I'm having issues with OVAL scans.  They run but report only application installs.  In the logs I see that there are erorrs

 ** parsing ..\definitions\microsoft.windows.server.2012.r2.xml file.
    - validating xml schema.
2017-05-19T14:38:17 : FATAL : Error while parsing xml file:
 Severity: Error
 Message: identity constraint key for element 'oval_definitions' not found
 File: C:\ProgramData\Dell\KACE\kbots_cache\packages\kbots\9\definitions\microsoft.windows.server.2012.r2.xml
 Line 236696
 At char 20

to me this looks like the xml is incorrect but that can't be true right?

Thanks.
1 Comment   [ + ] Show Comment

Comments

  • Make sure .NET Framework 4.0 is present on that server. Have you tried it on a Workstation to see if it works?
Please log in to comment

Answers

0
That looks correct - I ran the OVAL scan on a machine with 4.0 and it ran...

All other machines have 4.3/4.5 so going to investigate if this is the issue.

Thanks.
Answered 06/05/2017 by: Darkplace
Senior Yellow Belt

Please log in to comment
0
Ok so OVAL scans now "run" and report - not sure why.

However what they are reporting is false.  For example I have 50 of 50 machines showing OpenSSL CVEs but not all of the boxes have OpenSSL and the ones that do have the correct version according to the XML rule...
Answered 06/14/2017 by: Darkplace
Senior Yellow Belt

Please log in to comment
Answer this question or Comment on this question for clarity