Upgrade to Instance Metadata Service v2
The instance metadata service is available in two versions, version 1 and version 2. IMDSv1 is the default version, but IMDSv2 offers increased security compared to v1. You can enable IMDSv2 from the OCI console for Qualys scanners created from image version qVSA-OCI-2.7.45-1 above.
- Open the navigation menu and click Compute.
- Under Compute, click Instances.
- Click the Instance as per requirement.
- Click Edit next to the Instance metadata service in the Instance Details section.
- For the Allowed IMDS version, select the Version 2 only.
- Click Save Changes.
- You can re-enable IMDSv1 for this instance if you select the Version 1 and Version 2 options from the Allowed IMDS version and save your changes.
- You could deploy a Qualys scanner with IMDSv2 from OCI CLI using the --instance-options file://metadatav2.json option.