Managing the Baseline Whitelist

Scenarios

You can add the baseline check items under DJCP MLPS, Cloud security practices, or General Security Standard to the whitelist. HSS will not check the whitelisted items on servers.

• Creating a Baseline Whitelist

  You can add check items to the whitelist while handling configuration check results. You can also create a baseline whitelist and add check items and servers to it.

• Editing a Baseline Whitelist

  You can edit an existing baseline whitelist to modify the whitelisted servers.

• Deleting a Baseline Whitelist

  To resume checks for an item, remove it from the baseline whitelist.

Creating a Baseline Whitelist

1. Log in to the HSS console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, choose Risk Management > Baseline Checks.
   Figure 1 Baseline checks
   

4. In the upper right corner of the page, click Manage Baseline Whitelist.
5. Click the Create Whitelist.
6. Select baseline items and click Next. For details, see Table 1.
   Figure 2 Creating a baseline whitelist
   

   Table 1 Parameters for creating a baseline whitelist

   Parameter	Description
   OS	Select the server OS whose check items need to be whitelisted. Linux Windows
   Baseline	Select the baseline items to be whitelisted. Perform the following steps: Click next to DJCP MLPS, Cloud security practices, or General Security Standard to expand the level-2 types. Click next to a level-2 check type to expand level-3 check types. Click a level-3 check type to view its check items in the list on the right. Select the items to be whitelisted.

7. Select the scope of servers where the whitelist is to be applied.
   • All: All servers, including those added later.
   • Specific servers: Select servers.

8. Click OK.

   You can view the new baseline whitelist in the whitelist table.

Editing a Baseline Whitelist

1. Log in to the HSS console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, choose Risk Management > Baseline Checks.
   Figure 3 Baseline checks
   

4. In the upper right corner of the page, click Manage Baseline Whitelist.
5. In the Operation column of a baseline whitelist, click Edit. Modify the whitelist on the edit page.
   Figure 4 Editing a baseline whitelist
   

6. Select the scope of servers where the whitelist is to be applied.
   • All: All servers, including those added later.
   • Specific servers: Select servers.

7. Click OK.

Deleting a Baseline Whitelist

1. Log in to the HSS console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, choose Risk Management > Baseline Checks.
   Figure 5 Baseline checks
   

4. In the upper right corner of the page, click Manage Baseline Whitelist.
5. In the Operation column of a baseline whitelist, click Delete.
6. In the dialog box displayed, click OK.