CIS Hardening scripts - usage

You pick a subsystem and the action.  Read the notes on Store for additional details.  Note that SQL and IIS are supported under Windows, and Tomcat under Linux.

# Usage
python cvcishardener.py [-h] [-s {sqlserver,IIS,tomcat}] [-o {audit,remedy,rollback}]

# Example
C:\Temp\cis hardeningautomation> python cvcishardener.py -s IIS -o remedy
Attempting stop…
Internet services successfully stopped
Attempting start…
Internet services successfully restarted
Reboot the system for all remedy changes to take effect.

Thanks,
Scott
 

@Scott Moseman  thank you so much , could you help me what are the changes , is there any report we can get ?

we have all in one setup in windows , so security team asking for tomcat security compliance , 

their tool is not able to access it , 

tomcat is installed in commserv as part of installation if i am not wrong , what are the basic securty measure we have in terms of tomcat appache 

what is role of this in all in one setup, 

i would appreciate if you can give a brief about this , thanks a ton again

@Scott Moseman  thank you , 

In addition for SQL Server you have to create this file:
..\SQL\resources\databaseinputs.json

An example for those who runs HDPS instead of pure Commvault:

{
  "db_credentials" : {
    "windows_authentication": true,
    "username" : "",
    "password" : "",
    "server" : "myCSname\\HDPS",
    "database" : "CommServ"
  }
}

Note: Yes, the double backslash is the key to get it work.