CA IDMS Security Technical Implementation Guide

The CA IDMS Security Technical Implementation Guide (V2 R2) has 74 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

74STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Jul 01 2026 What changed in V2R2

IDMS must protect against the use web services that do not require a sign on when actions are performed that may be audited.

CA IDMS Security Technical Implementation Guide

Assessment Title

Rule Text

IDMS must protect against the use web services that do not require a sign on when actions are performed that may be audited.

Description

Discussion Text

IDMS web services provide a way for web-based applications to access an IDMS database. If not secured, the Web services interface could be used to reveal or change sensitive data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251598

Rule

SV-251598r960864_rule

Severity

low

Rule Version

IDMS-DB-000180

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

On the IDMS CV system where CA IDMS Web Services executes, enter "WEBC" to check Web Services configuration.

If "REQUIRE SIGNON = NO", this is a finding.

Implementation Procedure

Fix Text

On the IDMS CV system where CA IDMS Web Services executes, enter "WEBC REQUIRE SIGNON=YES".

STIG check 17 of 74 in the CA IDMS STIG checklist

← Previous · V-251597IDMS must protect against the use of web-based applications that use generic IDs.Next · V-251599 →IDMS must use the ESM to generate auditable records for resources when DOD-defined auditable events occur.