Chatta subito con l'assistenza
Chat con il supporto

KACE Systems Management Appliance 13.2 Common Documents - Administrator Guide

About the KACE Systems Management Appliance Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Managing user notifications Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Deploying the KACE Agent to managed devices Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Registering KACE Agent with the appliance Provisioning the KACE Agent Manually deploying the KACE Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles Using Task Chains
Patching devices and maintaining security
Using the Security Dashboard About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Windows Feature Updates Managing Dell devices and updates Managing Linux package upgrades Maintaining device and appliance security Manage quarantined file attachments
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the appliance
Appendixes Glossary About us Legal notices

Overview of first-time patch-subscription workflow

Overview of first-time patch-subscription workflow

Patch detection signatures and patch packages are not downloaded to the appliance by default. You must subscribe to the patches you want and then schedule a time to download them.

To save network bandwidth and disk space, Quest recommends that you download patch definition signatures first, because they are much smaller in size than patch packages. Then you can detect the patches that you need, and select the download settings that work best for your network.

The following workflow is for first-time patch-subscription.

1.
Gather information: Identify the operating systems, language packages, and applications installed on managed devices so that you know what you need to subscribe to. You can find this information on the appliance Dashboard page as well as by running reports. See View details about operating systems and applications.
2.
Select initial patch subscription settings: Subscribe to the operating systems and languages required by managed devices. See Subscribing to patches and configuring download settings.
3.
Download patch detection signatures: Patch detection signatures are smaller files that can be downloaded quickly and do not require much disk space. Download the patch detection signatures of the patches you subscribe to. Downloading these signatures enables you to view available patches and identify the patch packages you want to download later. See Select patch and feature update download settings.
4.
Run a detect-only patching job: Schedule a Detect-only patching job to identify the patches required by managed devices. A detect-only patching job is a one-time operation that shows how large the first patching job is going to be. Also, it indicates how to allocate resources based on device availability for patch installations and reboots. To run a detect-only patching job, create a patching schedule that detects patches on all devices. See Configuring patch schedules.
5.
Select patch package download settings: After you have identified the patch packages that you need, set a time for package downloads to occur. See Select patch and feature update download settings.

View details about operating systems and applications

View details about operating systems and applications

You can view information about the operating systems and applications installed on managed devices on the Summary Detail page.

Before you subscribe to patches, gather information about the operating systems, language packages, and software installed on managed devices so that you know what subscriptions you need.

1.
Do one of the following:
◦
If your appliance has the Organization component enabled, and you want view information for the appliance, log in to the System Administration Console: http://appliance_hostname/system, or select System from the drop-down list in the top-right corner of the page.
◦
If your appliance does not have the Organization component enabled, or if you want to view organization-level information, log in to the Administrator Console : http://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled, select an organization in the drop-down list in the top-right corner of the page next to the login information.
2.
Click Home to display the Dashboard page.
3.
In the top-right corner of the page, click View Details.
The Dashboard Detail page appears. The Devices section shows the operating systems of managed devices for the appliance or for the selected organization.
4.
In the Software section, click Software Titles.

The appliance runs a report that displays the software installed on managed devices. See About reports.

Subscribing to patches and configuring download settings

Subscribing to patches and configuring download settings

Subscribe to patches
Select patch and feature update download settings

To establish a patching workflow, you can subscribe to patches and configure patch download settings.

Subscribe to patches

Subscribe to patches

You can subscribe to patches for the operating systems and applications on your managed devices.

Before you subscribe to and download patches, identify the operating systems and applications installed on managed devices, and verify patching requirements. See View details about operating systems and applications.

1.
Go to the Patch Subscription Settings page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Patch Management.
c.
On the Patch Management panel, click Subscriptions.
2.
The Patch Status section provides several details about the latest patch download and appliance disk space. Here you can also determine if newly downloaded patches should be marked as active or inactive by default.

Option

Description

Activate New Patches

Mark new patches as Active. This setting enables patches that match your subscription settings after every download. If this option is not selected, new patches are marked as Inactive. This enables you to test patches before they are deployed.

3.
Specify the Subscription settings. The operating systems and locales specified in the subscription control the patches that are downloaded.

Option

Description

Windows Operating Systems

Download patches for the selected Windows operating systems. Click the edit button to manage the list of operating systems: . Select All Windows in Inventory to select the Windows operating systems based on managed devices. To ignore Windows operating system patches, select Disabled. Or, select the check boxes next to one or more Windows operating systems.

Selected items are displayed after you save the settings.

Mac Operating Systems

Download patches for the selected Mac operating systems. Click the edit button to manage the list of operating systems: . Select All Mac in Inventory to select the Mac operating systems based on managed devices. To ignore Mac operating system patches, select Disabled. Or, select the check boxes next to one or more Mac operating systems.

Selected items are displayed after you save the settings.

Locales

Download patches for the selected languages. Click the edit button to manage the list of locales: . Select All Locales to download patches regardless of the locale or select the check boxes next to one or more locales.

Selected items are displayed after you save the settings.

* 
NOTE: At least one operating system and one locale must be selected for a patch subscription.
4.
Specify the Application Patches settings. These settings are used to determine the patch status once the patch files are downloaded. This can be active, inactive or disabled.

Option

Description

Publishers

Subscribe to applications patches based on its vendor. Click the edit button to manage the selected types: . Select All Publishers to select patches from all available publishers. Or, select the check boxes next to one or more publishers.

Selected items are displayed after you save the settings.

5.
Specify the subscription's Advanced Options.

Option

Description

Classification

Click and select a type of this subscription. You can choose to select All Classifications, to make it Disabled, or click Select Classification, and choose one or more of the existing values, as applicable: Critical Updates, Definition Updates, Feature Packs, Full Software, Hotfix, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades.

Severity

Click and select a severity of this subscription. You can choose to select All Severities, to make it Disabled, or click Select Severity, and choose one or more of the existing values, as applicable: Critical, Important, Low, Moderate, and Recommended.

Labels

Download only those patches that match the selected labels. Click Manage Associated Labels to select the labels.

This refinement is important when disk space is limited. If the total disk space required for selected patches exceeds the space available on the appliance, patches cannot be downloaded.

* 
NOTE: Appliance disk space information appears in the Patch Status section at the top of the page.

Disable Windows Embedded Patches

Identify and disable any embedded Windows patches. When this option is selected, the signatures for embedded patches are downloaded, but they cannot be deployed unless they meet the subscription criteria.

Inactivate Superseded Patches

Mark patches that have been superseded to the Inactive state after every download. Inactive Superseded Patches are identified with Inactive on the Patch Catalog page.

Detect Disabled Patches

Enable the appliance to identify disabled patches when it runs a Detect job. If this option is selected, the signatures for disabled patches are downloaded for detection purposes only. Patches cannot be deployed unless they meet the subscription criteria.

6.
Click Save.

Selected patches are downloaded automatically at the next scheduled download time. If a patch does not match the subscription settings after download, it appears as Disabled. If a patch matches the subscription settings but it is either superseded or manually set to inactive, the state appears as Inactive.

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione