The HPE Alletra Storage ArcusOS device must have an SNMPv3 user account configured.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-283073 | ASMP-WS-001150 | SV-283073r1193911_rule | CCI-003831 | medium |
| Description | ||||
| Audit information includes all information needed to successfully audit system activity, such as audit records, audit log settings, audit reports, and personally identifiable information. Audit logging tools are those programs and devices used to conduct system audit and logging activities. Protection of audit information focuses on technical protection and limits the ability to access and execute audit logging tools to authorized individuals. Physical protection of audit information is addressed by both media protection controls and physical and environmental protection controls. | ||||
| STIG | Date | |||
| HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide | 2026-03-03 | |||
Details
Check Text (C-283073r1193911_chk)
Verify an SNMPv3 user account is configured:
cli% showsnmpuser
Username AuthProtocol PrivProtocol
Alletrasnmpuser HMAC-SHA-96 CFB128-AES-128
If the output is not displayed in the above format, this is a finding.
Fix Text (F-87542r1193910_fix)
Configure SNMPv3 alert notifications using the following sequence of operations:
Create and enable an SNMPv3 user, and create associated keys for authentication and privacy.
cli% createuser Alletrasnmpuser all browse
Enter the password and confirm.
cli% createsnmpuser Alletrasnmpuser
At the prompt, enter the password.
At the next prompt, reenter the password.