6.5. Configuring a host group for OpenSCAP

Use this procedure to configure all the OpenSCAP requirements for a host group.

OpenSCAP Setup Overview

You must complete the following tasks on Satellite Server to assign the necessary components for a host group:

  • Enable OpenSCAP on Capsule. For more information, see Enabling OpenSCAP on External Capsules in the Installing Capsule Server guide.
  • Assign an OpenSCAP Capsule.
  • Assign a Puppet environment that contains the Puppet classes to deploy the OpenSCAP policies.
  • Assign the foreman_scap_client and foreman_scap_client::params Puppet classes.
  • Assign any compliance policies that you want to add.

For information about creating and administering hosts, see the Managing Hosts guide.

Procedure

  1. In the Satellite web UI, navigate to Configure > Host Groups, and either create a host group or click the host group that you want to configure for OpenSCAP reporting.
  2. From the Puppet Environment list, select the Puppet environment that contains the foreman_scap_client and foreman_scap_client::params Puppet classes.
  3. From the OpenSCAP Capsule list, select the Capsule with OpenSCAP enabled that you want to use.
  4. Click the Puppet Classes tab, and add the foreman_scap_client and foreman_scap_client::params Puppet classes.
  5. Click Submit to save your changes.
  6. Navigate to Hosts > Policies.
  7. Select the policy that you want to assign to the host group.
  8. Click the Host Groups tab.
  9. From the Host Groups list, select as many host groups as you want to assign to this policy.
  10. Click Submit to save your changes.