• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

TSM Cops?

Leigh

ADSM.ORG Member
#1
Hi All,
I used to use a nice little tool called TSM Cops that was a TSM Healthcheck script that checked it was ITCS104 (or something!) compliant in terms of password lengths, userid checks, that kind of thing.

I can't find it anywhere, does anyone use it or know what's happened to it?

Thanks
Leigh.
 

chad_small

ADSM.ORG Moderator
#3
I used it at IBM and really its kind of a joke...let me explain. IBM uses it to audit the servers for security reasons, the problem is that TSM does not require new passwords so old ones can be reused and as long as the password is updated COPS has no idea it really wasn't changed. So what you find is that to keep Oracle backups running TSM admins tend to just update the password with the current password a few days before cops runs so that cops passes the server and the Oracle backups keep running. This is just one example and the real failure lies with TSM not caching previous passwords so they can't be reused. Let's also recognize that the key to TSM security is the host servers security. So if the host's security settings are a mess nothing in TSM is going to help much.
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 17 19.5%
  • Keep using TSM for Spectrum Protect.

    Votes: 53 60.9%
  • Let's be formal and just say Spectrum Protect

    Votes: 10 11.5%
  • Other (please comement)

    Votes: 7 8.0%

Forum statistics

Threads
31,466
Messages
134,102
Members
21,565
Latest member
Chrescht
Top