Rule version ACF2-ES-000430 · STIG v9 · 2026-09-01
By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
From an ACF command screen enter: SET CONTROL(GSO) SHOW PSwdopts
If "MAXTRY" is set to "3", this is not a finding.
If "PASSLMT" is set to "3", this is not a finding.
Configure the GSO option "MAXTRY" to equal "3". Configure the GSO option "PASSLMT" to equal "3".