Correcting SCAP import validation errors

When you import Security Content Automation Protocol (SCAP) content, validation errors might appear.

To research and correct validation errors on SCAP imports

1. Open the log file referenced in the SCAP import error message.
    You cannot view the log file in the TrueSight Server Automation Console. Make a note of the file name in the displayed error message and open the file on your computer's file system.
2. Examine the log file to determine which SCAP component contains the error. (For example, discover whether the error was reported against Extensible Configuration Checklist Description Format (XCCDF), Open Vulnerability and Assessment Language (OVAL), or Common Platform Enumeration (CPE).)
3. Determine the nature of the error. Is the error an XML syntax error or an incomplete file (for example, missing elements?).
    Some common causes for validation errors on SCAP content are:
   • The content was not fully downloaded from its original source location or was corrupted during the download. You can download the content again.
   • The content was edited or corrupted after the download. You can attempt to correct the error using the error messages in the import log file.
   • The original content contains an error. In this case, contact the content owner.

4. Take appropriate action to fix the error on the file system on which you originally assembled the content. 

   Note

   You cannot edit the content in the TrueSight Server Automation Console.

5. To delete the flawed SCAPBenchmark from the TrueSight Server Automation Console, right-click the benchmark object in the Depot folder and select Delete.
6. To reimport the corrected SCAP content, right-click your SCAP folder in the Depot and select New > SCAP Benchmark.