Hardware Management Console management must be accomplished by using the out-of-band or direct connection method.

From IBM Hardware Management Console (HMC) STIG

Associated with IA controls: DCBP-1

Associated with: CCI-001453

SV-30043r2_rule Hardware Management Console management must be accomplished by using the out-of-band or direct connection method.

Vulnerability discussion

Removing the management traffic from the production network diminishes the security profile of the Hardware Management Console servers by allowing all the management ports to be closed on the production network. The System Administrator will ensure that Hardware Management Console management is accomplished using the out-of-band or direct connection method.

Check content

The System Administrator will validate that the Hardware Management Console management connection will use TCP/IP with encryption on an out-of-band network. If the Hardware Management Console management connection does not use TCP/IP with encryption on an out-of-band network then this is a FINDING.

Fix text

The System Administrator will work with the NSO to see that the Hardware Management Console management is set up with encryption on an out-of band network.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.