Filter
Top Products
Chapter 6. Compliance subsystem implementation 155
remediation subsystem, such as a Tivoli Configuration Manager. After the
remediation has been performed, the remediation subsystem communicates to
the policy collector to obtain updated status and, if necessary, perform additional
remediation.
6.2.3 Installation of posture collectors
The compliance policies are defined on the Tivoli Security Compliance Manager
server and are sets of rules verifying whether the data collected on the client
meets the security policy criteria. However, it means that the data must first be
collected using the appropriate collectors. When the Tivoli Security Compliance
Manager is installed it contains no collectors or policies. The collectors must be
installed first before any policies are defined. There are several ways to this, for
example, installing them from the jar files posted on the Tivoli Security
Compliance Manager support page or importing the already defined policy,
which brings all the necessary collectors along and installs them on the server.
We have chosen this second way.
As a starting point we used the sample policies provided with the IISSCN
extension pack2 for Tivoli Configuration Manager.
To install them in your environment follow the steps below:
1. Create a temporary directory and extract the content of
iisscn_extension_pack2.zip. Then go to the sample_policies subdirectory,
where the following files should exist:
– IISSCN_TCM_v2.00_win2000.pol
– IISSCN_TCM_v2.00_winXP.pol
– TCMCLI.pol
2. Start the Tivoli Security Compliance Manager Administration Console by
selecting Start → Tivoli Security Compliance Manager Administration
Console (or for Windows 2003 Start → All programs → Tivoli Security
Compliance Manager Administration Console).