← Back to HPE Nimble Storage Array NDM Security Technical Implementation Guide

V-259801

CAT II (Medium)

HPE Alletra 5000/6000 must be configured to disable management by "HPE Greenlake: Data Services Cloud Console".

Rule ID

SV-259801r960966_rule

STIG

HPE Nimble Storage Array NDM Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000382

Discussion

DOD requires that the Mission Owner uses only the cloud services offering listed in either the FedRAMP or DISA PA DOD Cloud Catalog to host Unclassified, public-releasable, DOD information. Management by "HPE Greenlake: Data Services Cloud Console" is enabled by default for HPE Alletra and must be disabled.

Check Content

Verify cloud console is disabled.
Type "group --info |grep -i "cloud enabled". 

If the response is "cloud enabled: Yes", this is a finding.

Fix Text

Disable Alletra cloud console.
Type "group --edit --cloud_management off".

If the response is as follows, contact your HPE sales account team to request approval:

"ERROR: Failed to change system configuration. Updating cloud management is not permitted."