Environment
NetIQ Secure Configuration Manager 5.8
NetIQ Secure Configuration Manager 5.8.1
Situation
With the SCAP Module for Secure Configuration Manager (SCAP module), you can import
any properly formatted Extensible Configuration Checklist Description Format (XCCDF)
content for Windows XP and use it within Secure Configuration Manager. XCCDF content is
available from the National Institute of Standards and Technology (NIST) (http://nvd.nist.gov/
scap.cfm).
To view the repository of security ckecks available, go to http://web.nvd.nist.gov/view/ncp/repository
Once you import the SCAP policy template into Secure Configuration Manager, you can
locate the policy templates in the Security Knowledge > Policy Templates > SCAP Templates
node of the tree pane.
To import an SCAP policy template:
1. Run the XCCDF Conversion Utility.exe file. By default, this file is located in
the C:\Program Files\NetIQ\Secure Configuration Manager folder.
2. In the Source field, browse to the SCAP template you want to import into Secure
Configuration Manager and click Accept.
3. In the Destination field, browse to the directory where you want to save the specified
SCAP template in .tpl format and click Accept.
4. Double-click the profiles you want to associate with the SCAP template.
5. Click Process Content.
6. Log on to a Secure Configuration Manager console computer with a console user account
that has the Import Policy Template permission. For more information about console user
account permissions, see the User Guide for Secure Configuration Manager.
7. In the tree pane, expand Security Knowledge.
8. Click Policy Templates.
9. On the Actions menu, click Import Policy Template.
10. Select the policy template you want to import and click Open.
any properly formatted Extensible Configuration Checklist Description Format (XCCDF)
content for Windows XP and use it within Secure Configuration Manager. XCCDF content is
available from the National Institute of Standards and Technology (NIST) (http://nvd.nist.gov/
scap.cfm).
To view the repository of security ckecks available, go to http://web.nvd.nist.gov/view/ncp/repository
Once you import the SCAP policy template into Secure Configuration Manager, you can
locate the policy templates in the Security Knowledge > Policy Templates > SCAP Templates
node of the tree pane.
To import an SCAP policy template:
1. Run the XCCDF Conversion Utility.exe file. By default, this file is located in
the C:\Program Files\NetIQ\Secure Configuration Manager folder.
2. In the Source field, browse to the SCAP template you want to import into Secure
Configuration Manager and click Accept.
3. In the Destination field, browse to the directory where you want to save the specified
SCAP template in .tpl format and click Accept.
4. Double-click the profiles you want to associate with the SCAP template.
5. Click Process Content.
6. Log on to a Secure Configuration Manager console computer with a console user account
that has the Import Policy Template permission. For more information about console user
account permissions, see the User Guide for Secure Configuration Manager.
7. In the tree pane, expand Security Knowledge.
8. Click Policy Templates.
9. On the Actions menu, click Import Policy Template.
10. Select the policy template you want to import and click Open.
Resolution
Download content from http://web.nvd.nist.gov/view/ncp/repository
Once you import the SCAP policy template into Secure Configuration Manager, you can locate the policy templates in the Security Knowledge >Policy Templates>SCAP Templates node of the tree pane.
Cause
Templates can be downloaded from NIST for use with the SCAP module
Additional Information
Formerly known as NETIQKB71203