5.8

For a list of enforceable data types, see one of the following lists:
n Enforceable Compliance Windows Data Types and Properties
n Enforceable Compliance UNIX Data Types and Properties
n Enforceable Compliance Virtual Environment Data Types and Properties
If the rule is configured for automatic enforcement, VCM changes the noncompliant setting to the
compliant value on the affected machine or object after the compliance assessment runs. If the rule is not
configured for automatic enforcement, you select a noncompliant rule and enforce it. VCM then changes
the value on the affected machine or object to the required compliant value.
For this example, you are working with a Windows or Linux machine, either a physical machine or a
virtual machine. This example assumes that you are not auto-enforcing the noncompliant results during
the compliance run.
Procedure
1. Click Compliance.
2. Select the compliance template.
For example, Machine Groups Compliance > Templates > {template name}.
3. In the Status column, select the rule results that are noncompliant and enforceable, indicated by the
NoncompliantEnforceable icon, and click Enforce.
4. Select Selected item(s) only and click Next.
5. Review the Information page to ensure that you understand the number of items affected by the
enforcement change and click Finish.
6. After the enforcement job finishes, click Refresh.
7. In the Enforcement column, verify that the enforcement action succeeded, indicated by the Succeeded
icon.
After enforcing compliance, VCM performs another data collection.
What to do next
View the results to verify that the machines or objects are now compliant.
Enforce Compliance Template Results by Using VCM Actions
You can resolve noncompliant results using VCM actions on the data grids to change settings when the
action is not available for enforceable compliance.
For this example, a template includes a rule where snapshots older than a particular date must not exist. If
a virtual machine snapshot exists older than the specified date, the object is noncompliant. The compliance
remediation action is to delete the older snapshots that make the object noncompliant. You can delete a
virtual machine snapshot as an enforceable action in compliance, or you can use the VCM action to
manually make the object compliant.
Running Compliance for the VMware Cloud Infrastructure
VMware, Inc.
69