Creating Custom Registry Multi-String Value Checks

 

A multi-string value is an entry in a registry key that stores a list of strings. Within VMware vCenter Protect - Configuration Management, you can define a custom check that looks to see if a specific multi-string value contains the expected text strings. The check will be in compliance only if there is an exact match with the string values identified on a scanned machine. The order of string values does not matter, just so all items are there. If a machine is missing one or more string values, or if there are extra string values, the check will not be in compliance.

 

  1. To create a new custom Registry Multi-String Value check from scratch, from the Custom Check Wizard click Create New Custom Check.

The following dialog is displayed:

CustomCheckWizardOS.gif

  1. Select the desired operating system levels and then click Next.

The General Properties dialog is displayed.

CustomCheckRegMultiString.gif

  1. Type a unique name for the custom check and description.

  2. In the Type box select Registry Multi-String Value and then click Next.

The Specific Properties dialog is displayed.

  1. Use the available boxes to define the exact registry key multi-string value for which you want to create a policy check.

You must provide the root, path, and value name information. For example:

CustomCheckWizardSpecificPropertiesMultiString.gif

Hint: For tips on using the Windows Registry Editor program (regedit) to locate these values and easily populate the fields on this dialog, see Using Regedit. For example, here's what the values shown above look like within regedit:

RegEditSample.gif

  1. After defining the specific properties of the check, click Test Check.

This will prove whether the registry key defined here currently exists on the local machine and will show the current string values defined for the entry.

  1. Click Next.

The Operator and Value dialog is displayed.

CustomCheckWizardOperatorValueMultiString.gif

  1. Select an operator.

The only operator currently offered is = (equal to). This means that a scanned machine must be a match with all items specified for this check in order to be found in compliance with this check. The order the items are specified does not matter.

  1. Specify the text string values that you expect to be defined for this entry and then click Next.

You can specify up to 4,000 different string values. Each string value should be separated by a semicolon.

  1. Click Next.

The following dialog is displayed.

CustomCheckWizardFinish.gif

 

  1. (Optional) If you want to export this custom check to an XML file to use it as the starting point for other custom checks, click Export to File.

For more information, see Exporting Custom Checks.

  1. Click Finish.

The custom check is displayed within the policy. For example:

CustomCheckinPolicyRegExists.gif