Install the Security Compliance Management module

Install the Security Compliance Management module from Puppet Forge.

Modules are self-contained, shareable bundles of code and data. The Security Compliance Management module contains a Puppet Bolt task — the tool that runs the CIS assessor on your nodes.

The Security Compliance Management module lives on Puppet Forge, a repository of thousands of modules. If you're new to Puppet Enterprise and Security Compliance Management, see Managing environment content with a Puppetfile for more information on the Puppetfile and installing modules.

1. Go to the SCM module on the Forge.

   Follow the instructions in the r10k or Code Manager drop-down menu to add the module declaration to your Puppetfile. You also need to add its dependencies. For example:

   # Puppet comply module
   mod 'puppetlabs/comply', '<Check Forge for version, should match SCM version>'
    
   # dependencies for comply
   mod 'puppet/archive', '7.1.0'
   mod 'puppetlabs/chocolatey', '8.0.0'
   mod 'puppetlabs/inifile', '6.1.1'
   mod 'puppetlabs/ruby_task_helper', '0.6.1'
   mod 'puppetlabs/stdlib', '9.6.0'
   mod 'puppetlabs/powershell', '6.0.0'
   mod 'puppetlabs/registry', '5.0.1'
   mod 'puppetlabs/pwshlib', '1.1.1'

   If you don’t specify options, Code Manager installs the latest version and does not update it automatically. To always have the latest version installed, specify :latest and it updates automatically when a new version is released. Make sure you are always running the latest version of Security Compliance Management if you intend to use the :latest keyword to update the Security Compliance Management module. To install a specific version of the module that does not update automatically, specify the version number as a string.

   If you choose a specific version of the module, it must be the same as the Security Compliance Management version. For example, version 3.3.0 of the module must be installed for Security Compliance Management 3.3.0.
2. SSH into your Puppet Enterprise primary server and deploy the code:

   puppet-code deploy --all