Can not update SaltStack SecOps Compliance and Vulnerability bundles from the user interface - how to download CIS benchmarks

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Automatic content downloads are no longer working in the UI

SaltStack SecOps Compliance and Vulnerability bundle updates

Environment

Aria Config 8.x

Tanzu Salt 10.x

VCF Salt

Resolution

How to download the bundles

This procedure assumes that the user has a valid working Docker, or Docker compatible, environment.

1. Customers must first log into the Broadcom Support Portal.
2. Search for VMware Cloud Foundation Salt or navigate directly to this URL.
3. Once you see the entry for VMware Cloud Foundation Salt, expand the section. 
4. You will now see the following information, which includes a Token link, Release version and a Shield with link icon. 
   1. Do not bother clicking on the Token link as it will take you to an empty page and includes no additional information.
5. Click on the green Shield with the link icon.
6. A module window will open and it is here where you will be presented with the necessary information to download the updated content.
   1. Who the access token is issued to.
   2. Your personal token.
   3. Allows you to copy or download a copy of your access token.
   4. Steps for how to access and download the content bundles.
   5. Note the Token expiration time, should be 1 year.
   6. Assuming you have Docker running you can now just copy paste the entire command from the module window and run the command as is in your terminal.
   7. 

How to import the bundle content

Importing Compliance Bundle Content

1. Log into your Config (RaaS) instance.
2. Make sure you’ve moved the content bundle to this instance.
3. From the cmd line, issue the following command:
   1. raas ingest /path/to/locke_timestamp_string.gz.e2
4. This may take some time, wait for the import to complete and verify a successful update.
5. Once complete, there is no need to restart any services.

Importing Vulnerability Bundle Content

1. Log into your Config (RaaS) instance.
2. Make sure you’ve moved the content bundle to this instance.
3. From the cmd line, issue the following command:
   1. raas vman_ingest /path/to/vman_timestamp_string.gz.e2
4. This may take some time, wait for the import to complete and verify a successful update.

Once complete, there is no need to restart any services.