<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 14pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Product:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
Updated DISA STIG Checklist for Oracle Linux 8</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Security Benchmark:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(41,42,46)">Oracle Linux 8 Security
Technical Implementation Guide</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">
, V2R9</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Published Sites:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
DISA STIG Checklist for Oracle Linux 8<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">, site version 14</span><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(The site version is
provided for air-gap customers.)</span></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Details: </span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> Total New Fixlets: 9</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> Total Updated Fixlets: 4</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> Total Deleted Fixlets: 6</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> Total Fixlets in Site: 374</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">New Fixlets:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Oracle
Linux must elevate the SELinux context when an administrator calls the sudo
command.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 must have the crypto-policies package installed.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 must implement a FIPS 140-3-compliant systemwide cryptographic policy.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 must implement NIST FIPS-validated cryptography for the following: To
provision digital signatures, to generate cryptographic hashes, and to protect
data requiring data-at-rest protections in accordance with applicable federal
laws, Executive Orders, directives, policies, regulations, and standards.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 cryptographic policy must not be overridden.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 SSH client must be configured to use only DOD-approved encryption ciphers
employing FIPS 140-3-validated cryptographic hash algorithms to protect the
confidentiality of SSH client connections.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 SSH client must be configured to use only DOD-approved Message
Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash
algorithms to protect the confidentiality of SSH client connections.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 must implement DOD-approved encryption in the bind package.</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Updated Fixlets:</span></b></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 must implement a FIPS 140-3-compliant systemwide cryptographic policy.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 SSH private host key files must have mode "0600" or less
permissive.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 SSH server must be configured to use only Message Authentication Codes
(MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect
the confidentiality of SSH server connections.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 SSH server must be configured to use only DOD-approved encryption ciphers
employing FIPS 140-3 validated cryptographic hash algorithms to protect the
confidentiality of SSH server connections.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Deleted Fixlets:</span></b></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 SSH daemon must be configured to use system-wide crypto policies.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 operating system must implement DOD-approved encryption in the OpenSSL
package.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 operating system must implement DoD-approved TLS encryption in the OpenSSL
package.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
OL 8 operating system must implement DoD-approved TLS encryption in the GnuTLS
package.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 SSH server must be configured to use only FIPS-validated key exchange
algorithms.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">OL
8 passwords for new users must have a minimum of 15 characters.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Additional details:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Both
analysis and remediation checks are included.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Some
of the checks allow you to use the parameterized setting to enable
customization for compliance evaluation. Note that parameterization and
remediation actions require the creation of a custom site.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Improved
a few checks by adding the pending restart feature to them. The pending restart
feature works in the following ways:</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> The action results will show “Pending Restart”
instead of “Fixed” for those checks which require OS reboot.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
check will show relevant for those endpoints until they are rebooted.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Post
reboot of the endpoint the action results will show as “Fixed” and the check
will be compliant.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Action to take:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product and you must be using BigFix version 10.0.0 and later.</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">If
you use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Using the
Synchronize Custom Checks wizard</span></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">More information:<br>
</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To know more about the BigFix
Compliance SCM checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Forum:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/compliance/63"><b><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Compliance
(Release Announcements)</span></b></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:normal;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_653zi6dqzdq5"></a><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(34,34,34)"> This category is
used by HCL to announce new releases for BigFix Compliance.</span></h3>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Compliance SCM Checklists:</span></p>
<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:normal;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_v1kg1eelz5za"></a><span lang="EN"><a href="https://forum.bigfix.com/c/release-announcements/scm-checklists/86"><b><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">SCM Checklists</span></b></a></span><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></b></h3>
<p class="MsoNormal" style="margin:12pt 0in 11pt 40pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">This category is the central reference for all SCM
Checklists supported by BigFix Compliance. It covers the complete list of
active checklists across all supported frameworks and platforms, including CIS,
DISA STIG, PCI DSS, NIST, and more, along with site name, version details, and
supported OS versions.</span></p>
<span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">We hope you find this latest release of SCM
content useful and effective. Thank you!<br>
<i>– The BigFix Compliance team</i></span></div>