none
How to import current STIGs into SCCM RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I have been trying for 2 days now to get the current STIGs converted to .cab files so I can import them but am having no luck. I have downloaded all the latest SCAP files and Benchmarks but can't get it to work.

    Please Help.....

    Wednesday, November 13, 2019 8:15 PM
    |

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,

    Based on my research, we can use the SCAP extensions or Security Compliance Manager tool.

    Here is the link of SCAP extensions for your reference. https://docs.microsoft.com/en-us/configmgr/compliance/plan-design/scap/install-configure-scap#bkmk_convert-and-import

    Best Regards,
    Tina

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, November 14, 2019 6:11 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Check also the below blog

    https://yeahsccmcandoit.blogspot.com/2016/11/scap-extensions-for-configuration.html

    Thursday, November 14, 2019 8:06 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    How are things going? I just checked in to see if there are any updates. Please feel free to feedback and if the reply is helpful, please kindly click “Mark as answer”. It would make the reply to the top and easier to be found for other people who has the similar question.

    Thank you for your kindly support.

     
    Best Regards,
    Tina

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, November 18, 2019 1:46 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    i have had success converting the 1.1 SCAP content using the SCAP extensions using the info found at the link you provided. That was because they had both the Benchmark-xccdf.xml and the Benchmark-cpe-dictionary.xml files. 

    However, when i go to https://iase.disa.mil/stigs/scap/Pages/index.aspx and download the new SCAP benchamarks they only have the STIG_SCAP_1-2_Benchmark.xml.

    I have also tried using the Security Compliance Manager tool with no luck.

    What am i misssing?

     

    Mark Wood

    Monday, November 18, 2019 2:30 PM
    |