# satellite-installer --enable-foreman-plugin-openscap

# foreman-rake foreman_openscap:bulk_upload:default

# yum -y install puppet-foreman_scap_client

# yum -y install scap-security-guide

> Satellite Web UI: Configure > Host Groups > Click New Host Group

1. Name: OpenSCAP_Clients_Demo

2. Lifecycle Environment: (leave blank)

3. Content View: (leave blank)

4. Puppet Environment: Select OpenSCAP_RHEL7

5. Content Source: satellite.example.com

6. Puppet CA: satellite.example.com

7. Puppet Master: satellite.example.com

8. Openscap Capsule: satellite.example.com

9. Click Submit BEFORE advancing to the next tab. This takes you back to the Host Groups page.

10. From the Host Groups page, select OpenSCAP_Clients_Demo to modify this Host Group

11. Puppet Classes Tab:

13. Locations and Organizations tab, select to suit.

14. Click Submit to complete the update

> Satellite Web UI: Hosts > Compliance > Policies

Enter a name (Description optional)

SCAP Content tab:

Schedule tab :

Click Next, then select Locations and Organizations to suit

Hostgroups tab:

Click Submit to complete.

1. Satellite Web UI: Hosts > All Hosts > Select one or more hosts from the list of Hosts

2. Once we have the host(s) selected, a Select Action button appears above the list of hosts.

3. Select Change Group from the Select Action options

4. Select OpenSCAP_Clients_Demo from the list of host groups, then Submit

# yum -y install puppet

# echo " server = <your_satellite_server>" >> /etc/puppet/puppet.conf

# echo " environment = OpenSCAP_RHEL7" >> /etc/puppet/puppet.conf

systemctl start puppet && systemctl enable puppet

puppet agent -t

Satellite Web UI: Infrastructure > Capsule

On the Actions column, click on the available actions and select Certificates(For this demo, we only have the all-in-one Satellite/Capsule/Puppet Master)

Click Sign to sign the certificate

A scan will run base on the "Cron line:" setting in the earlier step. Monitor /var/log/messages on the client to see activities.

1. Satellite Web UI: Hosts > Policies > (Select your policy)

2. In the table "Latest reports for policy: ...", click on View Report button

3. Latest_reports_for_policy