I cannot produce HTML reports from the Command line (Assessor-CLI)
Product Name
CIS-CAT Pro Assessor
Product Version
v4.1+
Date
Apr 27, 2022
Problem
The Assessor scan will run and complete successfully, and are successfully generating the -ARF.xml which is sent to Dashboard (if that option is chosen)
However, we are unable to create the output file in .csv, .html, .JSON, etc. format.
-----------------------------------------------------------------------------
***** Assessment Scoring *****
-----------------------------------------------------------------------------
Score Earned: 134.0
Maximum Available: 158.0
Total: 84.81%
-----------------------------------------------------------------------------
- Generating Checklist Results...
[..]
***** Writing Assessment Results *****
- Reports saving to /location/where/you host/Assessor-CLI/reports
-- report.name.of.scan-CIS_Benchmark-############-ARF.xml
- Generating OOTB Data URL for resource: /xslt/images/cover_page_background.gif
[No HTML produed]
Solution
Using certain proprietary Java Builds - such as an IBM or Microsoft specific Java build - can cause the assessment to be unable to produce additional report types (.HTML, .CSV, .JSON, etc.).
If the scan completes and the ARF.xml file was successfully produced but fails to create an HTML report indicates a java library issue.
As mentioned in the user guide:
“Newer Java builds may work in certain environments, however Technical Support will not be able to help with troubleshooting as CIS focuses on implementation of stable, non-proprietary versions”
The following Java versions are tested and known to work with CIS-CAT Pro Assessor
Stable official versions 8 or 11 of JRE or JDK Oracle Java
Licensing applies
OpenJDK versions 8 or 11.
Free, open source Java builds
The AdoptOpenJDK site can now be found here: Home | Adoptium
Which is also now a part of: Latest Releases | Adoptium
If you have already replaced the proprietary Java build and replaced it with one of the recommended Java builds, but you are still unable to product HTML reports, please open up a Support Ticket by visiting cisecurity.org/support and including the items listed here:
Keywords; Java HTML CSV JSON .html .csv .json
Content by Label