From Mainframe Product Security Requirements Guide
Part of SRG-APP-000176-MFP-000243
Associated with: CCI-000186
If the private key is discovered, an attacker can use the key to authenticate as an authorized user and gain access to the network infrastructure.
If the Mainframe Product employs an external security manager (ESM) for all account management functions, this is not applicable. Examine user account management configurations. If the Mainframe Product account management configurations do not enforce authorized access to the corresponding private key when using PKI-based authentication, this is a finding.
Configure the Mainframe Product account management settings to enforce authorized access to the corresponding private key when using PKI-based authentication.
Lavender hyperlinks in small type off to the right (of CSS
class id
, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle
or
Accept: application/rdf+xml
.
Powered by sagemincer