Newly added security checks and policy templates are missing in Secure Configuration Manager 7.1

  • 7023551
  • 29-Nov-2018
  • 08-Feb-2019

Environment

Secure Configuration Manager 7.0
Secure Configuration Manager 7.1

Situation

After upgrading from 7.0 to 7.1 SCM is not able to import a security check or policy template. This might happen if you are using any of the SQL Server versions or their service
packs/cumulative updates.

  

Resolution

Scenario 1: If the upgrade has not been performed.

Follow the steps below

1. Execute this script against the VigilEnt Database script
2. Perform the Secure Configuration Manager 7.1 upgrade

Scenario 2: If the upgrade has already been performed. 

1. Confirm if the issue is present in your upgraded system, you can check this by searching for one of the templates - 

    “CIS Microsoft Windows Server 2012 R2 Benchmark v2.2.1 for Level 1 - Domain Controller”

2. If the template isn’t present, perform a backup of Secure Configuration Manager data, refer Backing up Configuration Data Section in Installation Guide.

3. Execute this script against the VigilEnt database script

4. Download the patch from the following location: patch

5. Unzip the contents of the downloaded patch zip file to Core service Product folder ((Default Core service installation folder is C:\Program Files (x86)\NetIQ\Secure Configuration Manager\Core Services). 

The downloaded patch zip file contains the following files:

ImportTemplatesAndChecks.bat file
Policy Templates folder
Security Checks folder
Template Details folder

6. Execute ImportTemplatesAndChecks.bat file with Administrative rights.

7. Confirm the presence of template - “CIS Microsoft Windows Server 2012 R2 Benchmark v2.2.1 for Level 1 - Domain Controller”

Cause

During the upgrade process, multiple temporary databases with similar names caused the issue.