Access rights

To export a policy, obtain access to an account on the manager that has the View access rights enabled for all policies and all templates.

To import a policy, obtain access to an account on the manager that has the Create new policies and Create new templates access rights enabled.

Operating system domains

All the operating system domains of the manager that imports a policy must also be on the manager that exports the policy. For example, if the manager that imports a policy has Windows 2000 and HP-UX agent domains, then the manager that exports the policy must also have Windows 2000 and HP-UX agent domains. For example, if the manager that imports a policy has Windows domains, then the manager that exports the policy must also have Windows domains.

The manager that imports the policy must have the OS domain of the manager that exports the policy. Otherwise, the policy tool terminates the import process.

The manager that exports the policy and the manager that imports the policy must have the matching UNIX agent domain. Otherwise the policy tool disables the templates for a UNIX agent domain on the importing manager. You can enable the templates again with the Template Editor.

Directory permissions

To export a policy, obtain access to an account on the host computer with the Write permission that is enabled for the destination directory. By default, the Policy tool exports policies to the current directory.

Exported policies

Before you export a policy, verify that at least one agent of each operating system type that is registered to the manager has installed the latest security update. Verifying the security update ensures that the exported policy contains current security checks, templates, and word lists.

Then, verify that all the security checks in each module of the policy are set to match your company's security policy. Also, verify that all the templates and the word lists that the policy requires are enabled.

Imported policies

Before you import a policy, verify that the latest security update has been installed on the agents that are registered to the importing manager. Verifying the security update ensures that the agents can run all of the enabled security checks in the policy.