Why can't I export OVAL and XCCDF files after tailoring a Benchmark?
- Amanda McGown
- Chris Boldiston
Product Name
CIS Tailored Benchmarks
Product Version
All
Date
Jan 12, 2022
Problem
I am trying to export a tailored Benchmark for use with CIS-CAT Pro Assessor v4.x.x. To do this the file must contain full SCAP content (Open Vulnerability and Assessment Language (OVAL) and Extensible Configuration Checklist Description Format (XCCDF) content) or OVAL standalone content. However, when I try to export a policy I get a statement that OVAL is not available at all (Highlighted in red).
Forking and Customization of CIS Benchmarks is available to CIS SecureSuite Member Only.
Non SecureSuite Members will not be able to Fork Benchmarks from the WorkBench Communities or the full Benchmark.
Solution
If the desired Benchmark does not include the ability to modify recommendation artifacts, then exporting XCCDF and OVAL files for use by CIS-CAT is not available.
This is likely due to the fact that the desired Benchmark was never integrated into CIS-CAT Pro Assessor and thus doesn't have the necessary Automated Assessment Content (AAC) files.
For more information on general tailoring information click here & click here for Tailoring How-To
If you navigate to the WorkBench Recorded Webinars page you can view the following SecureSuite Member® Webinar, regardless of membership status!
CIS Benchmark Customization
CIS Benchmark Tailoring via CIS WorkBench
If the Benchmark in question is on the list of Supported Benchmarks but you continue to receive errors, please open a support by visiting http://cisecurity.org/support . Please include:
The Benchmark name and version you are attempting to export files from
A direct link to the tailored Benchmark
A screenshot of the error message you are seeing
Your email address which is tied to your SecureSuite Membership on WorkBench
Keywords; Tailoring, export, OVAL, XCCDF
Content by Label