Installation guide

Run an SCAP Assessment
Run an SCAP assessment that compares your managed machine configuration against a profile in a
standard SCAP benchmark.
Prerequisite
Import the benchmark. See "Import an SCAP Benchmark" on page 154.
Procedure
1. Click Compliance.
2. Select SCAP Compliance > Benchmarks > benchmark name > profile name.
3. Click Run Assessment.
4. Highlight the machines to assess, and click the down arrow to select them.
5. Click Next and click Next again.
6. Click Next, review your selections, and click Finish.
A collection job starts, and results are not available until the job finishes. The process differs from the
general VCM compliance feature, which looks at existing collection data in the database.
View SCAP Assessment Results
Open and search SCAP assessment results through access in the data grid for the profile against which you
measured managed machines.
Where appropriate, VCM includes the corresponding standard identifier in its SCAP assessment results
and provides an embedded hyperlink to information about the identifier on Web pages such as those
provided by MITRE.
Prerequisite
Generate an assessment. See "Run an SCAP Assessment" on page 155.
Procedure
1. Click Compliance.
2. Select SCAP Compliance > Benchmarks > benchmark name > profile name.
3. In the data grid, find the row for the machine for which you generated an assessment.
4. In the row, click the ellipsis button for the result format that you generated.
The following format options are available on the data grid.
OVAL HTML
OVAL XML
XCDDF HTML
XCDDF XML
5. In the browser window that displays the assessment result, press Ctrl+f to open the search feature,
and find the results in which you are interested.
Export an SCAP Assessment
You can export assessment result output to HTML, XML, CSV, and log files. CSV is used for CCE pass/fail
results, and log files are for troubleshooting.
Running and Enforcing Compliance
VMware, Inc.
155