United States Government Configuration Baseline USGCB

• 2017年01月27日 - Microsoft Virtual PC Windows 7 32-bit VHD (USGCB-Windows7-VPC-x86-1.1.x.0-20110124.zip) - End of Life (EOL). This VHD is no longer supported and is unavailable.
• 2015年04月20日 - USGCB SCAP 1.2 Content Final Release for Microsoft Windows XP, Windows Vista, Windows 7, Windows XP Firewall, Windows Vista Firewall, Windows 7 Firewall, Internet Explorer 7, and Internet Explorer 8 posted.
• 2015年02月25日 - USGCB SCAP 1.2 Content Release Candidate 1 for Microsoft Windows XP, Windows Vista, Windows 7, Windows XP Firewall, Windows Vista Firewall, Windows 7 Firewall, Internet Explorer 7, and Internet Explorer 8 posted.
• 2015年02月25日 - Removed USGCB SCAP 1.0 data streams.
• 2014年01月17日 - USGCB 1.2.5.0 SCAP Content released for Red Hat Enterprise Linux 5 Desktop.
• 2014年01月10日 - Reminder - as announced in October 2011, FDCC and USGCB content have been versioned to SCAP 1.2 to increase the number of automatically-checked configuration settings, improve the accuracy of configuration setting and patch application scanning, and to keep pace with technology as dictated by vendor progression in operating system and application technologies. On December 31, 2013, support for USGCB content based on SCAP 1.0 expired and maintenance (including monthly patch updates for SCAP 1.0 content) has been discontinued. While authors of SCAP content/checklists may continue to produce and maintain SCAP 1.0 and 1.1 versioned content according to their technology requirements and follow the recommended least version principle for the SCAP content described in SCAP Content Conventions, United States government agencies should not use expired USGCB/FDCC content. Information is available in this section of the USGCB Frequently Asked Question page. This question describes the current releases of SCAP content. These two questions describe the end of maintenance of the SCAP 1.0 content, including monthly USGCB patch updates. These three questions provide additional guidance to federal agencies regarding USGCB, and these two questions provide information about migration to SCAP 1.2.
• 2014年01月10日 - As described in previous notifications to product vendors and validation laboratories, SCAP 1.0 validations expired on December 31, 2013. Only SCAP 1.2 product validations will be considered beginning January 1, 2014. Products which have completed SCAP 1.2 validation are posted on the Validated Products and Modules. Additional information is provided in the Security Content Automation Protocol (SCAP) Validation FAQ.
• 2013年12月17日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年12月17日 - USGCB 1.1.5.0 SCAP Content released for Red Hat Enterprise Linux 5 Desktop.
• 2013年11月19日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年10月22日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年09月20日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年08月30日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年08月09日 - As announced on 2013年06月03日, NIST has released a supplemental USGCB SCAP 1.0 content for Windows due to an issue that has been identified with the current content. For users who are experiencing directory server performance issues caused by the existing USGCB content, the supplemental USGCB SCAP 1.0 content is available for download at Supplemental USGCB SCAP 1.0 Content.
• 2013年07月31日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年06月25日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年06月03日 - NIST is releasing supplemental USGCB SCAP 1.0 content for Windows due to an issue that has been identified with the current content. This issue may cause excessive directory server performance degradation or system failure. The supplemental content will use an alternate method for checking the file effective rights in the USGCB content that avoids the performance issue. Although this alternate method is a valid SCAP 1.0 checking method, it was not part of the SCAP 1.0 Validation Program; therefore, NIST cannot post the content as Tier IV content as defined by SP 800-70rev2. For users who are experiencing directory server performance issues caused by the existing USGCB content, the supplemental USGCB SCAP 1.0 content will be available on the NIST USGCB web site within two months of the publication date of this notice.
• 2013年05月29日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年04月29日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年03月21日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年02月23日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2013年01月22日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年12月28日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年12月05日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年11月28日 - SCAP 1.2 (Oval 5.10) content signature updated; no other change to content.
• 2012年10月31日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年08月17日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年07月30日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年06月15日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年05月21日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年04月23日 - SCAP 1.2 data streams now available for all USGCB-supported Microsoft products.
• 2012年04月23日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年03月22日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年02月23日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2012年02月10日 - Updated documentation for USGCB settings.
• 2012年01月23日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7, Windows Vista, and Windows XP.
• 2011年11月14日 - USGCB Patch Content updated for Internet Explorer 8, Internet Explorer 7, Windows 7 Firewall, Windows 7, Windows Vista Firewall, Windows Vista, Windows XP Firewall, and Windows XP.
• 2011年11月10日 - USGCB GPOs updated for Internet Explorer 8, Internet Explorer 7, Windows 7 Firewall, Windows 7, Windows Vista Firewall, Windows Vista, Windows XP Firewall, and Windows XP.
• 2011年11月08日 - USGCB 1.0.5.0 SCAP Content updated for Red Hat Enterprise Linux 5 Desktop. Removed version information in the filenames of the USGCB settings and known issues.
• 2011年10月26日 - USGCB Major Version 1.2.x.0 VHDs released for Windows 7. USGCB Major Version 2.0.x.0 GPOs released for Windows 7. USGCB Settings and Known Issues renamed to exclude version information.
• 2011年10月26日 - USGCB Patch Content updated for Major Version 2.0.x.0 for Microsoft Windows XP and Internet Explorer 7 and Major Version 1.2.x.0 for Microsoft Windows 7, Windows 7 Firewall, and Internet Explorer 8.
• 2011年10月17日 - Released 2.0.x.0 for Microsoft Windows XP, Windows XP Firewall, Windows Vista, Windows Vista Firewall, and Internet Explorer 7 and 1.2.x.0 for Microsoft Windows 7, Windows 7 Firewall, and Internet Explorer 8.
• 2011年10月03日 - Fixed versioning for Microsoft Windows XP, Windows XP Firewall, Windows Vista, Windows Vista Firewall, and Internet Explorer 7 from 1.2.x.0-Alpha-Candidate to 2.0.x.0-Alpha-Candidate, for Microsoft Windows 7, Windows 7 Firewall, and Internet Explorer 8 from 2.0.x.0 to 1.2.x.0, and for Red Hat Enterprise Linux 5 Desktop from 1.1.2.0 to 1.0.5.0.
• 2011年09月30日 - USGCB 1.0.5.0 SCAP Content, Kickstart Configuration, and Documentation released for Red Hat Enterprise Linux 5 Desktop.
• 2011年09月26日 - Registration is now open for the 7th Annual IT Security Automation Conference taking place in Arlington (Crystal City), Virginia from October 31 to November 2, 2011. Please visit SCAP Events for the draft agenda, conference announcement, and registration link. The 3-day event includes tutorials, tracks, workshops, and vendor expo.
• 2011年09月21日 - USGCB Major Version 2.0.x.0-Alpha-Candidate SCAP Content released for Internet Explorer 7, Windows Vista, Windows Vista Firewall, Windows XP, and Windows XP Firewall. USGCB Major Version 2.0.x.0 SCAP Content released for Internet Explorer 8, Windows 7, and Windows 7 Firewall.
• 2011年08月18日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年07月27日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年07月26日 - USGCB Beta-Candidate Puppet Modules updated for Red Hat Enterprise Linux 5 Desktop.
• 2011年07月06日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年04月28日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年03月31日 - USGCB Beta-Candidate Kickstart Configuration released for Red Hat Enterprise Linux 5 Desktop.
• 2011年03月29日 - USGCB Beta-Candidate SCAP Content, Puppet Modules, and Documentation released for Red Hat Enterprise Linux 5 Desktop.
• 2011年03月18日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年02月28日 - USGCB Alpha-Candidate SCAP Content, Configuration Support Files, and Documentation released for Red Hat Enterprise Linux 5 Desktop.
• 2011年02月22日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年02月04日 - USGCB Major Version 1.1.x.0 GPOs released for Internet Explorer 8, Windows 7, and Windows 7 Firewall. USGCB Major Version 1.1.x.0 VHDs released for Windows 7.
• 2011年01月31日 - NIST updated the SCAP Validation Program to include USGCB test requirements and test tools. Accredited laboratories are now able to validate product capability to process USGCB SCAP content and produce SCAP compliant results.
• 2011年01月31日 - USGCB Major Version 1.1.x.0 SCAP Content released for Internet Explorer 8, Windows 7, and Windows 7 Firewall.
  
  This release includes updated documentation for USGCB settings and known issues. Please note that distinct content for the X86 and AMD64 platform architectures have been combined into a single stream that works on both platforms.
• 2011年01月20日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2011年01月07日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2010年11月17日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2010年11月16日 - USGCB Settings Spreadsheet updated. This version includes about 12 typographical corrections. There are no changes to the setting values.
• 2010年11月09日 - USGCB/FDCC Comparison Spreadsheets for Windows and Internet Explorer updated.
• 2010年11月03日 - USGCB GPOs, Patch Content, and VHDs updated for Windows 7.
  USGCB Policy
  • No changes were made to the USGCB Policy.
  GPOs
  • Removed all Alpha and Beta instances in XML results file.
  SCAP Content
  • OVAL - Corrected the registry value name for the "Do not process the run once list" (CCE-10154-3).
  • XCCDF - Corrected the value mapping table for "Allow users to connect remotely using Remote Desktop Services" (CCE-9985-3).
  VHDs
  • Added VHD for Virtual PC
  • Updated VHDs to include all October Updates
• 2010年10月27日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2010年10月20日 - USGCB VHDs and GPOs posted for Internet Explorer 8, Windows 7, and Windows 7 Firewall. The settings in the VHDs and GPOs have not changed with respect to the final USGCB policy released in August.
• 2010年09月30日 - USGCB Patch Content updated for Internet Explorer 8 and Windows 7.
• 2010年09月24日 - USGCB Major Version 1.0.x.0 released for Windows 7, Windows 7 Firewall, and Internet Explorer 8. The previous USGCB beta settings has been approved by the Federal CIO Council's Architecture and Infrastructure Committee's (AIC) Technology Infrastructure Subcommittee (TIS) for release as the first USGCB Major Version; please note that USGCB settings have not changed since the previous beta release.
  
  This release includes updated documentation for USGCB settings and known issues. Also included in this release is updated SCAP content for Windows 7, Windows 7 Firewall, and Internet Explorer 8. A new SCAP data stream has been added to the Windows 7 SCAP Content; this new stream captures settings specific to USGCB energy conservation policy.
• 2010年08月31日 - Beta USGCB Settings released for Windows 7, Windows 7 Firewall, and Internet Explorer 8. The updates to these Beta settings were based on feedback collected from numerous federal agencies during a public comment period for the Alpha USGCB settings. NIST, at the request of the Federal CIO Council's Architecture and Infrastructure Committee's (AIC) Technology Infrastructure Subcommittee (TIS), evaluated this feedback and updated the USGCB settings where appropriate. A detailed change log describing all setting updates can be found in the USGCB Beta Settings Spreadsheet.
  
  Also included in this release are the supporting material for implementing and verifying the Beta USGCB Settings on Windows 7, Windows 7 Firewall, and Internet Explorer 8. This includes updated SCAP Content, GPOs, and VHDs.
• 2010年08月20日 - Alpha USGCB Content for August 2010 updated for Windows 7 and Internet Explorer 8.
• 2010年08月09日 - Alpha USGCB Content for August 2010 released for Windows 7 and Internet Explorer 8.
• 2010年08月03日 - Alpha USGCB Content for August 2010 released for Windows 7 and Windows 7 Firewall.
• 2010年07月28日 - Registration is now open for the 6th Annual IT Security Automation Conference taking place in Baltimore Inner Harbor on September 27-29, 2010. Please visit SCAP events for the draft agenda, conference announcement, and registration link. The 3-day event includes tutorials, tracks, workshops, and vendor expo.
• 2010年07月20日 - Alpha USGCB Content for July 2010 released for Windows 7 and Internet Explorer 8.
• 2010年06月30日 - USGCB/FDCC Comparison Spreadsheets for Windows and Internet Explorer posted.
• 2010年06月16日 - Alpha USGCB Content for June 2010 released for Windows 7 and Internet Explorer 8.
• 2010年05月28日 - Alpha USGCB Content for Windows 7 and Windows 7 Firewall updated to include setting documentation, SCAP content bug fixes, GPO bug fixes and VHD bug fixes. Please note that no USGCB setting values have changed, this update includes only bug fixes and improved documentation. Also included in this update are non-machine readable CCE to NIST SP 800-53 policy control mappings, which can be found in USGCB Alpha Settings spreadsheet. Please note that these non-machine readable mappings will be removed when the machine-readable mappings are distributed.
• 2010年04月23日 - Alpha USGCB Settings, Content, VHDs, and FAQ released for Windows 7, Windows 7 Firewall, and Internet Explorer 8.

Project Links

Additional Pages