An error occurred:

IBM z/OS RACF STIG

IBM z/OS RACF Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RACF-ES-000760 V-223723 The IBM RACF INACTIVE SETROPTS value must be set to 35 days. Cat II
RACF-ES-000770 V-223724 IBM RACF PASSWORD(RULEn) SETROPTS value(s) must be properly set. Cat II
RACF-ES-000780 V-223725 IBM RACF exit ICHPWX01 must be installed and properly configured. Cat II
RACF-ES-000785 V-230210 IBM RACF exit ICHPWX11 for password phrases must be installed and properly configured. Cat II
RACF-ES-000790 V-223726 The IBM RACF SETROPTS PASSWORD(MINCHANGE) value must be set to 1. Cat II
RACF-ES-000800 V-223727 IBM RACF SETROPTS PASSWORD(INTERVAL) must be set to 60 days. Cat II
RACF-ES-000810 V-223728 The IBM RACF PASSWORD(HISTORY) SETROPTS value must be set to five or more. Cat II
RACF-ES-000820 V-223729 NIST FIPS-validated cryptography must be used to protect passwords in the security database. Cat I
RACF-ES-000840 V-223731 The IBM RACF ERASE ALL SETROPTS value must be set to ERASE(ALL) on all systems. Cat II
RACF-ES-000850 V-223732 IBM RACF DASD Management USERIDs must be properly controlled. Cat II
RACF-ES-000860 V-257135 IBM Passtickets must be configured to be KeyEncrypted. Cat II
RACF-FT-000010 V-223733 IBM z/OS SMF recording options for the FTP Server must be configured to write SMF records for all eligible events. Cat II
RACF-FT-000020 V-223734 IBM RACF permission bits and user audit bits for HFS objects that are part of the FTP server component must be properly configured. Cat II
RACF-FT-000030 V-223735 IBM z/OS data sets for the FTP server must be properly protected. Cat II
RACF-FT-000040 V-223736 IBM z/OS FTP.DATA configuration statements must indicate a BANNER statement with the proper content. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.