This section describes the SCAP configuration parameters that you need to specify while configuring an FDCC inventory detection module. You can specify the following parameters in the text field provided on the Configuration tab of the Create New Inventory Module dialog:
Specifies the path to the SCAP data stream directory on the agent computer. This path must match the SCAP data stream directory on the domain manager. For example, for the IE7 checklist, specify FDCC-Major-Version-1.2.1.0\ie7. When the checklist is distributed to the agent computer, a similar directory structure is created under the ITCM_installpath\Agent\units\00000001\UAM\ SCAP_Content directory on the agent computer.
Specifies the name of the XCCDF file in the SCAP data stream that determines the compliance benchmark.
Note: This file must be present in the location specified in the SCAPPath parameter.
Specifies the ID given against the Benchmark tag in the XCCDF file. For example, the benchmark ID for Windows XP checklist is FDCC-Windows-XP.
(Optional) Specifies the version of the checklist to use if there are several versions with the same XCCDFID.
Lists the versions of the checklist that are currently available for distribution. The DSM Engine uses this parameter to populate the XCCDF Version field in the SCAP Configuration dialog. This parameter is available for all the SCAP inventory modules that the DSM Engine creates.
Important! Do not include this parameter when you are manually creating an inventory module for a checklist. Adding or modifying this parameter can lead to invalid configuration settings and may result in empty scan results for the checklist.
Lists the valid profiles for each version of the checklist that are currently available for distribution. The DSM Engine uses this parameter to populate the XCCDF Profile field in the SCAP Configuration dialog. This parameter is available for all the SCAP inventory modules that the DSM Engine creates. However, when you create an inventory module for a checklist, do not include this parameter as this can display invalid profile names in the SCAP Configuration dialog.
Important! Do not include this parameter when you are manually creating an inventory module for a checklist. Adding or modifying this parameter can lead to invalid configuration settings and may result in empty scan results for the checklist.
(Optional) Defines the name of the CPE dictionary file. If the SCAP data stream contains a dictionary file, specify the file name against this parameter; otherwise, you can omit this parameter.
Note: This file must be present in the location specified in the SCAPPath parameter.
Defines the component name to use in the inventory file produced by the scanner. This value is used as the top-level group name in the inventory file and hence also appears as the inventory component name under the Inventory, SCAP category in the DSM Explorer.
Configures the collection of the XCCDF result file for the checklist. Select this option to let the scanner securely copy the XCCDF result file from the Asset Management agent's working directory to the domain manager after every checklist scan.
Default: false
Configures the collection of OVAL result files for the checklist from the Asset Management agent's working directory to the domain manager.
Default: false
Specifies the title of the XCCDF profile to be applied for the compliance check. Leaving the value of this parameter empty applies no profile, and thus uses all the settings inthe XCCDF file.
Defines the directory in which the OVAL and XCCDF result files are to be placed. You can either specify an absolute path or a path relative to the SCAP_Result_Files directory, which is under the Asset Management agent's working directory. If this field is empty, the files are stored under the default path, which is agent working directory\SCAP_Result_Files\Data Stream Path.
Note: The user account that runs the scan must have write access to the directory specified in this field.
Defines the directory on the agent computer that contains the Ovaldi interpreter. You can specify either an absolute path or a path relative to the bin directory of the agent installation. The OVAL interpreter shipped with this release of CA ITCM is installed under the ITCM_installpath\bin\ovaldi-CA directory. If your SCAP data stream requires an OVAL interpreter other than the one shipped with this release, ensure to distribute the OVAL interpreter to all the agent computers and specify the path in this field.
Default: ITCM_installpath\ovaldi-CA
(Optional) Defines the name of the organization that you want the <organization> tag to contain in the XCCDF result file. Specify the organization name and click Add to List.
Note: You can add any number organizations and move them in the order that you want. The values are hierarchical with the highest level appearing first.
Important! Do not include this parameter when you are manually creating an inventory module for a checklist. Adding or modifying this parameter can lead to invalid configuration settings and may result in empty scan results for the checklist.
|
Copyright © 2013 CA.
All rights reserved.
|
|