The IBM z/VM TCP/IP ANONYMOU statement must not be coded in FTP configuration.

Operating systems utilizing encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules.

If there is no FTP Server active, this is not applicable.

Examine the "DTCPARMS" file for each active FTP server.

If there is ":ANONYMOUS" or ":ANONYMOU" statement, this is a finding.

Examine the "SRVRFTP" command.

If "ANONYMOU" is coded, this is a finding.

Ensure the ":ANONYMOUS" or ":ANONYMOU" statement is not coded in the "DTCPARMS" or "SRVRFTP" command.