We’ve started working with the SCM module/SCA web application to monitor server hardening in the organization, and we love it!
Two issues are hindering us though -
I’ve created a custom site with the custom checklist wizard tool and filled it with checks from the DISA STIG Windows 2003 site. The custom site takes about 24 hours to show up on the SCA web app, and i’m never sure when it’s really up to date. Is there a way to force the system to “refresh” and instantly show the changes i’ve made in the console?
I’m trying to create hand-made checks to monitor parameters that do not appear in the checks provided. Even if i copy a premade fixlet and modify it to do what i want it to do, it never appears in the web application, no matter what i do. How can i build custom checks and make them work?
Regarding #1: you can force an on-demand import. In the SCA web application, go to the Management menu, Imports item. On that screen, click “Import Now”. Note that you have to be an Administrator or at least have the “Manage Imports” permission in SCA to do this.
Regarding the error on the Imports page: looks like you hit a bug (41766) that affected systems with certain timezone settings. Sorry! It’s basically a web page display error – nothing wrong with the deployment or settings themselves. This bug was resolved in SCA 1.2.1, although upgrading to this version might not resolve it in your environment.
The best way to resolve it is, if you can, open SQL Server Management Studio and run the following on your TEM Analytics database:
update system_options set value = ‘— 0’ where name = ‘import.scheduled_minute_of_day’
If you add something to SCA that requires an import, like if you add a Computer Property, or a Computer Group, or an Exception…etc, then, if you are logged in as a user with “Manage Imports” permissions, you’ll see an Import button appear at the bottom of the Reports menu.
This will not fix the Imports page error, but it will give you the option to import on demand.
As far as getting the checks to show up in SCA, SCA normally imports data from the TEM database on a 24 hour schedule. You can force an immediate import from
the TEMA web application by going to Management->Imports->Import Now.