Get started with the compliance service

Learn how to configure your RHEL systems to report compliance data to the Red Hat Lightspeed application. You can install the Security Content Automation Protocol (SCAP) Security Guide (SSG) to perform the compliance scan.

Configure systems and policies for compliance scanning
Copy link

You can configure the compliance service and assign your RHEL systems to the policies. You can assign systems to policies by using either the Red Hat Lightspeed compliance service UI, or insights-client commands in the CLI.

Before you begin
Copy link

  • The insights-client is deployed on the system.
  • You have root privileges on the system.

Procedure
Copy link

  1. Check the version of RHEL that is on your system: 
    [user@rhlightspeed]$ cat /etc/redhat-release
  2. Go to Red Hat Lightspeed Compliance - Supported configurations and find the supported SSG version for the RHEL minor version that is on your system.
    Note
    Some minor versions of RHEL support more than one version of SSG. The Red Hat Lightspeed compliance service will always show results for the latest supported version.
  3. Verify that the supported version of the SSG package is installed on the system:

    For example, for RHEL 8.4, run:

    [root@rhlightspeed]# dnf info scap-security-guide-0.1.57-3.el8_4
  4. If it is not installed, install the supported version of SSG on the system.

    For example, for RHEL 8.4, run:

    [root@rhlightspeed]# dnf install scap-security-guide-0.1.57-3.el8_4
  5. Assign systems to policies by using the Red Hat Lightspeed compliance service UI, or by using insights-client commands in the CLI:
  6. After you add each system to its corresponding security policy, return to the system and run the compliance scan: 
    [root@rhlightspeed]# insights-client --compliance
    Note
    The scan can take one to five minutes to complete.
  7. Navigate to Security > Compliance > Reports to view the results.
  8. Optional: Use cron to schedule the compliance jobs to run.