Red Hat Security: Linux in Physical, Virtual, and Cloud

You can use Red Hat Satellite compliance policies to centrally manage and review the results of OpenSCAP scans on registered clients.

A Satellite compliance policy is a named, scheduled task that scans specific hosts for compliance with an OpenSCAP XCCDF profile.

You must upload OpenSCAP content to Red Hat Satellite Server before you can use it in a compliance policy.

Clients update their compliance policy configurations with Ansible. The compliance policy that is running on Satellite instructs hosts to run OpenSCAP scans locally, and the hosts upload the results to Satellite.

The compliance policy dashboard in the Satellite Server web UI provides an overview of compliant and noncompliant hosts, and links to detailed OpenSCAP compliance reports for each host.

You can customize a compliance policy by creating an OpenSCAP tailoring file by using the SCAP Workbench tool and uploading the tailoring file to Satellite Server.