TMA-DB2-ZOS-2.1.3
Secure access by using Multi-Factor Authentication (MFA)
Descrição
A multi-factor authentication system requires that multiple authentication factors be presented during logon to verify a user's identity. Each authentication factor must be from a separate category of credential types. Requiring multiple authentication factors improves the security of the user account.
Como é verificado
Método de auditoria: Revisão manual
Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.
1. Determine if a MFA product is installed and user profiles are provisioned with MFA in compliance with the security policies of your organization. 2. If you use the IBM Z Multi-Factor Authentication product, verify that the RACF MFADEF class is active, and the user profile includes an active MFA factor type for user IDs that are provisioned for MFA.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
1. Follow the instructions in IBM Z Multi-Factor Authentication Installation and Customization to install and customize MFA. 2. For user IDs that are provisioned for MFA, provide MFA login instructions.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- db2-zospermissions
- Referência
- CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.3 Secure access by using Multi-Factor Authentication (MFA)