IBM Tivoli and Cisco manual Installation of posture collectors, 155

remediation subsystem, such as a Tivoli Configuration Manager. After the remediation has been performed, the remediation subsystem communicates to the policy collector to obtain updated status and, if necessary, perform additional remediation.

6.2.3 Installation of posture collectors

The compliance policies are defined on the Tivoli Security Compliance Manager server and are sets of rules verifying whether the data collected on the client meets the security policy criteria. However, it means that the data must first be collected using the appropriate collectors. When the Tivoli Security Compliance Manager is installed it contains no collectors or policies. The collectors must be installed first before any policies are defined. There are several ways to this, for example, installing them from the jar files posted on the Tivoli Security Compliance Manager support page or importing the already defined policy, which brings all the necessary collectors along and installs them on the server. We have chosen this second way.

As a starting point we used the sample policies provided with the IISSCN extension pack2 for Tivoli Configuration Manager.

To install them in your environment follow the steps below:

1.Create a temporary directory and extract the content of

iisscn_extension_pack2.zip. Then go to the sample_policies subdirectory, where the following files should exist:

–IISSCN_TCM_v2.00_win2000.pol

–IISSCN_TCM_v2.00_winXP.pol

–TCMCLI.pol

2.Start the Tivoli Security Compliance Manager Administration Console by selecting Start → Tivoli Security Compliance Manager Administration Console (or for Windows 2003 Start → All programs → Tivoli Security Compliance Manager Administration Console).

Chapter 6. Compliance subsystem implementation 155