Re: Dedicated console

In the past with intractable auditors that can’t spell IBM i without spotting them the “i” first, we’ve forced an exception for things like the console.

You can easily restrict what devices can act as console, and with LAN console you must get past the security in the LIC to get to it anyway.

Perhaps the approach should be to point out the strong security in the LIC as part of the solution.

Others have argued you should pan the auditor for their lack of knowledge, bad plan since they can make life miserable. Showing them the strong security of the system might be a better way.



Jim Oberholtzer
Agile Technology Architects

On May 21, 2021, at 10:50 AM, Justin Taylor <jtaylor.0ab@xxxxxxxxx> wrote:

I think it's a very safe assumption the compliance people don't know IBMi,
and they operate in a Windows-centric world.

My (desparate) goal with this question is to severly limit admin access. I
can disable the profile, but that still allows LAN console access. Direct
cabling the PC to the console port was my best idea. I don't think
anything less would meet the mandate.

I got in to plead my case to the VP this morning. He's going to get with
legal and push back against this requirement in regards to IBMi.

Thanks
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com