Desired compliance

Set your desired compliance. This is the benchmark and profile that you assign to a particular node and that is scanned on that node by default. Generally, you set compliance only once for your nodes.

By default, Security Compliance Management automatically assigns an appropriate benchmark for each operating system, along with a Level 1 profile, to nodes that have not been set based on fact information from Puppet Enterprise. Accepting this option is the quickest way to get up and running with desired compliance. You can also customize the default desired compliance settings for an operating system.

The Benchmark and Profile columns on the Inventory page show you the benchmark and profile for each node. You can view further details for a node by clicking on the row assigned to the node. To change a node's desired compliance, follow the instructions in Manually set desired compliance. You can also follow the manual instructions to assign a different benchmark and profile to a node, or to assign a custom profile.

Only one benchmark and profile can be assigned to each node.