CA IDMS Security Technical Implementation Guide

The CA IDMS Security Technical Implementation Guide (V2 R2) has 74 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

74STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Jul 01 2026 What changed in V2R2

IDMS components that cannot be uninstalled must be disabled.

CA IDMS Security Technical Implementation Guide

Assessment Title

Rule Text

IDMS components that cannot be uninstalled must be disabled.

Description

Discussion Text

DBMSs must adhere to the principles of least functionality by providing only essential capabilities. At installation, all CA IDMS products are installed but can be disabled (i.e., forced to fail if invoked).

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251610

Rule

SV-251610r960963_rule

Severity

low

Rule Version

IDMS-DB-000300

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Log on to IDMS DC system and issue DCPROFIL. Scroll to the Product Intent Status screen. If any unused product has a status of "YES", this is a finding.

Implementation Procedure

Fix Text

Edit RHDCPINT source and remove or comment out products identified as unused. Reassemble, relink, and implement changes by either recycling any affected CV or by issuing the following commands in any affected CV: 

DCMT VARY NUCLEUS MODULE RHDCPINT NEW COPY 
DCMT VARY NUCLEUS RELOAD

STIG check 29 of 74 in the CA IDMS STIG checklist

← Previous · V-251609Default demonstration and sample databases, database objects, and applications must be removed.Next · V-251611 →IDMS nodes, lines, and pterms must be protected from unauthorized use.