csrc.nist.gov /CSRC/media/Projects/United-States-Government-Configuration-Baseline/rss/usgcb.xml
USGCB News - This feed provides general announcements about the USGCB security baselines and
supporting content.
Active Web Watch
Back to top.
Recently Seen Items
Compact view
Reading view
Microsoft Virtual PC Windows 7 32-bit VHD (USGCB-Windows7-VPC-x86-1.1.x.0-20110124.zip) - End of Life (EOL). This VHD is no longer supported and is unavailable.
USGCB Microsoft Content - Final Release: Windows XP, Windows XP Firewall, Windows Vista, Windows Vista Firewall, Windows 7, Windows 7 Firewall, Internet Explorer 7, and Internet Explorer 8.
USGCB Microsoft Content - Released Candidate 1: Windows XP, Windows XP Firewall, Windows Vista, Windows Vista Firewall, Windows 7, Windows 7 Firewall, Internet Explorer 7, and Internet Explorer 8.
Reminder - as announced in October 2011, FDCC and USGCB content have been
versioned to SCAP 1.2 to increase the number of automatically-checked
configuration settings, improve the accuracy of configuration setting and patch
application scanning, and to keep pace with technology as dictated by vendor
progression in operating system and application technologies. On December 31,
2013, support for USGCB content based on SCAP 1.0 expired and maintenance
(including monthly patch updates for SCAP 1.0 content) has been discontinued.
While authors of SCAP content/checklists may continue to produce and maintain
SCAP 1.0 and 1.1 versioned content according to their technology requirements
and follow the recommended least version principle for the SCAP content
described in SCAP Content Conventions, United States government agencies should
not use expired USGCB/FDCC content. Information is available in questions 26 through
36 of the USGCB Frequently Asked Question page. Question
26 describes the current releases of SCAP content. Questions
29 through 31 describe the end of maintenance of the SCAP 1.0 content,
including monthly USGCB patch updates. Questions
32 through 34 provide additional guidance to federal agencies regarding
USGCB, and Questions
35 and 36 provide information about migration to SCAP 1.2.
As described in previous notifications to product vendors and validation
laboratories, SCAP 1.0 validations expired on December 31, 2013. Only SCAP 1.2
product validations will be considered beginning January 1, 2014. Products
which have completed SCAP 1.2 validation are posted on the SCAP Validated Products page.
Additional information is provided in the Security Content Automation Protocol
(SCAP) Validation FAQ.
As announced on 2013.06.03, NIST has released a supplemental USGCB SCAP 1.0
content for Windows due to an issue that has been identified with the current
content. For users who are experiencing directory server performance issues
caused by the existing USGCB content, the supplemental USGCB SCAP 1.0 content is
available for download as Supplemental USGCB
SCAP 1.0 Windows Content.
USGCB Settings
Spreadsheet updated.
USGCB GPOs updated for Internet Explorer
8, Internet Explorer
7, Windows
7 Firewall, Windows 7, Windows
Vista Firewall, Windows
Vista, Windows
XP Firewall, and Windows XP.
USGCB Patch
Content updated for Major Version 2.0.x.0 for Microsoft Windows XP and Internet
Explorer 7 and Major Version 1.2.x.0 for Microsoft Windows 7, Windows
7 Firewall, and Internet Explorer
8.
Released 2.0.x.0 for Microsoft Windows XP, Windows
XP Firewall, Windows
Vista, Windows
Vista Firewall, and Internet Explorer
7 and 1.2.x.0 for Microsoft Windows 7, Windows
7 Firewall, and Internet Explorer
8.
USGCB 1.0.5.0 SCAP Content, Kickstart
Configuration, and Documentation released
for Red Hat
Enterprise Linux 5 Desktop.
USGCB Major Version 2.0.x.0-Alpha-Candidate SCAP Content released for Internet Explorer
7, Windows
Vista, Windows
Vista Firewall, Windows XP,
and Windows
XP Firewall. USGCB Major Version 2.0.x.0 SCAP Content released for Internet Explorer
8, Windows
Vista, and Windows
Vista Firewall.