Sicura Enterprise Edition
  1. Introduction
  2. Licensing
  3. Installing SIMP EE
  4. Server install from RPM
  5. Server install from ISO
  6. Upgrade SIMP EE
  7. Server Installation via Control Repo
  8. Enable SIMP Compliance Engine
  9. Configure SIMP Compliance Engine
  10. Included Compliance Profiles
  11. Console install via Puppet
  12. Scanner Install via Puppet
  13. Simp-downloader script Reference
  14. Coverage - CIS, Windows
  15. Coverage - CIS, Linux
  16. Coverage - DISA, Windows
  17. Windows CIS module usage
  18. Linux CIS Module Usage

Server Install from ISO

To download the SIMP Enterprise ISO image, you can use either our downloader or curl. Both methods require a valid, non-expired SIMP Enterprise license key to authenticate against the download servers.

Get the ISO using simp-downloader

We’ve created a helper script, simp-downloader, that will automatically download download the latest SIMP EE ISO to your local machine. The following command will download the ISO using the license key in /etc/simp/license.key.

curl https://download.simp-project.com/simp/assets/simp-downloader/simp-downloader | bash -s --

For more information and detailed usage information, see the simp-downloader documentation here.

Get the ISO using curl

If you don’t want to use the simp-downloader script, you can download the ISO using curl and passing /etc/simp/license.key as the cacert, cert, and key.

curl -f -o SIMP-Enterprise-6.5.0-0.el7-CentOS-7.0-x86_64.iso --cacert /etc/simp/license.key --cert /etc/simp/license.key --key /etc/simp/license.key https://enterprise-download.simp-project.com/products/simp-enterprise/simp-enterprise/SIMP-Enterprise-6.5.0-0.el7-CentOS-7.0-x86_64.iso

Install from the ISO

To install a new SIMP Enterprise Server via ISO, follow the SIMP Community installation instructions until you reach the steps to configure SIMP Server. We recommend installing with FIPS disabled unless it is required by your organization policy.

After the simp config and simp bootstrap commands have been executed, the enterprise modules and files will be available to all nodes.

Console and Scanner Installations

RPM packages for the SIMP Console and SIMP Scanner are provided in the SIMP/assets directory on the ISO. After installation, these files will also be in /usr/share/SIMP/assets/simp-enterprise-assets-<version> on the SIMP Server.