We maintain a list of frequently-requested SCAP content available from well-known sources and make it available on the Download Profiles page. You can then import these downloads plus other content into the database for use within your policies (for more information, go to Importing Profiles).
To download profiles, do the following steps:
- In the Security Manager Console, click Profiles.
- On the bottom left, click Download Profiles. On the right side, you will see a list of profiles available from various sources.
- Locate the profile(s) of interest. Expand the row by clicking the expand indicator in the first column.
Check the box of profile version or options you would like to have downloaded and imported into the database.
Refer to the content author if you need clarification of the content or differences of versions. The link to the content appears to the right if you wish to manually download and review the content prior to importing.
- Click the Import Profiles button at the bottom to start the background tasks that perform the downloading and importing.
Updates to Profiles
Once profiles are imported, the check box on the left of the profile selections will be disabled. If any changes are detected in the author's source, the row background will appear green to indicate there is updated content available and the check box will be available for you to select to import the updates to these profiles. Simply check the boxes as you did when first imported and click Import Profiles at the bottom.
What to Expect
Many of these downloads will contain multiple profiles that get imported in the background. This process may take a few minutes or multiple hours, depending on the size of the content and load on the server. However, this all happens automatically and does not require any other user interaction.
Once the profiles have been imported, they will appear on the left side, organized by applicable platform and benchmark.
Verify Profile Import Process
To verify the status of the import process, open the Resource Explorer console and open the SCAP Content resource that was created for this profile. The details of the import are listed in the Data Class named SCAP Content. Any validation errors that occurred will be listed in the Event Class named SCAP Data Validation Errors.
The names of these elements on the left side of the tree are defined by the author within the SCAP content itself. You can change the names by editing the profile after import.