IBM Hardware Management Console (HMC) Security Technical Implementation Guide

The IBM Hardware Management Console (HMC) Security Technical Implementation Guide (V2 R1) has 35 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

35STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

ArchivedPublished Wed Jul 24 2024

Central processors must be restricted for classified/restricted Logical Partitions (LPARs).

IBM Hardware Management Console (HMC) Security Technical Implementation Guide

Assessment Title

Rule Text

Central processors must be restricted for classified/restricted Logical Partitions (LPARs).

Description

Discussion Text

Allowing unrestricted access to classified processors for all LPARs could cause the corruption and loss of classified data sets, which could compromise classified processing.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-256867

Rule

SV-256867r958472_rule

Severity

high

Rule Version

HLP0060

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Have the system administrator or systems programmer use the Hardware Management Console; to verify that the LPAR processors are dedicated for exclusive use by classified LPARs.  

Use the Processor Page to do this.  The Dedicated Central Processors option must be turned on.

If Central processors are not restricted for classified/restricted LPARs, this is a FINDING.

Implementation Procedure

Fix Text

Review the Processor Page under PR/SM and turn on the Dedicated Central Processor option for classified or restricted LPARs.  For unclassified LPARs, this option should not be turned on, unless determined by the site.

STIG check 11 of 35 in the IBM Hardware Management Console (HMC) STIG checklist

← Previous · V-256866On Classified Systems the Processor Resource/Systems Manager (PR/SM) must not allow access to system complex data.Next · V-256868 →The Hardware Management Console must be located in a secure location.