How do I omit certain user profiles from iSeries security checks in Vulnerability Manager? (NETIQKB54858)

goal
How do I omit certain user profiles from iSeries security checks in Vulnerability Manager?

goal
Is there a way to exclude user profiles from iSeries security checks in Vulnerability Manager?

fact
NetIQ Security Solutions for iSeries 8.0

fact
NetIQ Vulnerability Manager 5.5

fix

You can use exclusion lists in Vulnerability Manager to omit user profiles for the following iSeries security checks (divided by category):

System:
User domain objects in libraries

User/Groups:
Attention program differs from System value
Display sign-on info differs from system
Enabled inactive profiles
Group profiles with passwords
Initial menu
Initial program
Limit device sessions differs from system value
Password is the same as the profile
Passwords that are expired
Passwords with questionable expiration date
Profiles with all object authority
Profiles with audit authority
Profiles with command line access
Profiles with job control authority
Profiles with no password
Profiles with save system authority
Profiles with security admin authority
Profiles with service authority
Profiles with spool control authority
Profiles with system config authority
Special environment differs from system value
User profiles with Q* names

To use an exclusion list in the check parameters for the checks above:

1. Edit the check in the template, or just select to run the check on the iSeries endpoint and go to the Parameters section.
2. Click on the Exclusion list setting and expand it by clicking on the ... button.
3. On the Select Saved List window, click New List.
4. In the Saved List wizard, for Data type, select Text.
5. Add the user profile names to the Values field and add them to the list by clicking Add to list.
6. After you add all profile names, click Next.
7. Name the saved list and click Finish.
8. Return to the Select Saved List window, select the newly created list so that it highlights in dark blue, and click OK. The list should now display in the Exclusion list option on the selected check.

You can now run the check with the exclusion list.

Formerly known as NETIQKB54858