SCM custom sites not updating in SCA web application - how do I force them?

system · February 8, 2012, 12:32pm

(imported topic written by VadimRomanov)

Hi

We’ve started working with the SCM module/SCA web application to monitor server hardening in the organization, and we love it!

Two issues are hindering us though -

I’ve created a custom site with the custom checklist wizard tool and filled it with checks from the DISA STIG Windows 2003 site. The custom site takes about 24 hours to show up on the SCA web app, and i’m never sure when it’s really up to date. Is there a way to force the system to “refresh” and instantly show the changes i’ve made in the console?
I’m trying to create hand-made checks to monitor parameters that do not appear in the checks provided. Even if i copy a premade fixlet and modify it to do what i want it to do, it never appears in the web application, no matter what i do. How can i build custom checks and make them work?

Thanks!

Vadim Romanov

system · February 8, 2012, 8:23pm

(imported comment written by SystemAdmin)

Hi Vadim,

Glad you’re loving the content and reporting!

Regarding #1: you can force an on-demand import. In the SCA web application, go to the Management menu, Imports item. On that screen, click “Import Now”. Note that you have to be an Administrator or at least have the “Manage Imports” permission in SCA to do this.

Regarding #2: creating custom content that works in SCA is a bit more complex than standard SCM fixlet work. We’re working on some things to make it easier. One thing that will help in the short term is we’re developing a short developer’s document to explain the internals of an SCM fixlet. It should be ready next week, in first draft form, in the DeveloperWorks wiki. – https://www.ibm.com/developerworks/mydeveloperworks/wikis/home?lang=en#/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20and%20SCA

– Jeff

system · February 9, 2012, 1:07pm

(imported comment written by VadimRomanov)

Thanks for the tips!

When i try to open the “Imports” page in SCA i get an error screen -

We’re sorry, but something went wrong. Please contact your Tivoli Endpoint Manager Analytics administrator if the problem persists.

Any idea what should I check? I tried restarting the SCA service, same result.

Thanks! I’ll wait for the guide.

system · February 9, 2012, 7:55pm

(imported comment written by SystemAdmin)

Hi Vadim,

Regarding the error on the Imports page: looks like you hit a bug (41766) that affected systems with certain timezone settings. Sorry! It’s basically a web page display error – nothing wrong with the deployment or settings themselves. This bug was resolved in SCA 1.2.1, although upgrading to this version might not resolve it in your environment.

The best way to resolve it is, if you can, open SQL Server Management Studio and run the following on your TEM Analytics database:

update system_options set value = ‘— 0’ where name = ‘import.scheduled_minute_of_day’

– Jeff

system · February 9, 2012, 8:04pm

(imported comment written by SystemAdmin)

Oh, another workaround to bug 41766 is this:

If you add something to SCA that requires an import, like if you add a Computer Property, or a Computer Group, or an Exception…etc, then, if you are logged in as a user with “Manage Imports” permissions, you’ll see an Import button appear at the bottom of the Reports menu.

This will not fix the Imports page error, but it will give you the option to import on demand.

– Jeff

system · February 12, 2012, 3:41pm

(imported comment written by VadimRomanov)

Thanks Jeff!

I’ve upgraded our SCA deployment to 1.2.2 and ran the update query you suggested and it fixed it.

I’m waiting on the SCA fixlet authoring guide.

Thanks again!

system · February 13, 2012, 2:39pm

(imported comment written by VadimRomanov)

Hi

Any news on the SCM Fixlet authoring paper? I’m itching to build a few custom fixlets we need to complete our SCA server hardening reports.

Vadim.

system · February 14, 2012, 12:02am

(imported comment written by Jeff Saxton)

I am presently working on documentation that will help customers seeking to make Custom SCM checks. This should be available in the next two weeks.

Feel free to send me an email and I will include you in the distribution and work with you to make sure that you have the information you need.

My name is Jeff Saxton and my email address is jsaxton@us.ibm.com

As far as getting the checks to show up in SCA, SCA normally imports data from the TEM database on a 24 hour schedule. You can force an immediate import from

the TEMA web application by going to Management->Imports->Import Now.

Again please feel free to contact me.

Jeff