The Hardware Management Console must be located in a secure location.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-256868	HMC0010	SV-256868r991589_rule		High

Description

The Hardware Management Console is used to perform Initial Program Load (IPLs) and control the Processor Resource/System Manager (PR/SM). If the Hardware Management Console is not located in a secure location, unauthorized personnel can bypass security, access the system, and alter the environment. This can lead to loss of secure operations if not corrected immediately.

STIG	Date
IBM Hardware Management Console (HMC) Security Technical Implementation Guide	2024-06-24

Details

Check Text (C-60543r890948_chk)

Verify the location of the Hardware Management Console.

It should be located in a controlled area.
Access to it should be restricted.

If the Hardware Management Console is not located in a secure location this is a FINDING.

Fix Text (F-60486r890949_fix)

Move the Hardware Management Console to a secure location and implement access controls for authorized personnel.