Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 4.0

...

Optional - Copy arellia-checklist-1.3.xml (Either download from http://portal.arellia.com/data/scap/arellia-checklist-1.3.xml or get from the program data folder - %ProgramData%\Arellia\ScapChecklists - from a system that does have connectivity) to %ProgramData%\Arellia\ScapChecklists and choose Try Again and you'll then see the list of available checklists.  This page when "off-internet" is only useful in that it shows you the URLs of the profile content you can take note of and use on a system having internet access to download various zip and xml files. See later under "Importing Profiles".

Default Content

There are a number of default SCAP Data Sources that are registered by default. You need to download these on a system with internet access, copy them to correct folders on the SMP server, and re-run the registration tasks (that failed during initial configuration as described above).

...

  • Obtaining content
    • If copying from an SMP system with ESRS loaded that does have internet connectivity, copy the set of default
    scap Internal Note:
    To add information on how to source the default set of content. Do we provide it or do we ask that the customer copy from a another system they may have been testing or evaluating on. To discuss. NoteIf you are a customer in need of this functionality and the answer has not yet been provided here then please contact Arellia support
    • SCAP content files keeping the directory structure to %ProgramData%\Arellia\ScapContent.
    Note
    • If downloading the content manually, get the content (typically .zip files) from the locations specified above and carry to the SMP server.  Then unzip to the %ProgramData%\Arellia\ScapContent.  The zipped content should create its own folder under the ScapContent folder and place any files and sub-folder in that directory.
    • Note:  most content comes from external sites to Arellia; typically nist.gov.  The checklist and some of the CVE data comes from portal.arellia.com.  This can be seen by searching arellia-checklist-1.3.xml for portal.arellia.com.
  • Re-run each of the "Register: XXX tasks" by right clicking on each of the failed task runs and choosing Start Now. There are 10 of these tasks to run. See the following screen shot showing where these tasks can be found.

...

  • There is a page on the Arellia Data Portal that shows these links. See View Arellia Checklist. Or you can go direct to the various official sites.
  • To set expectations - profile imports can take a while, whether connected to the internet or not - on the order of an hour for a handful of profiles.