The storage system in a hardened configuration must be configured to encrypt data associated with the Remote Copy feature.

From HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide

Associated with: CCI-002418

SV-89331r1_rule The storage system in a hardened configuration must be configured to encrypt data associated with the Remote Copy feature.

Vulnerability discussion

Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered.Facilitating the confidentiality and integrity of transmitted information requires the operating system to take measures in preparing information for transmission. This can be accomplished via encryption.This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification.Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied upon to provide confidentiality or integrity, and DoD data may be compromised.

Check content

Determine if the Remote Copy feature is running via the following command: cli% showrcopy Remote Copy is not configured on this system. If Remote Copy is not configured, this requirement is not applicable. If the Status is "Started" inspect the data path to and from the host for the proper use of a Nokia 1830 encrypting switch. If all data does not traverse this switch, this is a finding.

Fix text

Properly configure a Nokia 1830 encrypting switch to encrypt all data related to the Remote Copy feature or disable the Remote Copy feature with the following command: cli% stoprcopy

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.