W dniu 2013-09-10 08:17, Timothy Sipples pisze:
Jose Munoz asks:
Is a must to use a NTP server for PCI-DSS compliance?
I'm not sure I entirely understand the question, but I'll try to answer.
PCI-DSS incorporates a concept called "trusted time." It also seeks to make
sure that all critical systems have the correct and consistent time.
My understanding is that PCI-DSS is not explicit about time *protocols*. If
your particular implementation of NTP addresses the requirements, great.
For example, zEnterprise can be an NTP client to an External Time Source
(ETS) via the Server Time Protocol (STP) feature. NTP authentication is
supported. To maintain correctness and consistency, zEnterprise can then
act as the authoritative NTP server to other systems. Subject to some other
implementation details, that pattern is consistent with PCI-DSS practices.
But other protocols and/or patterns might be as well.
So, in simple words:
Although PCI-DSS does not mention explicitly NTP, but this is the only
solution for mainframe, which in turn requires STP enablement, which
means $$$, which is quite unique among other platforms, because others
can act as NTP client for free.
--
Radoslaw Skorupka
Lodz, Poland
--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive.
BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: [email protected]
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2013 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.555.904 zotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
