PowerScale OneFS 9.8.0.0 Web Administration Guide

Security hardening

Security hardening is the process of configuring a system to reduce or eliminate security risks. The OneFS Security Hardening Module is primarily for use by United States federal government accounts.

OneFS is secure in its default configuration. The United States federal government requires configurations and limitations that are more strict than the default.

The Security Hardening Module provides a hardening profile that you can apply to a OneFS cluster. A hardening profile is a collection of rules that changes the cluster configuration so that the cluster complies with strict security rules.

The predefined STIG hardening profile is designed to enforce security principles that are defined in the United States Department of Defense (DoD) Security Requirements Guides (SRGs) and Security Technical Implementation Guides (STIGs). The STIG hardening profile applies controls to the OneFS cluster that reduce security vulnerabilities and attack surfaces.

For more about the STIG profile and how to apply it, see the "United States Federal and DoD Standards and Compliance" chapter in the PowerScale OneFS Security Configuration Guide. That chapter also includes instructions for running periodic compliance reports after applying the profile.

The Security Hardening Module is a separately licensed OneFS module. For licensing information, see the Licensing section in the "General Cluster Administration chapter" of this guide.