Installation guide

When importing the repository archive, the default maximum file import size is 160MB. This is specified by the

“post_max_size” directive in /opt/sc4/support/etc/php.ini. If larger file uploads are required, increase

the default value.

To load the repository archive to the offline repository, copy it to a location where the offline repository is accessible via

the SecurityCenter GUI, open the “Repositories” page, highlight the offline repository and click “Sync”.

Browse for the repository archive and click “Submit” to load the offline repository archive file.

Accept Risk Rules

Any non-admin user has the ability to accept a vulnerability risk by adding an “Accept Risk Rule”. Adding a rule moves

vulnerabilities from the unfiltered cumulative database view. These vulnerabilities are not deleted, but only display in the

cumulative database vulnerability view if the “Accepted Risk” filter option is checked. Once a risk has been accepted, the

admin user can view the details of and delete the accept rules associated with the risk if they deem that the risk is still

valid. This is accomplished by clicking on “Repositories” and then “Accept Risk Rules”. From there a list of available

rules is displayed for the selected Plugin ID, Repository, and Organization combination. Choose “All” for Repository and

“Any” for Organization if plugin IDs are to be accepted across these boundaries. This is especially useful in setups where

hundreds of repositories or organizations have been configured and the same accept risk rule must be applied globally.

Select the rule to be removed and click “Detail” to view the highlighted “Accept Risk Rule”. To remove the rule, click

“Delete” and a confirmation dialog is displayed that confirms if you really wish to delete the accepted risk rule: