TMA-DB2-ZOS-2.1.3

Secure access by using Multi-Factor Authentication (MFA)

높음레벨 1수동 검토db2-zos

설명

A multi-factor authentication system requires that multiple authentication factors be presented during logon to verify a user's identity. Each authentication factor must be from a separate category of credential types. Requiring multiple authentication factors improves the security of the user account.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Determine if a MFA product is installed and user profiles are provisioned with MFA in compliance with the security policies of your organization. 2. If you use the IBM Z Multi-Factor Authentication product, verify that the RACF MFADEF class is active, and the user profile includes an active MFA factor type for user IDs that are provisioned for MFA.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Follow the instructions in IBM Z Multi-Factor Authentication Installation and Customization to install and customize MFA. 2. For user IDs that are provisioned for MFA, provide MFA login instructions.

속성

운영 체제: 모두
태그: db2-zospermissions
참고 자료: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.3 Secure access by using Multi-Factor Authentication (MFA)