Setting up ssh keys for remote CIS-CAT assessment

Problem

Solution

CIS-CAT Ubuntu server (as user cis);

1.  Generate rsa key in PEM format (no passphrase) ssh-keygen -t rsa -m PEM

2.  Copy key to target system ssh-copy-id cis@3.133.121.21

3.  Configure sessions.properties

session.2.type=ssh

session.2.host=3.133.121.21

session.2.user=cis

session.2.identity=/home/cis/.ssh/id_rsa

session.2.port=22

session.2.tmp=/var/tmp 

Target Ubuntu server

1.  Add user cis as member of sudoers group sudo usermod -aG sudo chris

2.  Check that chris is in the sudoers group id

3. Edit /etc/sudoers and add this line so user chris will NOT be prompted for a password when sudoing.; chris ALL=(root) NOPASSWD:ALL

chris ALL=(root) NOPASSWD:ALL

 Test CIS-CAT connection

 Test connection from CIS-CAT server to target

$ sudo ./Assessor-CLI.sh -test

------snip-------

Attempting to load the default sessions.properties, bundled with the application.

Obtaining session connection --> chris@3.133.121.21:22

Connection established.  Test Successful; Disconnecting.

Exit Code 0

Keywords;

Content by Label

• Page:
  Feature Enhancement Requests for CIS Products