NIST SPECIAL PUBLICATION 1800-5

---

IT Asset Management

---

Includes Executive Summary (A); Approach, Architecture, and Security Characteristics (B); and How-To Guides (C)

Michael Stone

Chinedum Irrechukwu

Harry Perper

Devin Wynne

Leah Kauffman, Editor-in-Chief

This publication is available free of charge from: http://doi.org/10.6028/NIST.SP.1800-5

The first draft of this publication is available free of charge from: https://www.nccoe.nist.gov/sites/default/files/library/sp1800/fs-itam-nist-sp1800-5-draft.pdf

NIST SPECIAL PUBLICATION 1800-5

IT Asset Management

Includes Executive Summary (A); Approach, Architecture, and Security Characteristics (B); and How-To Guides (C)

Michael Stone

National Cybersecurity Center of Excellence

Information Technology Laboratory

Chinedum Irrechukwu

Harry Perper

Devin Wynne

The MITRE Corporation

McLean, VA

September 2018

U.S. Department of Commerce

Wilbur Ross, Secretary

National Institute of Standards and Technology

Walter G. Copan, Undersecretary of Commerce for Standards and Technology and Director

• Volume A
  • Executive Summary
    • Challenge
    • Solution
    • Benefits
    • Share Your Feedback
    • Technology Partners/Collaborators

• Volume B
  • 1. Summary
    • 1.1. Challenge
    • 1.2. Solution
    • 1.3. Risks
    • 1.4. Benefits
  • 2. How to Use This Guide
    • 2.1. Typographic Conventions
  • 3. Introduction
  • 4. Approach
    • 4.1. Audience
    • 4.2. Scope
    • 4.3. Assumptions
      • 4.3.1. Security
      • 4.3.2. Modularity
      • 4.3.3. Technical Implementation
      • 4.3.4. Tracking and Location
      • 4.3.5. Operating Systems
    • 4.4. Constraints
      • 4.4.1. Limited Scalability Testing
      • 4.4.2. Limited Assets
      • 4.4.3. Mobile Devices
      • 4.4.4. Network Devices
      • 4.4.5. Limited Replication of Enterprise Network
    • 4.5. Risk Assessment and Mitigation
      • 4.5.1. Assessing Risk Posture
      • 4.5.2. Security Characteristics and Controls Mapping
    • 4.6. Technologies
  • 5. Architecture
    • 5.1. Reference Architecture Description
    • 5.2. Reference Architecture Relationship
    • 5.3. Building an Instance of the Reference Architecture
      • 5.3.1. ITAM Build
      • 5.3.2. Access Authorization Information Flow and Control Points
      • 5.3.3. Tier 1 Systems
      • 5.3.4. Tier 2 Systems
      • 5.3.5. Tier 3 Systems

• Volume C
  • 1. Introduction
    • 1.1. Practice Guide Structure
    • 1.2. Build Overview
      • 1.2.1. Build Architecture Components Overview
      • 1.2.2. Build Network Components
      • 1.2.3. Operating Systems
    • 1.3. Typographic Conventions
  • 2. Tier 1
    • 2.1. Software Configurations
      • 2.1.1. Splunk Enterprise
      • 2.1.2. How It’s Used
      • 2.1.3. Installing Splunk Enterprise
      • 2.1.4. Configurations
      • 2.1.5. Lookup Table Files
  • 3. Tier 2
    • 3.1. AssetCentral
      • 3.1.1. How It’s Used
      • 3.1.2. Virtual Machine Configuration
      • 3.1.3. Network Configuration
      • 3.1.4. Installing AssetCentral
      • 3.1.5. Installing MySQL (MariaDB)
      • 3.1.6. Installing Apache
      • 3.1.7. Installing PHP5
      • 3.1.8. Post Installation Tasks
      • 3.1.9. Database Update – Add a View
      • 3.1.10. Add Assets into AssetCentral
    • 3.2. BelManage
      • 3.2.1. How It’s Used
      • 3.2.2. Virtual Machine Configuration
      • 3.2.3. Network Configuration
      • 3.2.4. Installing BelManage
      • 3.2.5. Integration and Final Steps
    • 3.3. Bro
      • 3.3.1. How It’s Used
      • 3.3.2. Virtual Machine Configuration
      • 3.3.3. Network Configuration
      • 3.3.4. Installing Bro
      • 3.3.5. Installing Intelligence Gathering Software
      • 3.3.6. Configuring Bro
      • 3.3.7. Installing Splunk Universal Forwarder
      • 3.3.8. Configuring Splunk Universal Forwarder
      • 3.3.9. Configurations and Scripts
    • 3.4. CA Technologies IT Asset Manager
      • 3.4.1. How It’s Used
      • 3.4.2. Virtual Machine Configuration
      • 3.4.3. Network Configuration
      • 3.4.4. Installing CA ITAM
      • 3.4.5. Configurations
    • 3.5. Fathom Sensor from RedJack
      • 3.5.1. How It’s Used
      • 3.5.2. Virtual Machine Configuration
      • 3.5.3. Network Configuration
      • 3.5.4. Installing Fathom Sensor
      • 3.5.5. Installing Splunk Universal Forwarder
      • 3.5.6. Configuring Splunk Universal Forwarder
      • 3.5.7. Helpful Commands and Information
      • 3.5.8. Configurations and Scripts
    • 3.6. OpenVAS
      • 3.6.1. How It’s Used
      • 3.6.2. Virtual Machine Configuration
      • 3.6.3. Network Configuration
      • 3.6.4. Installation Prerequisites
      • 3.6.5. Installing OpenVAS
      • 3.6.6. Configuring OpenVAS
      • 3.6.7. Installing Splunk Universal Forwarder
      • 3.6.8. Configuring Splunk Universal Forwarder
      • 3.6.9. Configurations and Scripts
    • 3.7. Puppet Enterprise
      • 3.7.1. How It’s Used
      • 3.7.2. Prerequisites
      • 3.7.3. Installing Puppet Enterprise Server
      • 3.7.4. Puppet Enterprise Linux Agent Installation
      • 3.7.5. Puppet Enterprise Windows Agent Installation
      • 3.7.6. Puppet Enterprise Agent Configuration
      • 3.7.7. Puppet Enterprise Manifest Files and Modules
      • 3.7.8. Reporting
      • 3.7.9. Report Directory Cleanup
      • 3.7.10. Puppet Code and Scripts
    • 3.8. Snort
      • 3.8.1. How It’s Used
      • 3.8.2. Virtual Machine Configuration
      • 3.8.3. Network Configuration
      • 3.8.4. Installing Snort
      • 3.8.5. Installing Snort
      • 3.8.6. Get Updated Community Rules
      • 3.8.7. Installing Barnyard2
      • 3.8.8. Testing
      • 3.8.9. Installing Splunk Universal Forwarder
      • 3.8.10. Configuring Splunk Universal Forwarder
      • 3.8.11. Configurations and Scripts
    • 3.9. Tyco Security Products
      • 3.9.1. Installing Tyco Security Products
      • 3.9.2. Configurations
    • 3.10. Windows Server Update Services (WSUS)
      • 3.10.1. How It’s Used
      • 3.10.2. Virtual Machine Configuration
      • 3.10.3. Network Configuration
      • 3.10.4. Installing WSUS
      • 3.10.5. Configurations
      • 3.10.6. Configure Active Directory Server to Require WSUS
      • 3.10.7. Create WSUS Statistics for Splunk Enterprise
      • 3.10.8. Installing Splunk Universal Forwarder
      • 3.10.9. Configuring Splunk Universal Forwarder
      • 3.10.10. Configurations and Scripts
  • 4. Tier 3
    • 4.1. Active Directory Server
      • 4.1.1. Software Configurations
      • 4.1.2. How It’s Used
      • 4.1.3. Installation
    • 4.2. AssetCentral
      • 4.2.1. How It’s Used
      • 4.2.2. Virtual Machine Configuration
      • 4.2.3. Network Configuration
      • 4.2.4. Installing AssetCentral
      • 4.2.5. Installing MySQL (MariaDB)
      • 4.2.6. Installing Apache
      • 4.2.7. Installing PHP5
      • 4.2.8. Post Installation Tasks
    • 4.3. Email
      • 4.3.1. How It’s Used
      • 4.3.2. Virtual Machine Configuration
      • 4.3.3. Network Configuration
      • 4.3.4. Installing Email
      • 4.3.5. Configure Email
      • 4.3.6. User Accounts
      • 4.3.7. DNS Settings
      • 4.3.8. Configuration Files
    • 4.4. Openswan (VPN)
      • 4.4.1. How It’s Used
      • 4.4.2. Virtual Machine Configuration
      • 4.4.3. Network Configuration
      • 4.4.4. Installing Openswan
      • 4.4.5. Installing Openswan
      • 4.4.6. Configurations and Scripts
    • 4.5. Ubuntu Apt-Cacher
      • 4.5.1. How It’s Used
      • 4.5.2. Virtual Machine Configuration
      • 4.5.3. Network Configuration
      • 4.5.4. Installing Ubuntu Apt-Cacher
      • 4.5.5. Client Configuration
    • 4.6. Windows 2012 Certificate Authority
      • 4.6.1. Software Configurations
      • 4.6.2. How It’s Used
      • 4.6.3. Certificate Generation and Issuance
    • 4.7. Common PKI Activities
      • 4.7.1. Generating a Certificate Signing Request from OpenSSL
      • 4.7.2. Submitting the CSR to the CA Service
      • 4.7.3. Exporting a Root Certificate from a Microsoft CA
      • 4.7.4. Converting from DER Encoding to PEM Encoding
    • 4.8. Process Improvement Achievers (PIA) Security Evaluation