IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If SNMP service is enabled on AIX, the default SNMP password must not be used in the /etc/snmpd.conf config file.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If SNMP service is enabled on AIX, the default SNMP password must not be used in the /etc/snmpd.conf config file.

Description

Discussion Text

Use default SNMP password increases the chance of security vulnerability on SNMP service.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215231

Rule

SV-215231r1268251_rule

Severity

medium

Rule Version

AIX7-00-001135

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Inspect "/etc/snmpd.conf" to find all the passwords that are used in the config file:

# grep -v "^#" /etc/snmpd.conf | grep -E "public|private|password"

If any results are returned, default passwords are being used and this is a finding.

Implementation Procedure

Fix Text

Edit "/etc/snmpd.conf" config file to remove or change all the default passwords that are used in the file.

Restart snmpd:
# stopsrc -s snmpd
# startsrc -s snmpd

STIG check 60 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215230The password hashes stored on AIX system must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm.Next · V-215232 →AIX must require passwords to contain no more than three consecutive repeating characters.