Integration with RuCERT

In the KUMA web interface, you can create a connection to the National Coordinating Center for Computer Incidents (hereinafter referred to as "RuCERT"). This will let you export incidents registered by KUMA to RuCERT. Integration is configured under SettingsRuCERT in the KUMA web interface.

You can use the Disabled check box to enable or disable integration.

To create a connection to RuCERT:

  1. In the KUMA web interface, open SettingsRuCERT.
  2. In the URL field, enter the URL for accessing RuCERT.
  3. In the Token settings block, create or select an existing secret resource with the API token that was issued to your organization for a connection to RuCERT:
    • If you already have a secret, you can select it from the drop-down list.
    • If you want to create a new secret:
      1. Click the AddResource button and specify the following settings:
        • Name (required)—unique name of the service you are creating. The name must contain from 1 to 128 Unicode characters.
        • Token (required)—token that was issued to your organization for a connection to RuCERT.
        • Description—service description containing up to 256 Unicode characters.
      2. Click Save.

      The secret containing the token for connecting to RuCERT will be created. It is saved under ResourcesSecrets and is owned by the main tenant.

    The selected secret can be changed by clicking on the EditResource button.

  4. In the Affected system function drop-down list, select the area of activity of your organization.

    Available company business sectors

  5. In the Company field, indicate the name of your company. This data will be forwarded to RuCERT when incidents are exported.
  6. Use the Location drop-down list to specify where your company is located. This data will be forwarded to RuCERT when incidents are exported.
  7. If necessary, in the Proxy settings block, create or select an existing proxy server resource that should be used when connecting to RuCERT.
  8. Click Save.

KUMA is now integrated with RuCERT. Now you can export incidents to it.

Page top