Hardware Management Console management must be accomplished by using the out-of-band or direct connection method.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-256888 | HMC0200 | SV-256888r991589_rule | CCI-001453 | medium |
| Description | ||||
| Removing the management traffic from the production network diminishes the security profile of the Hardware Management Console servers by allowing all the management ports to be closed on the production network. The System Administrator will ensure that Hardware Management Console management is accomplished using the out-of-band or direct connection method. | ||||
| STIG | Date | |||
| IBM Hardware Management Console (HMC) Security Technical Implementation Guide | 2024-06-24 | |||
Related Frameworks
3 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
AC-17(2)
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.1.13
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001453
1.00
- DISA · V2R1 · disa_xccdf · related
Details
Check Text (C-256888r991589_chk)
The System Administrator will validate that the Hardware Management Console management connection will use TCP/IP with encryption on an out-of-band network.
If the Hardware Management Console management connection does not use TCP/IP with encryption on an out-of-band network then this is a FINDING.
Fix Text (F-60506r891009_fix)
The System Administrator will work with the NSO to see that the Hardware Management Console management is set up with encryption on an out-of band network.