IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

The IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide (V2 R1) has 4 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

4STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Thu Apr 27 2023

System shutdown procedures documentation must exist for each partition defined to the system.

IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

Assessment Title

Rule Text

System shutdown procedures documentation must exist for each partition defined to the system.

Description

Discussion Text

If procedures for performing system shutdowns are not in place, it is extremely difficult to ensure overall data and operating system integrity.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-256855

Rule

SV-256855r890911_rule

Severity

low

Rule Version

HMCP0120

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Have the System Administrator validate that System Shutdown Documentation exists for all partitions that are defined on the system. 

a)   Using the Hardware Management Console, do the following:

1)   Access CPC Images Group displays.  (This will list the LPARs.)

2)   Compare the partition names listed on the Partition Page to validate that System Shutdown procedures exist for each entered on the Central Processor Complex Domain/LPAR Names.  

   If System Shutdown Procedures do not exist for each partition, this is a FINDING.

Implementation Procedure

Fix Text

Create or refine procedures for performing system shutdowns for each partition.

STIG check 3 of 4 in the IBM Hardware Management Console (HMC) Policies STIG checklist

← Previous · V-256854Power On Reset (POR) Procedures must be documented for each system.Next · V-256856 →Backup of critical data for the HMC and its components must be documented and tracked