System Package Template Information
As stated elsewhere templates are blank checklists made from DISA, Organization or System Package templates as a start. These templates can be used in OpenRMF® Professional to create checklists or to copy and create Organization or System level templates. You can edit the System Package Templates and save vulnerability and other detailed information.
As you edit the template, the score is updated and the template is versioned so you can view historical changes. You can also lock vulnerabilities so they are created in the checklist for your system package as locked from the beginning.
System templates are meant to serve as “standard templates” just for a particular system in OpenRMF® Professional. System templates can be edited and updated with stanard / boilerplate status and details for use by all with access to that system package and checklist create and edit capability within it.
How System Package Templates are Created
System Package templates are not installed by default. They have to be made from DISA, CIS, Custom or other templates and copied into a System Package template. Once a template is made every person using the OpenRMF® Professional installation can use a system package template.
What you can do with System Package Templates
By default, they are used to match up to SCAP scan results or audit compliance scan results to create checklists.
Additionally, if you select one or more templates in the listing you can bulk download them all into a ZIP file locally. All the CKL files that you selected will be in that ZIP file.
Copying them to other Templates
Your System Templates can also be copied into other templates for another Organization or even System templates. System templates require you to have a “Create Template” group permission in that system or you will not see the option to copy to a system template. Once copied they are independent and can be updated and edited unto themselves. You may want to do this to customize templates as has been discussed in other areas of the help sections.
To create system templates you need the “Create Template” group permission. And there is a separate “Edit Template” group permission for systems to allow editing details and vulnerabilities inside a system packager template that already exists.
Making new Checklists from System Package Templates
If you have any “Create Checklist in a System Package” permissions you can select a system package template from the listing and choose the “Create Checklist” from the bulk menu item just above the table listing to the right. If you click the Apply button you can choose the system and then a checklist of that type is created in that system.
You will need to update any information such as hostname, FQDN, role, etc. for the checklist inside the system listing. You will want to do this if you are trying to match this template up to a brand new SCAP scan as they match on STIG type and hostname / device name.