TMA-IBM-I-5.1.1.36
Set Secure Sockets Layer Cipher Control
高级别 1人工审核ibm-i
说明
Specifies whether or not the QSSLCSL (cipher specification list) system value is controlled by the system or by the user. Configuring your IBM i server to allow the use of weak protocols and weak cipher suites will result in your IBM i server potentially being at risk of a network security breach.
检查方式
审计方法: 人工审核
此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。
Run DSPSYSVAL SYSVAL(QSSLCSLCTL) (or WRKSYSVAL QSSLCSLCTL) and verify the value is *OPSYS. Remediate with: CHGSYSVAL SYSVAL(QSSLCSLCTL) VALUE('*OPSYS')
修复方式
修复方法: 操作指南或基础设施补丁
To establish the recommended configuration, set the following system value to *OPSYS: QSSLCSLCTL CHGSYSVAL SYSVAL(QSSLCSLCTL) VALUE('*OPSYS')
属性
- 操作系统
- 任意
- 标签
- ibm-ihardening
- 参考
- CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.1.1.36 Set Secure Sockets Layer Cipher Control