Skip to main content
Solved

Configuring AIDE on AHV and CVM

  • Jan 16, 2021 11:16 AM UTC
  • 2 replies
  • 1284 views

Forum|alt.badge.img+2

Hi,

I would need some guidance on enabling Aide on AHV and CVM and strong password policy for the hardening.

I found the guide on this link: Hardening Controller VM

If I enable the AIDE on AHV and CVM. Is there anything need to be done? Additional appliance to deploy?

Best answer by Alona

Hi swee han,

Thank you for raising the question. The paragraph could be worded better, especially this part “The following options are configured or customized to harden the AHV:”

Essentially, what happens is running those ncli commands will put aide script into cron tab to be run weekly. It already is running the --init command to initialize the DB if non-existing, and then running --check to validate the files and output to a log file.

There is no additional appliance needed to enable AIDE on AHV or CVM.

View original
This topic has been closed for replies.

2 replies

Forum|alt.badge.img+2
  • Author
  • Trailblazer
  • Jan 16, 2021 3:48 PM UTC

Does enable AIDE means it will install the AIDE package on the AHV and CVM if I enable on AIDE on both of them?


Alona
Nutanix Employee
Forum|alt.badge.img+5
  • Nutanix Employee
  • Answer
  • Jan 20, 2021 1:40 AM UTC

Hi swee han,

Thank you for raising the question. The paragraph could be worded better, especially this part “The following options are configured or customized to harden the AHV:”

Essentially, what happens is running those ncli commands will put aide script into cron tab to be run weekly. It already is running the --init command to initialize the DB if non-existing, and then running --check to validate the files and output to a log file.

There is no additional appliance needed to enable AIDE on AHV or CVM.