ScanCentralDast 24.2

Hi all, 


Since ScanDast 24.2 just came out we're trying to install it following documentation but I noticed that something differs
from 23.1; I've never looked into 23.2 I must say.
At the stage where you need to execute:

docker load --input scancentral-dast-config.tar
docker create --name dast-config dast-config-sb:latest
docker cp "dast-config:C:/app/DefaultData.zip" ./DefaultData.zip

I can't find .tar files in package ScanCentral_DAST_24.2.zip while those same files
are there in archive ScanCentral_DAST_23.1.zip both downloaded from https://sld.microfocus.com.

Is there another procedure to extract DefaultData.zip?

Thank you very much for your time.
Have a good day.

  • Suggested Answer

    0  

    First, we recommend you NOT skip 23.2 in upgrading to 24.2

    Second, there is a change in 24.2 where the DefaultData.zip is no longer required during installation or upgrade. We apologize for the confusion and have updated (or will soon) the documentation to state:

    SecureBase Settings
    After initializing the database, the Global Service updates the database with the latest SecureBase data from the Fortify SmartUpdate servers. In environments lacking Internet access, however, you must use the SecureBase settings to update the database. In this scenario, you can use the default SecureBase ZIP file that is packaged in the TAR file version of the ScanCentral DAST CLI container or use a local copy of the default SecureBase ZIP file.

    We recommend you use the the DockerHub image for the following tasks which do not involve the DefaultData.zip file:

    • Installing, updating, or managing a ScanCentral DAST environment at sites with Internet access
    • Creating a settings file or migration script
    • Encrypting a password or token