> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/compliance/automatic-system-hardening-checklists/add-checklist.md).

# Add Checklist

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> **Import Checklist Catalog** in the upper-right corner of the [checklist overview](/docs/manual/english/platform-usage/hosts/compliance/automatic-system-hardening-checklists.md#checklist-overview) to [add a preconfigured checklist](/docs/manual/english/platform-usage/hosts/compliance/automatic-system-hardening-checklists.md#import-checklist-catalog), or click <i class="fa-plus">:plus:</i> **Add checklist** to create a completely new checklist. The **Hosts** → **Compliance** → **Automatic System Hardening** → **Checklists** → **Add** view opens.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F1gVoXzB5qY3vLat2IRAV%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-checklists-add%20checklist.jpg?alt=media&amp;token=a8ffaf06-388c-4f29-b911-07dd43de1317" alt=""><figcaption></figcaption></figure>

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Add Checklist** after you configured all settings to save and create the new checklist.

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Back** to return to the overview.

{% hint style="danger" %}
**Please note**: If you leave this view without clicking **Add Checklist**, all settings you configured will be permanently lost.
{% endhint %}

***

## General Settings

Here you can configure various basic settings.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FiBeFl1UmSz11kVXsqPMh%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-checklists-add%20checklist-general%20settings.jpg?alt=media&amp;token=971c2165-b2cd-4e61-98c4-f7936d9a616c" alt="" width="375"><figcaption></figcaption></figure></div>

The following options are available:

<table><thead><tr><th width="200.05859375">Option</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td><p>Enter a meaningful name for the checklist.</p><div data-gb-custom-block data-tag="hint" data-style="warning" class="hint hint-warning"><p><strong>Please note</strong>: This field is already filled in for a <em>preconfigured checklist catalog</em>. The name cannot be changed.</p></div></td></tr><tr><td>Description</td><td><p>Provide a more detailed description of the checklist.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>This field is only available for custom checklists. A description is optional.</p></div></td></tr><tr><td>Enabled</td><td><p>Enable the checklist to use it for checks on the assigned hosts.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>This option is enabled by default.</p></div><p><i class="fa-computer-mouse">:computer-mouse:</i> Select or deselect the checkbox <i class="fa-square">:square:</i> next to <strong>Enabled</strong> to enable or disable the option.</p></td></tr></tbody></table>

***

## Assigned Controls

Here you can define specific controls or a group of controls to assign to the checklist.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FaHA0iKc6jv8MOBn9dLKK%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-checklists-add%20checklist-assigned%20controls.jpg?alt=media&amp;token=b2a60d6d-d9b0-4bb9-ba25-2904e3238eaf" alt="" width="563"><figcaption></figcaption></figure></div>

{% hint style="info" %}
If a control cannot be checked on a host because the requirements for it are not met, it is not included in a system hardening audit.
{% endhint %}

{% hint style="warning" %}
**Please note**: Assigned controls for *preconfigured checklist catalogs* are managed by Enginsight and cannot be adjusted.
{% endhint %}

{% hint style="success" icon="lightbulb" %}
For more information on which predefined checks Enginsight provides, see our Knowledge Base: [What predefined checks does Enginsight provide for automatic system hardening?](https://docs.enginsight.com/docs/knowledge-base/english/system-hardening/what-predefined-checks-does-enginsight-provide-for-automatic-system-hardening)
{% endhint %}

The following options are available:

<table><thead><tr><th width="160.95703125">Option</th><th>Description</th></tr></thead><tbody><tr><td>Controls</td><td>Define the controls that should be assigned to the checklist.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click in the <strong>Controls</strong> field to expand a list of all available controls, and select one or more controls. You can also use free-text input to find controls in the list more quickly.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added control to remove it from the <strong>Controls</strong> field.<br><br>Leave the <strong>Controls</strong> field empty if you want to add a group of controls using tags.</td></tr><tr><td>Tag Logic</td><td><p>Define which tags an assigned control must contain for the setting to apply to it.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>The default tag logic is <strong>All Tags are Present on the Reference</strong>.</p></div><p><i class="fa-computer-mouse">:computer-mouse:</i> Click in the <strong>Tag Logic</strong> field to expand a list of all available options, and select one.<br><br>The following options are available:</p><ul><li><strong>All Tags are Present on the Reference</strong>: An assigned control must contain all specified tags for the setting to apply.</li><li><strong>At Least One of the Specified Tags is Present</strong>: An assigned control must contain at least one of the specified tags for the setting to apply.</li></ul></td></tr><tr><td>Tags</td><td>Define tags for groups of controls that should be assigned to the checklist.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click in the <strong>Tags</strong> field to expand a list of all available tags, and select one or more tags. You can also use free-text input to find tags in the list more quickly.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added tag to remove it from the <strong>Tags</strong> field.<br><br>Leave the <strong>Tags</strong> field empty if you want to select one or more specific controls by name.</td></tr></tbody></table>

#### Excluded Controls

Here you can define which controls or groups of controls should be explicitly excluded from a checklist.

{% hint style="info" %}
Specifying excluded controls is optional.
{% endhint %}

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Define Exceptions** next to **Assigned Controls** to show the options for **Excluded Controls**.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FE8AKcYLhdU5Q1B1EPAYA%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-checklists-add%20checklist-excluded%20controls.jpg?alt=media&amp;token=4b590e80-94e9-462e-912a-35ce086f71de" alt="" width="375"><figcaption></figcaption></figure></div>

&#x20;<i class="fa-gear">:gear:</i> Configure all settings in the same way as when specifying an [assigned control](#assigned-controls).

***

## Automatic Rollout

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-slider">:slider:</i> **Automatic Rollout** to expand the **Assigned Controls** section.

{% hint style="danger" %}
**Please note**: Assigned rollout controls are automatically performed on all assigned hosts. Only use the automatic rollout feature after you have ensured that all control configurations and host assignments have been set correctly.
{% endhint %}

{% hint style="info" %}
Assigned and excluded rollout controls can also be adjusted in *preconfigured checklist catalogs*.
{% endhint %}

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F5kZUvXi0I6BmwK33IUdu%2Fenginsight-screenshot-hosts-compliance-automatic%20system%20hardening-checklists-add%20checklist-automatic%20rollout.jpg?alt=media&amp;token=666062f0-87f1-4f72-8311-a3a0f07e0f86" alt="" width="563"><figcaption></figcaption></figure></div>

<i class="fa-gear">:gear:</i> Configure all settings in the same way as when specifying [assigned controls](#assigned-controls) or [excluded controls](#excluded-controls).

***

## Assigned Hosts

Here you can define the hosts or groups of hosts to which the configured settings should apply.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FYR7UyXLPL5lH4nfJExPa%2FEnginsight-EN-Assigned%20References.jpg?alt=media&amp;token=cebf4535-0c6c-4404-a071-76821b8fc228" alt=""><figcaption></figcaption></figure></div>

The following options are available:

<table><thead><tr><th width="199.625">Option</th><th>Description</th></tr></thead><tbody><tr><td>Hosts</td><td><p>Define the hosts to which the configured settings should apply.</p><p></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Hosts</strong> field to expand a list of all available hosts, then select one or more hosts. Alternatively, use the free-text search to find hosts in the list more quickly.<br></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added host to remove it from the <strong>Hosts</strong> field.</p></td></tr><tr><td>Tag Logic</td><td><p>Define how many tags an assigned host must have for the settings to apply to it.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>The default tag logic is <strong>All Tags are Present in the Reference</strong>.</p></div><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Tag Logic</strong> field to expand a list of all available options.<br><br>The following options are available:</p><ul><li><strong>All Tags are Present in the Reference:</strong> An assigned host must have all specified tags for the settings to apply to it.</li><li><strong>At Least One of the Specified Tags is Present:</strong> An assigned host must have at least one of the specified tags for the settings to apply to it.</li></ul></td></tr><tr><td>Tags</td><td><p>Define tags for groups of hosts to which the configured settings should apply.</p><p></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Tags</strong> field to expand a list of all available tags, then select one or more tags. Alternatively, use the free-text search to find tags in the list more quickly.<br></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added tag to remove it from the <strong>Tags</strong> field.</p></td></tr></tbody></table>

### Excluded Hosts

Here you can define which hosts or groups of hosts should be explicitly excluded from the configured settings.

{% hint style="info" %}
Defining excluded hosts is optional.
{% endhint %}

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Define Exceptions** next to **Assigned Hosts** to show the options for **Excluded Hosts**.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FOwkoC0RXeV3yJg6fqoh0%2FEnginsight-EN-Excluded%20References.jpg?alt=media&amp;token=25189e42-a39b-4936-a80a-3780807e258f" alt=""><figcaption></figcaption></figure></div>

<i class="fa-gear">:gear:</i> Configure all settings as described for an assigned host.

***

## Further Resources

**Knowledge Base**

* [What predefined checks does Enginsight provide for automatic system hardening?](https://docs.enginsight.com/docs/knowledge-base/english/system-hardening/what-predefined-checks-does-enginsight-provide-for-automatic-system-hardening)

***
