Installation of the Ubuntu Security Guide

The Ubuntu Security Guide is an easy to use tool for compliance and auditing, and is part of Ubuntu Pro and is installed using the Pro client. The tool is available to Ubuntu 20.04 or later versions.

Install the Pro client

sudo apt update
sudo apt install ubuntu-advantage-tools

Attach the subscription


NOTE: This step is not necessary in Ubuntu cloud images purchased through the cloud marketplaces


To attach your subscription follow the steps on the official Ubuntu guide.

Set up the Ubuntu Security Guide

Use the following commands to install the Ubuntu Security Guide (USG).

sudo pro enable usg
sudo apt install usg

Transitioning from the previous compliance tooling

The previous compliance tooling available in Ubuntu provided per-release scripts for CIS compliance. The following points map the old commands to the Ubuntu Security Guide syntax.

Command Replacement
/usr/share/ubuntu-scap-security-guides/cis-hardening/Canonical_Ubuntu_20.04_CIS-harden.sh usg fix
/usr/share/ubuntu-scap-security-guides/cis-hardening/Canonical_Ubuntu_18.04_CIS-harden.sh usg fix
/usr/share/ubuntu-scap-security-guides/cis-hardening/Canonical_Ubuntu_16.04_CIS_v1.1.0-harden.sh usg fix
cis-audit usg audit
Custom configuration with ruleset-params.conf Profile customization

This page was last modified 20 days ago. Help improve this document in the forum.