TMAegis
Weitere Regeln für ibm-i

IBM i

TMA-IBM-I-4.12

Implement Multi-factor authentication (MFA)

HochStufe 1Manuelle Prüfungibm-i

Beschreibung

Multi-factor authentication (MFA) is a layered approach to securing physical and logical access where a system requires a user to present a combination of two or more different authenticators to verify a user's identity for login. Adversaries are increasingly capable of guessing or harvesting passwords to gain illicit access. Password cracking techniques are becoming more sophisticated and high- powered computing is increasingly affordable.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

IBM and third-party vendors provide MFA solutions for IBM i, and organizations often choose to buy and implement one of these solutions or develop an in-house MFA solution. The business should provide implementation details from the vendor or in- house solution to provide an adequate audit procedure.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Evaluate 3rd party MFA solutions available from various vendors or develop an in- house MFA solution.

Eigenschaften

Betriebssysteme
Beliebig
Tags
ibm-ihardening
Referenz
CIS IBM i V7R5M0 Benchmark v2.1.0 - 4.12 Implement Multi-factor authentication (MFA)