-ES-000840 V-223501 ACF2 PSWD GSO record value must be set to require at least one uppercase character be used. Cat II
ACF2-ES-000850 V-223502 ACF2 PSWD GSO record value must be set to require at least one numeric character be used. Cat II
ACF2-ES-000860 V-223503 ACF2 PSWD GSO record value must be set to require at least one lowercase character be used. Cat II
ACF2-ES-000870 V-223504 ACF2 PSWD GSO record value must be set to require the change of at least 50 percent of the total number of characters when passwords are changed. Cat II
ACF2-ES-000880 V-223505 ACF2 must use NIST FIPS-validated cryptography to protect passwords in the security database. Cat I
ACF2-ES-000890 V-223506 ACF2 PSWD GSO record value must be set to require a 60-day maximum password lifetime restriction. Cat II
ACF2-ES-000900 V-223507 ACF2 PSWD GSO record value must be set to require 24 hours/one day as the minimum password lifetime. Cat II
ACF2-ES-000910 V-223508 ACF2 PSWD GSO record value must be set to prohibit password reuse for a minimum of five generations or more. Cat II
ACF2-ES-000920 V-223509 ACF2 TSOTWX GSO record values must be set to obliterate the logon password on TWX devices. Cat II
ACF2-ES-000930 V-223510 ACF2 TSOCRT GSO record values must be set to obliterate the logon to ASCII CRT devices. Cat II
ACF2-ES-000940 V-223511 ACF2 TSO2741 GSO record values must be set to obliterate the logon password on 2741 devices. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.