IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

The IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide (V2 R1) has 4 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

4STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Thu Apr 27 2023

Initial Program Load (IPL) Procedures must exists for each partition defined to the system.

IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

Assessment Title

Rule Text

Initial Program Load (IPL) Procedures must exists for each partition defined to the system.

Description

Discussion Text

If procedures for performing IPLs are not in place, it is extremely difficult to ensure overall operating system integrity.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-256853

Rule

SV-256853r890905_rule

Severity

low

Rule Version

HMCP0010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Have the Systems Administrator validate that IPL Procedures Documentation exists for all partitions that are defined on the system. 

Using the Hardware Management Console, do the following:

1)   Access CPC Images Group displays.  (This will list the LPARs.)

2)   Compare the partition names listed on the Partition Page to validate that IPL procedures exist for each entered on the Central Processor Complex Domain/LPAR Names.  

   If IPL Procedures do not exist for each partition, this is a FINDING.

Implementation Procedure

Fix Text

Create or refine procedures for performing IPLs for the LPARs/partitions defined on the system.

STIG check 1 of 4 in the IBM Hardware Management Console (HMC) Policies STIG checklist

Next · V-256854 →Power On Reset (POR) Procedures must be documented for each system.