OpenSCAP Running and Generating Report in Windows OS

Home > Windows > OpenSCAP Running and Generating Report in Windows OS

OpenSCAP Running and Generating Report in Windows OS

1. Download OpenSCAP

• Go to: OpenSCAP Base Downloads
• Download the latest Windows installer (ZIP package).

2. Install the Application

• Extract and install the package.
• After installation, OpenSCAP Desktop will launch automatically.

3. Important Note (Hardened Servers)

• If the server is hardened, check the following Group Policy:

 User Account Control: Only elevate executables that are signed and validated  

• This policy must be set to Disabled for OpenSCAP to run.

4. Open the Application

• Launch OpenSCAP Desktop from the installation directory.

5. Start a Scan

• Go to the Scans menu.
• Select the SCAP file for your system:
  • Windows 10 → ssg-windows10-ds.xml
  • Windows 11 → ssg-windows11-ds.xml
  • Windows Server → ssg-windows-server-ds.xml
• Click Start Scan and choose the file.

6. View Result

• After the scan completes, a report is generated (HTML format).
• Open the report in any browser (Edge, Chrome, Firefox) to view compliance results.

Reference

• OpenSCAP for Windows

Home > Windows > OpenSCAP Running and Generating Report in Windows OS