← Back to CA IDMS Security Technical Implementation Guide

V-251594

CAT III (Low)

IDMS must protect against the use of default userids.

Rule ID

SV-251594r960864_rule

STIG

CA IDMS Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000166

Discussion

Default sign-ons can be used by individuals to perform adverse actions anonymously.

Check Content

Examine load module "RHDCSRTT" by executing CA IDMS utility "IDMSSRTD", or by issuing command "DCMT DISPLAY SRTT" while signed onto the CV, and reviewing the output. 

Note: This requires PTFs SO07995 and SO09476. 

If the TYPE=INITIAL #SECRTT has DFLTSGN=YES specified, this is a finding.

If DFLTUID is defined, this is a finding.

Fix Text

Set DFLTSGN=NO and remove the DFLTUID from the #SECRTT INITIAL macro that is input to the RHDCSRTT module, then reassemble and relink RHDCSRTT.

After making the above changes, assemble and link RHDCSRTT to create a new SRTT. To implement the new SRTT, either recycle any CVs that use the SRTT or issue these commands:       
 
DCMT VARY NUCLEUS MODULE RHDCSRTT NEW COPY 
DCMT VARY NUCLEUS RELOAD