IBM Hardware Management Console (HMC) Security Technical Implementation Guide

The IBM Hardware Management Console (HMC) Security Technical Implementation Guide (V2 R2) has 35 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

35STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Sep 30 2026 What changed in V2R2

Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.

IBM Hardware Management Console (HMC) Security Technical Implementation Guide

Assessment Title

Rule Text

Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.

Description

Discussion Text

Unrestricted control over the issuing of system commands by a Logical Partition could result in unauthorized data access and inadvertent updates. This could result in severe damage to system resources.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-256864

Rule

SV-256864r1268226_rule

Severity

medium

Rule Version

HLP0030

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Using the Hardware Management Console, verify that the Logical Partitions cannot issue control program commands to another Logical Partition.  Use the PR/SM panel, known as the Security Definitions Page, to do this.  The Cross Partition Control option must be turned off.

NOTE:  The default is that the Cross Partition Control option is turned off.

If Processor Resource/Systems Manager (PR/SM) allows unrestricted issuing of control program commands then this  is a FINDING

Implementation Procedure

Fix Text

Review the Security Definition parameters specified under PR/SM, and turn off the Cross Partition Control option.

STIG check 8 of 35 in the IBM Hardware Management Console (HMC) STIG checklist

← Previous · V-256863On Classified Systems, Logical Partition must be restricted with read/write access to only its own IOCDS.Next · V-256865 →Classified Logical Partition (LPAR) channel paths must be restricted.