Prepare to install the module

To help ensure the successful deployment of CEM, complete the preparation steps.

1. Review the following table to ensure that CEM can meet your organization’s requirements. cem_windows supports the following operating systems and Center for Internet Security (CIS) Benchmarks:

   Operating system	Framework	Profile
   Windows Server 2022	CIS Benchmarks v2.0.0	Member Server, Level 1
   Windows Server 2019	CIS Benchmarks v2.0.0	Member Server, Level 1
   Windows Server 2016	CIS Benchmarks v2.0.0	Member Server, Level 1
   Windows 10 Enterprise	CIS Benchmarks v2.0.0	Corporate Enterprise, Level 1

   Restriction: The domain_controller profile is not supported for any CIS controls.
   Tip: CEM uses Desired State Configuration (DSC) modules and the validation_mode parameter to ensure that resources do not remain in a "flapping" state. For more information, see securitypolicydsc.
2. To manage nodes with Puppet Enterprise (PE), install PE. You can install any version in the 2021.7 or 2023 release stream. For instructions, see Installing.
3. To manage nodes with open source Puppet, install Puppet 7 or 8. For instructions, see Install Puppet.
4. Review the dependencies to ensure that your infrastructure will meet the requirements. Go to Puppet Forge and review the Dependencies tab.
5. If you installed PE, follow the instructions in Configuring Puppet Enterprise.
6. If you installed open source Puppet, follow the instructions in Configure Puppet settings.
7. If you are using Puppet 7, verify that the agent and server are at v7.8.0 or later. You can also use any level of Puppet 8.
8. To purchase CEM software, contact a Puppet by Perforce sales representative. For more information, see Contact Us.
9. Optionally, to help avoid issues during deployment to a production environment, you can install and evaluate CEM in a test environment. For instructions, see Install and evaluate the module in a test environment.