Original: Scanner V4 is not enabled by default, but you can enable Scanner V4 during or after installation. Because the StackRox Scanner provides information about Kubernetes system platform vulnerabilities and non-{op-system} vulnerabilities, you must keep the StackRox scanner enabled to continue receiving reports for that data.

Scanner V4 is enabled in Central and is not required in secured clusters, unless you have specific needs, such as the need to access image registries that are located outside of the cluster and are not accessible from Central. For example, you enable Scanner V4 on secured clusters when using the OpenShift image registry, or in a {product-title-managed-short} system that only allows traffic to the registry from within its own firewalls. It is also required when using registry mirroring. For more information, see xref:../operating/examine-images-for-vulnerabilities.adoc#accessing-delegated-image-scanning_examine-images-for-vulnerabilities[Accessing delegated image scanning].

[id="enabling-scanner-v4-operator_{context}"]
=== Enabling Scanner V4 when installing by using the Operator

To use Scanner V4, you can enable it during installation on the cluster where Central is installed. Optionally, you can enable it on secured clusters during installation.

include::modules/enabling-scanner-v4-operator-central.adoc[leveloffset=+3]
include::modules/enabling-scanner-v4-operator-secured-cluster.adoc[leveloffset=+3]

[role="_additional-resources"]
.Additional resources

* xref:../installing/installing_ocp/install-central-ocp.adoc#install-central-operator_install-central-ocp[Installing Central using the Operator method]
* xref:../installing/installing_ocp/install-secured-cluster-ocp.adoc#installing-sc-operator[Installing {product-title-short} on secured clusters by using the Operator]
* xref:../installing/installing_ocp/install-central-config-options-ocp.adoc#scannerv4-settings_install-central-config-options-ocp[Scanner V4 settings for the Operator]
* xref:../installing/installing_ocp/init-bundle-ocp.adoc#init-bundle-ocp[Generating and applying an init bundle or cluster registration secret for RHACS on Red Hat OpenShift]

[id="enabling-scanner-v4-helm_{context}"]
=== Enabling Scanner V4 when installing by using Helm

To use Scanner V4, you can enable it during installation on the cluster where Central is installed. Optionally, you can enable it on secured clusters during installation.

include::modules/enabling-scanner-v4-helm-central.adoc[leveloffset=+3]
include::modules/enabling-scanner-v4-helm-secured-cluster.adoc[leveloffset=+3]

[role="_additional-resources"]
.Additional resources

* xref:../installing/installing_ocp/install-central-ocp.adoc#install-using-helm-customizations-ocp[Install Central using Helm charts with customizations]
* xref:../installing/installing_ocp/install-secured-cluster-ocp.adoc#configure-secured-cluster-services-helm-chart-customizations[Configuring the secured-cluster-services Helm chart with customizations ({ocp})]
* xref:../installing/installing_other/install-secured-cluster-other.adoc#configure-secured-cluster-services-helm-chart-customizations-other[Configuring the secured-cluster-services Helm chart with customizations (Kubernetes)]
* xref:../installing/installing_ocp/install-central-ocp.adoc#central-services-public-configuration-file-scannerv4_install-central-ocp[Scanner V4 settings for installing {product-title-short} on Central by using Helm ({ocp})]
* xref:../installing/installing_other/install-central-other.adoc#central-services-public-configuration-file-scannerv4_install-central-other[Scanner V4 settings for installing {product-title-short} on Central by using Helm (Kubernetes)]
Revised: Scanner V4 is enabled by default when {product-title-short} is newly installed. However, if you have not previously enabled Scanner V4 and are upgrading from version 4.7 or earlier, you must enable it explicitly during the upgrade to use it.