Qualys

Set up Qualys for automated tests with TrustCloud

Purpose

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack, and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to your Qualys instance. Qualys requires a user to have elevated read & write access to generate evidence for your compliance program. Despite this, TrustCloud only performs read-only operations to automate the evidence collection process.

Instructions to grant TrustCloud access to Qualys

1. Login to your Qualys instance as a user who has administrative privileges in your organization
2. Click on the Users tab
   
3. Select Edit option from Quick Actions tab as highlighted in the Screenshot.
4. Assign Manager role to the User & enable API access. 
5. Determine the platform URL you use to log in to your account and save it for reference..
6. Determine which platform does the Platform URL belong to. For instance – US4 is the platform for https://qualysguard.qg4.apps.qualys.com URL.
   Refer the Qualys Guide to determine the Platform.
7. Input the Platform determined in Step.6 & the Username & Password used to login into TrustOps connection setup.