The PASSWORD History Count value must be set to 10 or greater.

From IBM Hardware Management Console (HMC) STIG

Associated with IA controls: IAIA-2, IAIA-1

Associated with: CCI-000200

SV-30024r2_rule The PASSWORD History Count value must be set to 10 or greater.

Vulnerability discussion

History Count specifies the number of previous passwords saved for each USERID and compares it with an intended new password. If there is a match with one of the previous passwords, or with the current password, it will reject the intended new password. The improper setting of any of these fields, individually or in combination with another, can compromise the security of the processing environment.

Check content

Have the System Administrator display the Password Profile Task window on the Hardware Management Console and validate that the History Count is set to 10. If the History Count is less than 10, then this is a FINDING. .

Fix text

Have the System Administrator go into the Password Profile and set the History Count to 10 or greater.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.