Chatee ahora con Soporte
Chat con el soporte

KACE Systems Management Appliance 15.0 - Administration Guide

About the KACE Systems Management Appliance Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Managing user notifications Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring session timeout settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Enable API Access for the appliance Disable API Access for the appliance Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings Configuring Content Security Policy
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Deploying the KACE Agent to managed devices Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Work with Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Registering KACE Agent with the appliance Provisioning the KACE Agent Manually deploying the KACE Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates About Remote Control Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Using Task Chains
Patching devices and maintaining security
Using the Security Dashboard About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Windows Feature Updates Managing Dell devices and updates Managing Linux package upgrades Manage quarantined file attachments
Using reports and scheduling notifications Monitoring devices
Getting started with monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the appliance
Appendixes Glossary About us Legal notices

Enable Content Security Policy

Enable Content Security Policy

The Content Security Policy (CSP) provides enhanced security measures within the System Manager Appliance (SMA) application.

You need to enable the Content Security Policy to ensure compliance with security standards.

* 
NOTE: The CSP tab is not disabled by default.
1.
Go to the System-level General Settings page:
◦
Log in to the appliance System Administration Console, http://appliance_hostname/system, or select System from the drop-down list in the top-right corner of the page.
◦
On the left navigation bar, click Settings, then click Control Panel.
◦
On the , in the Security Settings section, click Configure network security and accessibility to open the Security Settings page.
2.
In the CSP tab, select the Enable CSP checkbox.
* 
NOTE: When enabling CSP, a list of KACE trusted domains is automatically added. These items are critical to the functionality of the KACE SMA appliance and are not configurable.
3.
If you want to add domains or URLs in the list, then in the Additional Allowed Domains section, click and specify information in the following fields:

Option

Description

Directive

Policy Directives dictate the type of content that is allowed. Select from the list of directives:

•
Default-src
•
Style-src
•
Script-src
•
Frame-src
•
Media-src
•
Worker-src
•
Font-src
•
Img-src

Domain/URL

the location of the content that is allowed for the directive.

4.
Click Save and Restart Services.
The icons to the right of each row enable you to :
◦
: Add a Directive
◦
: Edit a Directive.
◦
: Change the order of Directives.
◦
: Delete a Directive.

Setting up and using labels to manage groups of items

Setting up and using labels to manage groups of items

About labels
Tracking changes to label settings
Managing manual labels
Managing Smart Labels
Managing label groups
Managing LDAP Labels

You can set up manual labels, Smart Labels, LDAP Labels, and label groups to manage groups of items, such as devices.

About labels

About labels

About Smart Labels
About LDAP Labels
About label groups
About organization filters

Labels are containers that enable you to organize and categorize items, such as devices, so that you can manage them as a group.

For example, you can use labels to identify devices that have the same operating system or that are in the same geographic location. You can then initiate actions, such as distributing software or deploying patches, on all of the devices that in that label. Labels can either be manually assigned to specific items or automatically assigned to items when they are associated with criteria, such as SQL or LDAP queries. You can apply labels to these types of items:

•
Inventory items, such as devices, applications, processes, startup items, and services
•
Asset items, such as location, license, and vendor
•
Discovery results
•
Patches
•
Dell Update Packages
•
Users

Manual labels are applied and removed manually, whereas Smart Labels and LDAP Labels are applied and removed automatically. See:

•
About Smart Labels
•
About LDAP Labels

About Smart Labels

About Smart Labels

Smart Labels are labels that are applied and removed automatically based on specified criteria.

For example, to track or manage laptops in a specific location, such as the San Francisco office, you could create Smart Label named San Francisco Office based on the IP address range or subnet of devices in that location. When devices are inventoried, the Smart Label, San Francisco Office is automatically applied to devices in the IP address range. When devices leave the IP address range and are inventoried again, the label is automatically removed.

Smart Labels are applied to and removed from managed devices when the appliance processes device inventory. So if you create a Smart Label that enables metering on devices, it might take time for the Smart Label to be applied to devices and for devices to report metering information. Metering is enabled for devices that match the Smart Label criteria only after the appliance processes device inventory and the Smart Label is applied.

Related topics

Managing Smart Labels

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación