Deploying Sicura

Sicura consists of several components that work together:

• The SIMP Server runs and integrates with Puppet to manage and enforce the configuration of systems in your environment.
• The Sicura Console provides a web interface to see the compliance status of your environment, run and view reports, and get remediation steps for any compliance issues discovered.
• The Sicura Agent executes compliance scans on the systems in your environment and sends the results back to the Console for reporting.

The Console and Agent operate on their own; the SIMP Server is an optional layer for customers who want Sicura to actively enforce configuration rather than assess it. It builds on the open-source SIMP framework; this section supplements that documentation with everything specific to deploying Sicura.

Deployment order

The Sicura Console and Agent deploy on their own — no Puppet infrastructure required:

1. Deploy the Sicura Console as a container — see Container Installation — and install your license key.
2. Roll out Sicura Agents to the systems you want scanned — see Agent Installation.

This provides compliance scanning, reporting, and remediation from the Console, without Sicura managing the configuration of your systems.

Adding Puppet-based enforcement

To have Sicura continuously enforce compliant configuration through Puppet, additionally deploy the SIMP Server layer:

1. Install the SIMP Server and Sicura components — see Installing Sicura.
2. Enable the Compliance Engine (enable, then configure).
3. Apply a compliance benchmark to your systems:
   • CIS enforcement on Linux
   • DISA enforcement on Linux
   • CIS enforcement on Windows

For exactly which benchmark rules Sicura covers, see the Compliance Coverage reference.