User`s guide

Create Compliance Rules Based on Software Provisioning Data
A Compliance rule based on software provisioning data detects any packages or sources that are out of
compliance. You can configure remediation actions to bring the machines back into compliance.
In this example the Compliance rule checks whether the source, where platform=Any and section=Release,
was added to selected Package Managers as a source. If not, then add the repository source to the
machines where the rule fails.
Procedure
1. Click Compliance.
2. Select Machine Group Compliance > Rule Groups.
3. Expand your rule group and select Rules.
4. On the Rules data grid, click Add.
5. Type a Name and Description for your rule and click Next.
6. On the Data Type page, expand Windows and select the data type on which you are basing the rule
and click Next.
The data type does not need to be software based. In this example, select Services.
7. On the Rule Type for Services page, select Conditional (if/then) and click Next.
8. On the Conditional Data page, configure the options.
a. In the IF area, click Add.
b. Select Source Repository = YourRepository.
c. Select Must Exist.
d. In the THEN area, select Platform = Any and Section = Release.
9. On the Options page, configure the settings.
a. Select a Severity in the drop-down list.
b. Select Make available for enforcement where possible.
c. Select Software Provisioning action.
d. Select Add Source in the drop-down list, and then click Define Action. The Software Provisioning
Compliance Remediation page appears.
e. Select Add source to the beginning of existing source list.
f. Click Browse Sources to select the repository URI where the Platform=Any and Section=Release
exist. The Platform and Section update with Any and Release respectively.
g. Click OK to close the page.
h. Click Next.
10. On the Collection filters page, select the Provisioning - Package Managers collection filter and click
Next.
11. On the Important page, review the information and click Finish to save your rule.
When the Compliance Template is run, if the checks the target machines to determine if the repository
source is added as a source. If it is not, the source is added to the machines Package Manager.
Getting Started with Software Provisioning
VMware, Inc. 231