Expanded posture and vulnerability management for Windows OS on VCFaaS
The IBM Cloud Security and Compliance Center Workload Protection now offers expanded posture and vulnerability management support for Windows servers, now providing fuller cloud-native application protection platform capabilities across hybrid multicloud including to the existing Threat Detection support for Windows. Clients can ensure their Windows workloads on VCFaaS meet security standards, identify threats in real-time and proactively address vulnerabilities through streamlined installation and integrated workflows. Easily gain these capabilities with this how-to tutorial on how to get started with the Security and Compliance Center for Windows.
How Deploy Security and Compliance Center Workload Protection for Windows
Get Started with Security and Compliance Center Workload Protection
Get started by creating and connecting an instance of the Security and Compliance Center Workload Protection following these steps:
- Navigate to the IBM Cloud Catalog.
- Select the Security and Compliance Center Workload Protection tile.
- Create an instance and connect your IBM Cloud to automatically get the results for recommended IBM policies.
- Install an agent virtual machines including for Windows hosts to leverage full CNAPP support.
Install the Windows Agent
Prerequisites
To install the Windows Agent, the following requirements need to be met:
-
- Windows Server 2019 and above.
- Visual C++ 2015-2022 Redistributable package. It can be downloaded from the official Microsoft link.
- ACCESS_KEY: The Agent access key.
- COLLECTOR: IBM SCC WP endpoint. Set it accordingly, endpoints for each IBM Cloud region are available on this list.
- Administrator permissions on the Windows host to perform the setup.
Installation
Once you download the installer, you can run it like this:
msiexec /i sysdig-host-shield.msi REGION=<region> ACCESS_KEY=<AGENT_ACCESS_KEY> VM_FEATURE_ENABLED=True POSTURE_FEATURE_ENABLED=True ACCEPT_TERMS_CONDITIONS=True /qn
You can also use the graphical installer.
Once you complete the full installation steps, you should now have the Windows agent for Security and Compliance Center Workload Protection appropriately installed! Now you can easily access the unified posture management, vulnerability management and threat detection capabilities to automate securing and protecting your critical Windows servers on VCFaaS.
Learn More
Check out the recent Security and Compliance Center Workload Protection product announcements to learn more about fuller Windows support available to leverage today and expanded coverage for IBM Cloud, Linux, PowerVS AIX and more!