Puppet Class: secure_windows::stig::v73605

Defined in:
manifests/stig/v73605.pp

Overview

This class manages v73605

Parameters:

  • enforced (Boolean) (defaults to: false)
  • is_dod (Optional[Boolean])
  • classification (Optional[String]) 


2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'manifests/stig/v73605.pp', line 2

class secure_windows::stig::v73605 (

  Boolean $enforced = false,
  Optional[Boolean] $is_dod,
  Optional[String] $classification,
) {

  if $enforced {
    if $is_dod {

      file { 'c:/windows/temp/DoD_Root_CA_2.cer':
        ensure => 'file',
        mode   => '0660',
        group  => 'BUILTIN\\Administrators',
        source => 'puppet:///modules/secure_windows/STIG/v73605/DoD_Root_CA_2.cer',
        before => Sslcertificate['Install-Certificate-DoD-Root-CA-2'],
      }

      file { 'c:/windows/temp/DoD_Root_CA_3.cer':
        ensure => 'file',
        mode   => '0660',
        group  => 'BUILTIN\\Administrators',
        source => 'puppet:///modules/secure_windows/STIG/v73605/DoD_Root_CA_3.cer',
        before => Sslcertificate['Install-Certificate-DoD-Root-CA-3'],
      }

      file { 'c:/windows/temp/DoD_Root_CA_4.cer':
        ensure => 'file',
        mode   => '0660',
        group  => 'BUILTIN\\Administrators',
        source => 'puppet:///modules/secure_windows/STIG/v73605/DoD_Root_CA_4.cer',
        before => Sslcertificate['Install-Certificate-DoD-Root-CA-4'],
      }

      sslcertificate { 'Install-Certificate-DoD-Root-CA-2':
        name       => 'DoD_Root_CA_2.cer',
        location   => 'c:/windows/temp',
        # NOTE: 'root' means 'Trusted Root Certification Authorities'
        store_dir  => 'root',
        root_store => 'LocalMachine',
        thumbprint => '8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561',
      }

      sslcertificate { 'Install-Certificate-DoD-Root-CA-3':
        name       => 'DoD_Root_CA_3.cer',
        location   => 'c:/windows/temp',
        # NOTE: 'root' means 'Trusted Root Certification Authorities'
        store_dir  => 'root',
        root_store => 'LocalMachine',
        thumbprint => 'D73CA91102A2204A36459ED32213B467D7CE97FB',
      }

      sslcertificate { 'Install-Certificate-DoD-Root-CA-4':
        name       => 'DoD_Root_CA_4.cer',
        location   => 'c:/windows/temp',
        # NOTE: 'root' means 'Trusted Root Certification Authorities'
        store_dir  => 'root',
        root_store => 'LocalMachine',
        thumbprint => 'B8269F25DBD937ECAFD4C35A9838571723F2D026',
      }

    }
  }

}