CIS Compliance Pack assessment shows no objects in VCF Operations 9.1.0

Products

• VCF Operations

Issue/Introduction

When attempting to install or apply the CIS Compliance Pack for VMware Cloud Foundation in VCF Operations 9.1.0, the system shows that no objects are being assessed. 

Symptoms:

• The VCF Compliance dashboard based on the CIS benchmark shows zero objects assessed.
• Navigating to Protect > Compliance > Regulatory Benchmarks reveals no object assessment data.

Environment:

Environment

VCF Operations 9.1.0

Cause

• At this time, a CIS Compliance Pack compatible with the VCF 9.x schema has not yet been released.As a result, the relevant objects are being excluded from the compliance assessment.

Resolution

Workaround:

To perform a CIS assessment in the interim, follow these steps to create a custom benchmark:

1. Log in to the VCF Operations UI.
2. Navigate to Protect > Alerts and clone the existing alerts based on the older, supported CIS version.
3. Navigate to Protect > Compliance and create a Custom Benchmark.
4. Link the cloned alerts to the new custom benchmark to initiate object assessment.