ci-server-engineer/.claude/skills/installation-security/SKILL.md
cliu 5e58499fe5 Add phase 2 setup and security summaries, setup check script
Summarize CI Server Setup and Security Guide, add the draft
installation-security skill and tools/setup_check.ps1 (read-only
check practiced on the test system), and log ISS-008/009.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 14:09:30 +10:00

32 lines
2 KiB
Markdown

---
name: installation-security
description: >-
CI Server R1.03 installation, upgrade and Windows/IT security. Use when the user wants to
prepare Windows for CI Server, check whether a machine meets the setup requirements, install,
reinstall, upgrade or uninstall CI Server, apply or extend a licence, install CI Server Remote
Connect, set up Vnet/IP drivers or network addresses, apply the IT Security Tool, check or
open firewall ports, manage the CIX_ groups and CIX_PROCESS account, or run CI Server on a
virtual machine. Sources IM 36K01C10-01EN and IM 36K01C30-01EN.
---
# Installation and security (R1.03)
Background: `knowledge/manuals/IM36K01C10-01EN.md` (Setup) and
`knowledge/manuals/IM36K01C30-01EN.md` (Security Guide). Known issues:
`knowledge/manuals/IM36K01A50-01EN.md` (IT Security tool, install path, VMs).
Rules:
- Run the `system-check` skill first.
- Installing, upgrading, changing Windows settings or IT security needs an elevated session,
changes the machine and often needs restarts: follow the user's chosen way of working and
confirm before each step. In *prepare only* mode, produce a checklist for the user.
- Never copy old setup files over new ones after an upgrade: compare and merge.
| Task | Where | Status |
|---|---|---|
| Check a machine against the setup and security requirements | `tasks/setup-check.md` | draft, awaiting confirmation |
| New installation (physical, VM, dual-redundant): order of work, Windows settings, Vnet/IP, install, IT security, licence | Setup summary §2 | from docs |
| Start/stop, reinstall, upgrade (incl. HAC), extend licence, uninstall | Setup summary §3 | from docs |
| Install CI Server Remote Connect; web ports | Setup summary §2.4 | from docs |
| Firewall ports for CI Server and drivers | Security Guide summary §3 | from docs (web, DURM, SMDMON ports checked) |
| IT Security Tool, user management types, CIX_ groups/accounts, change service account | Security Guide summary §2, §5 | from docs |