Reference: Supported engines and JREs
The following engines and JREs are supported in Comply.
Supported engines and JREs are published after internal validation. Regular updating is recommended.
CIS-CAT
Version | Filename |
---|---|
3.0.78 | ciscat-full-bundle-2021-12-20-v3.0.78.zip |
SCC
Version | Filename |
---|---|
5.1 | scc-5.1_Windows_bundle.zip |
scc-5.1_ubuntu16_amd64_bundle.zip | |
scc-5.1_macosx10_x86_64_bundle.zip | |
scc-5.1_rhel6_i686_bundle.zip | |
scc-5.1_rhel6_x86_64_bundle.zip | |
scc-5.1_rhel7_x86_64_bundle.zip | |
5.1 (embedded*) | scc-5.1_Windows_bundle.zip |
scc-5.1_ubuntu16_amd64_bundle.tar.gz | |
scc-5.1_macosx10_x86_64_bundle.tar.gz | |
scc-5.1_rhel6_i686_bundle.tar.gz | |
scc-5.1_rhel6_x86_64_bundle.tar.gz | |
scc-5.1_rhel7_x86_64_bundle.tar.gz | |
5.2.1 | scc-5.2.1_Windows_bundle.zip |
scc-5.2.1_ubuntu16_amd64_bundle.zip | |
scc-5.2.1_macosx10_x86_64_bundle.zip | |
scc-5.2.1_rhel6_i686_bundle.zip | |
scc-5.2.1_rhel6_x86_64_bundle.zip | |
scc-5.2.1_rhel7_x86_64_bundle.zip | |
5.2.1 (embedded*) | scc-5.2.1_Windows_bundle.zip |
scc-5.2.1_ubuntu16_amd64_bundle.tar.gz | |
scc-5.2.1_macosx10_x86_64_bundle.tar.gz | |
scc-5.2.1_rhel6_i686_bundle.tar.gz | |
scc-5.2.1_rhel6_x86_64_bundle.tar.gz | |
scc-5.2.1_rhel7_x86_64_bundle.tar.gz | |
5.3.1 | scc-5.3.1_Windows_bundle.zip |
scc-5.3.1_ubuntu16_amd64_bundle.zip | |
scc-5.3.1_macosx10_x86_64_bundle.zip | |
scc-5.3.1_rhel6_i686_bundle.zip | |
scc-5.3.1_rhel6_x86_64_bundle.zip | |
scc-5.3.1_rhel7_x86_64_bundle.zip | |
5.3.1 (embedded*) | scc-5.3.1_Windows_bundle.zip |
scc-5.3.1_ubuntu16_amd64_bundle.tar.gz | |
scc-5.3.1_macosx10_x86_64_bundle.tar.gz | |
scc-5.3.1_rhel6_i686_bundle.tar.gz | |
scc-5.3.1_rhel6_x86_64_bundle.tar.gz | |
scc-5.3.1_rhel7_x86_64_bundle.tar.gz | |
5.4 | scc-5.4_Windows_bundle.zip |
scc-5.4_ubuntu16_amd64_bundle.zip | |
scc-5.4_macosx10_x86_64_bundle.zip | |
scc-5.4_rhel6_i686_bundle.zip | |
scc-5.4_rhel6_x86_64_bundle.zip | |
scc-5.4_rhel7_x86_64_bundle.zip | |
5.4 (embedded*) | scc-5.4_Windows_bundle.zip |
scc-5.4_ubuntu16_amd64_bundle.tar.gz | |
scc-5.4_macosx10_x86_64_bundle.tar.gz | |
scc-5.4_rhel6_i686_bundle.tar.gz | |
scc-5.4_rhel6_x86_64_bundle.tar.gz | |
scc-5.4_rhel7_x86_64_bundle.tar.gz | |
5.4.2 | scc-5.4.2_Windows_bundle.zip |
scc-5.4.2_ubuntu16_amd64_bundle.tar.gz | |
scc-5.4.2_macosx10_x86_64_bundle.tar.gz | |
scc-5.4.2_rhel6_i686_bundle.tar.gz | |
scc-5.4.2_rhel6_x86_64_bundle.tar.gz | |
scc-5.4.2_rhel7_x86_64_bundle.tar.gz | |
5.4.2 (*embedded) | scc-5.4.2_Windows_bundle.zip |
scc-5.4.2_ubuntu16_amd64_bundle.tar.gz | |
scc-5.4.2_macosx10_x86_64_bundle.tar.gz | |
scc-5.4.2_rhel6_i686_bundle.tar.gz | |
scc-5.4.2_rhel6_x86_64_bundle.tar.gz | |
scc-5.4.2_rhel7_x86_64_bundle.tar.gz | |
5.5 | scc-5.5_Windows_bundle.zip |
scc-5.5_ubuntu16_amd64_bundle.zip | |
scc-5.5_macosx10_x86_64_bundle.zip | |
scc-5.5_rhel6_i686_bundle.zip | |
scc-5.5_rhel6_x86_64_bundle.zip | |
scc-5.5_rhel7_x86_64_bundle.zip | |
5.5 (*embedded) | scc-5.5_Windows_bundle.zip |
scc-5.5_ubuntu16_amd64_bundle.zip | |
scc-5.5_macosx10_x86_64_bundle.zip | |
scc-5.5_rhel6_i686_bundle.zip | |
scc-5.5_rhel6_x86_64_bundle.zip | |
scc-5.5_rhel7_x86_64_bundle.zip |
*Embedded files are the zip/tar.gz files found within each corresponding SCC zip file.
Tanium Scan Engine (Joval)
Comply
The Tanium Scan Engine (TSE) is packaged and distributed with a license file via ECF. Each version of the Joval/TSE engine is supported for a little more than a year after the release date.
The following table provides version and support information.
Version | Release | Support EOL |
---|---|---|
6.4.4.3 | 5/9/2023 | TBD |
6.4.4.1 | 9/29/2022 | TBD |
The Tanium Scan Engine (TSE) is packaged and distributed with a license file via ECF. Beginning with version 6.3.5 of the engine, powered by JovalCM (the vendor from which Tanium OEMs the engine), the license file format changed, and the new license is not backwards compatible with older versions of the engine. Each version of the Joval/TSE engine is supported for a little more than a year after the release date.
The following table provides version and support information.
Version | Release | Support EOL |
---|---|---|
6.4.4.31 | 5/9/2023 | TBD |
6.4.4.1 | 9/29/2022 | TBD |
6.4.2 | 3/11/2022 | 5/25/2023 |
1 Joval 6.4.4.3 is the minimum engine version required by Comply 2.19 to support EXSi compliance scans. |
If you are using a version of TSE older than 6.3.5, it is recommended that you upgrade to the latest available version of the Tanium Scan Engine (TSE). You can do this from the Comply > Setup > Configuration window or using the airgap procedure found here Configure Comply for an air-gapped environment.
Java Runtime Environment (JRE)
Amazon Coretto Java Runtime Environment (JRE) version 11.x is provided for use with supported Windows, Linux, and macOS endpoints. JRE version 11.0.15.9.1 and later also support Mac M1 and Amazon Linux 2 EC2.
Operating system | Operating system version | Supported JRE distributions and versions | Can deploy using Comply? |
---|---|---|---|
Microsoft Windows Server | Microsoft Windows Server 2008 R2 |
Java version 8 distributions provided by Oracle |
Yes |
Microsoft Windows Server 2012 and 2012 R2 |
|
Yes | |
Microsoft Windows Server 2016 and later |
|
Yes | |
Microsoft Windows Workstation | Microsoft Windows 7 and later |
|
Yes |
macOS | macOS 10.15 Catalina and later |
|
Yes |
Linux | Amazon Linux 1 AMI (2016.09, 2018.03) |
|
Yes |
Amazon Linux 2 LTS |
|
Yes | |
Debian 8.x and later |
|
Yes | |
Red Hat Enterprise Linux (RHEL) 5.x | Upload your own version of Java 8 | No |
|
Red Hat Enterprise Linux (RHEL) 6.x and later |
|
Yes | |
Oracle Linux 5.x and later |
|
Yes | |
CentOS 6.x and later |
|
Yes | |
SUSE Linux Enterprise Server (SLES) 12.x and later |
|
Yes | |
openSUSE 12.x and later |
|
Yes | |
Ubuntu 14.x and later |
|
Yes | |
AIX | IBM AIX 7.1 TL1SP10 and later1 | IBM JRE 8 | Yes2 |
OpenJDK JRE version 8 with the HotSpot JVM | Yes3 | ||
IBM AIX 7.2 | IBM JRE version 8 | Yes2 | |
OpenJDK JRE version 8 with the HotSpot JVM | Yes3 | ||
Solaris |
Oracle Solaris 10u11 SPARC | Oracle JRE 8 | Yes |
Oracle Solaris 10u11 x86 |
Oracle JRE 8 | Yes |
|
Oracle Solaris 11 SPARC | Oracle JRE 8 | Yes |
|
Oracle Solaris 11 x86 |
Oracle JRE 8 | Yes |
|
2Only IBM JRE 8 64-bit is supported for deployment through Comply. You must repackage the JRE before it can be deployed through Comply. For details, see Repackage the IBM JRE for deployment to AIX endpoints. 3Only version 8 is supported for deployment through Comply. Check the OpenJDK release site for supported service pack levels for a particular OpenJDK JRE release: AdoptOpenJDK: Latest release.
|
Last updated: 9/26/2023 2:05 PM | Feedback