Automation for Secure Hosts supports a variety of security and compliance benchmarks.

Note: Supported security and compliance benchmarks are updated independently of Automation for Secure Hosts product releases. To be notified when new benchmarks are supported, click the icon to subscribe to this page.

Currently, Automation for Secure Hosts supports these operating systems, and benchmarks:

Note: Some Linux systems, such as RHEL and SUSE, require an active connection to the Automation Config repository. In the event of a repository connectivity issue or software installation failure:
  • Check network connectibity between the system and software repository.
  • Ensure there is adequate disk space on the system for new packages.
  • Ensure that your subscriptions are up-to-date on the system.
You can view the minion logs for more information on the issue.
Table 1. Supported Compliance Security Operating Systems and Benchmarks
OS Name OS Version Benchmark Authority Benchmark Version Benchmark Profiles
CentOS Linux 7 CIS v2.2.0

Level 1 - Server

Level 2 - Server

Level 1 - Workstation

Level 2 - Workstation
Debian Linux 9 CIS v1.0.0

Level 1 - Server

Level 2 - Server

Level 1 - Workstation

Level 2 - Workstation
Microsoft Windows Server 2012 R2 CIS v2.3.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server
Microsoft Windows Server 2016 R 1607 CIS v1.4.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

Next Generation Windows Security
Microsoft Windows Server 2019 R 1809 CIS v1.3.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

Next Generation Windows Security - Domain Controller

Next Generation Windows Security - Member Server
Microsoft Windows Server 2019 R3 STIG v2.0.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

Next Generation Windows Security - Domain Controller

Next Generation Windows Security - Member Server
Microsoft Windows Server 2022 CIS v1.0.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

Next Generation Windows Security - Domain Controller

Next Generation Windows Security - Member Server
Oracle Linux 7 CIS v2.1.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server
Photon 3 STIG N/A Category II

Category III
Red Hat Enterprise Linux 7 CIS v3.1.1

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

DISA STIG
Red Hat Enterprise Linux 8 CIS v2.0.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

DISA STIG
Red Hat Enterprise Linux 9 CIS v1.0.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server

DISA STIG
Red Hat Enterprise Linux 7 STIG Version 2, Release 4

Category I

Category II

Category III
SUSE Enterprise Linux 12 SP4 CIS v2.1.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server
SUSE Enterprise Linux 15 CIS v1.0.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server
Ubuntu Linux 14.04 LTS CIS v2.1.0

Level 1 - Domain Controller

Level 1 - Member Server
Ubuntu Linux 16.04 LTS CIS v1.1.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server
Ubuntu Linux 18.04 LTS CIS v.1.0.0

Level 1 - Domain Controller

Level 1 - Member Server

Level 2 - Domain Controller

Level 2 - Member Server
Table 2. Supported Vulnerability Operating Systems
Operating System Versions
CentOS
  • 6
  • 7
  • 8
Red Hat Enterprise Linux
  • 6
  • 7
  • 8
Oracle Linux
  • 6
  • 7
  • 8
Ubuntu Linux
  • 16.x
  • 18.x
Windows
  • Microsoft Windows 10
  • Microsoft Windows Server 2008+
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows Server 2016 R1607
  • Microsoft Windows Server 2019 R1809
Debian
  • Debian 7 "Wheezy"
  • Debian 8 "Jessie"
  • Debian 9 "Stretch"
  • Debain 10 "Buster"