← Back to HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide

V-237822

CAT II (Medium)

The SNMP service on the storage system must require the use of a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods.

Rule ID

SV-237822r647875_rule

STIG

HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000366

Discussion

The SNMP service must use AES or a FIPS 140-2 approved successor algorithm for protecting the privacy of communications.

Check Content

Verify that SNMP encryption uses AES by entering the following command:

cli% showsnmpuser
Username AuthProtocol PrivProtocol
3parsnmpuser HMAC-SHA-96 CFB128-AES-128

If the PrivProtocol in the result is not AES, this is a finding.

Fix Text

Configure the storage system to use AES encryption for SNMPv3 by entering the command:

cli% setsnmpmgr -snmpuser 3parsnmpuser -pw <password> -version 3 <IP address of SNMP manager>