IBM System z HMC Security Best Practices

The HMC (Hardware Management Console) is a key element in controlling your System z. This presentation will cover its security basics which are important for each customer. This will include userid/password controls (local and via LDAP Server), user role task/object controls, network security, digitally signed firmware delivery, default settings tailored to security, APIs, Remote Secure Facility, and audit capabilities. The objective is for customers to understand HMC security best practices, to demonstrate the HMC is a secure appliance for managing System z, and to have customers validate their HMC use controls to ensure they are meeting their company's security policy.  The HMC Security presentation will be updated for new HMC 2.12.1 support as well as updated direction in regards to usage with z/OS 2.1 to utilize the new z/OS HMC 3270 support over HMC Operating System Messages.

Tracks: Security and Compliance, Security in the Enterprise and z/OS Systems Programming