Set Secure Sockets Layer Cipher Control

VisokaNivo 1Ručni pregledibm-i

Opis

Specifies whether or not the QSSLCSL (cipher specification list) system value is controlled by the system or by the user. Configuring your IBM i server to allow the use of weak protocols and weak cipher suites will result in your IBM i server potentially being at risk of a network security breach.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run DSPSYSVAL SYSVAL(QSSLCSLCTL) (or WRKSYSVAL QSSLCSLCTL) and verify the value is *OPSYS. Remediate with: CHGSYSVAL SYSVAL(QSSLCSLCTL) VALUE('*OPSYS')

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

To establish the recommended configuration, set the following system value to *OPSYS: QSSLCSLCTL CHGSYSVAL SYSVAL(QSSLCSLCTL) VALUE('*OPSYS')

Svojstva

Operativni sistemi: Bilo koji
Oznake: ibm-ihardening
Referenca: CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.1.1.36 Set Secure Sockets Layer Cipher Control