KACE Systems Management Appliance 14.0 Common Documents - KACE Service Desk Administrator Guide

The Device Details page for a device contains inventory information presented in sections that are collected in groups. The extent and focus of information included on the page depends on the device and any subtypes indicated.

NOTE: If you have assigned an Asset Subtype, you can choose whether to show or hide the details that appear for each Device on the Device Detail page. For example, for the subtype Printer, information that is irrelevant to printers, such as the items Installed Programs, Discovered Software, and Metered Software, could be made hidden. Whole groups can be hidden as well. See Add Asset Subtypes and select Device Detail page preferences.

Scoped users can see the details of all devices, but can only edit the details of those devices that are associated with their role. For more information about user roles, see Add or edit User Roles.

The following groups can appear on the Device Details page:

•

Summary group

•

Inventory Information group

•

Software group

•

Activities group

•

Security group

•

Dell Command | Monitor group

•

Dell Updates group

•

Logs and Diagnostics group

•

Asset group

Summary group

Basic device identification information. The items are not separated into sections as in the other groups on the page. The entries that appear on the Device Detail page vary depending on the device, operating system (if relevant), connection type, and so on.

The hostname or IP address of the device.

NAME

Asset Subtype

The Asset Subtype for this device, if one has been assigned. Asset Subtypes are subcategories of assets that you can add to any Asset Type, including custom Asset Types. This enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers.

Asset Location

The location of this asset.

N/A

Assigned To

The device owner. This field is only populated if the device user record exists on the appliance. When you integrate with the KACE Cloud MDM, if the appliance is synchronized with the KACE MDM tenant's Active Directory, the name of the KACE MDM device owner is displayed. For other types of external devices, if the device user record is not found on the appliance, the field is set to Unassigned.

N/A

Manual Entry

A field that indicates the inventory information was added manually, either through WSAPI or XML upload. click Edit to modify the information.

MANUAL_ENTRY

Device Entry Type

A field that indicates how the device is being managed: Agent Device, Agentless Device, Manually Entered Record, or Agent/Agentless (hybrid KACE Cloud MDM inventory). Click Edit to change connection protocols.

N/A

System Description

A description of the device, populated by Agentless inventory for Windows and SNMP devices.

The type of device, such as desktop or laptop.

CHASSIS_TYPE

Ownership

KACE MDM devices only. Indicates the ownership of the device: Company, Personal or Unknown.

OWNERSHIP

IP Address

The IP address of the device.

MAC Address

The device’s Media Access Control (MAC) address number.

MAC

RAM Total

The total amount of random-access memory (RAM) on the device.

RAM_TOTAL

Operating System Name

The operating system of the device, such as Windows, Mac OS X®, or Linux.

OS_NAME

Service Pack

The service pack version number (Windows or SUSE Linux Enterprise Server only).

SERVICE_PACK

Uptime Since Last Reboot

The amount of time the device has been running since it was restarted.

UPTIME

Agent Version

The version number of the KACE Agent installed on the device.

CLIENT_VERSION

Device Timezone

The timezone used by the KACE Agent installed on the device.

TZ_AGENT

Source

The source of the collected device details.

•

Agent-managed devices: This field is set to Agent.

•

Agentless devices: This field reflects the connection type. For example, VMware.

•

Agent-managed devices that are also enrolled in KACE Cloud MDM: This field is set to Agent/KACE Cloud Mobile Device Manager. Click the KACE Cloud Mobile Device Manager link to see this device in the KACE MDM Cloud inventory.

N/A

User Name

The name of the most recent user who logged in to the device. Some devices might have multiple users.

USER

Agent Connection

The time the agent messaging protocol service on the device connected to the appliance and the current connection status (available for Agent-managed devices only). Connection status information includes:

•

: An Agent-managed device is connected to the appliance.

•

: An Agent-managed device with server monitoring enabled is connected to the appliance.

•

: An Agent-managed device is not connected to the appliance.

•

: The Agent's activity is suspended on the device using the system tray (Windows) or menu bar (Mac OS) until the indicated time and date.

•

: A manually added device is connected to the appliance.

•

: An issue is detected on an Agent-managed device. To find out more about device issues, navigate to the Device Issues page. For more information, see Identify device issues.

KBSYS.SMMP_CONNECTION

Agentless Connection

The time the Agentless device connected to the appliance and the current connection status (available for Agentless devices only). Connection status information includes:

•

: Agentless-management is enabled for the device.

•

: Agentless-management and server monitoring is enabled for the device.

•

: Agentless management is enabled for the device, but the device is not currently reachable.

N/A

Agentless Connection Method

The protocol, such as SNMP, used to collect inventory information from the device.

N/A

Last Inventory

The time of the most recent inventory report.

LAST_SYNC

Device Created

The date and time that the device’s first inventory record was created.

CREATED

Device Modified

The date and time that the device’s inventory record was modified.

MODIFIED

Contact

Printers only. The contact information for the selected printer, such as an email address. This information is stored in the managed printer's SNMP sysContact field.

Location

Printers only. The location of the selected printer, such as the name of the organization. This information is stored in the managed printer's SNMP sysLocation field.

Volume n

The type and size of the disk drive’s file system, and amount of space used on the disk drive. To view changes to the drive usage, click Show Usage History link in this field. This information is updated when usage increases or decreases by 5% or more.

There is one entry for each volume.

For VMware® ESXi® host devices, each datastore associated with the ESXi host is listed as a volume.

MACHINE_DISKS

Force Inventory

Click Force Inventory to immediately update inventory information for the device and synchronize the device with the appliance.

Force Inventory is available only if the agent messaging protocol connection to an Agent-managed device is active, or for Agentless devices, if the device is reachable.

N/A

VMware UUID

This field is only visible when you select a VMware device. The UUID is a globally unique identifier for the vCenter Server or the ESXi host.

INSTANCE_UUID

Hyper-V UUID

This field is only visible when you select a Hyper-V device. The UUID is a globally unique identifier for the SCVMM or the Hyper-V server.

INSTANCE_UUID

Managing Virtual Machine Manager

The name of the managing vCenter (VMware devices) or SCVMM (Hyper-V devices).

If the managing vCenter or SCVMM is already provisioned by the KACE Agent, its name in this column appears as a hyperlink. When you click the link, the page is updated to display device details for the provisioned virtual machine manager.

N/A

Choose Action

•

To upload agent files, click Choose Action > Upload Agent Files (Diagnostic). When done, links to uploaded files appear in the Logs and Diagnostics group on this page.

•

To add the device to the KACE Systems Deployment Appliance (SDA) boot action, click Choose Action > Add to SDA Boot Action. KACE SDA boot actions are used to automate image deployments to target devices. You can only create boot actions from the selected device if a linked KACE SDA exists, and the device has a wired network connection. This command is also available from the Choose Action menu on the Devices list page. When you click this command, the KACE SDA Automated Deployment Detail page appears. For more information about this page, see the KACE SDA Administrator Guide.

•

To delete the selected device, click Choose Action > Delete.

N/A

KACE Cloud Mobile Device Manager (MDM) commands

When you integrate with the KACE Cloud MDM and select a KACE Cloud MDM device, an additional set of commands is available in this section.

•

Force Inventory: Requests from the KACE Cloud MDM to initiate a new inventory for the device. When complete, the appliance synchronizes the inventory information.

•

Lock: Blocks access to the selected device. Next time the user interacts with the device, they are prompted to provide the device's passcode.

•

Set Passcode: Allows you to specify a new passcode for the selected device.

NOTE: This command is only available for Android devices.

•

Clear Passcode: Unlocks the selected device. The device remains unlocked until a new passcode is provided.

•

Clear Restrictions: Android and iOS devices only. Removes any settings that limit the selected device's functionality.

•

Unenroll Device: Un-enrolls the selected device from the KACE Cloud MDM.

•

Factory Reset: Restores the factory settings on the selected device.

•

Restart Device: Android (managed), iOS (supervised), and Mac OS devices only. Restarts the selected device.

•

Shutdown Device: iOS (supervised) and Mac OS devices only. Turns off the selected device.

•

Enable Remote Desktop: Mac OS devices only. Enables remote desktop connections to the selected device.

•

Disable Remote Desktop: Mac OS devices only. Disables remote desktop connections to the selected device.

•

Set Firmware Password: Mac OS devices only. Allows you to specify a password for the selected device's firmware.

•

Clear Firmware Password: Mac OS devices only. Deletes the password for the selected device's firmware.

Tip:

TIP: These commands are also accessible from the Devices list page, from the Choose Action menu, when KACE Cloud MDM bulk actions are enabled. This feature is disabled by default. To enable it, on the General Settings page, under Allowed Bulk Actions, select the Enable Bulk KACE Cloud MDM Actions check box. For more information, see Configure Admin-level or organization-specific General Settings. The Force Inventory command appears in the main menu, while the other commands are available in the KACE Cloud MDM menu.

N/A

VMware virtual machine commands

If your managed environment includes one or more provisioned VMware virtual machines, you can perform device actions from this page, such as powering virtual machines on or off. These commands are available if the following pre-requisites are met:

•

The provisioned virtual machines must be running on a provisioned VMware ESXi server version 5.5.x or higher.

NOTE: Your product license agreement allows administrator to manage a specific number of computers, servers, and assets. Each provisioned VMware ESXi server consumes an agentless license. If you want to use this feature, you must ensure that your product license agreement covers all of your provisioned ESXi hosts. For more information, see http://quest.com/docs/Product_Guide.pdf. To increase your license capacity, visit https://quest.com/buy.

•

VMware Tools must be installed on the target virtual machines to issue Shut Down Guest OS and Restart Guest OS commands. The other commands do not require VMware Tools.

•

User account configured in the inventory must have sufficient administrative-level permissions in order to perform these actions.

The following commands are available when you select a provisioned VMware virtual machine.

•

Power On: Powers on the selected virtual machine. If the virtual machine is suspended, this action causes the suspended virtual machine to be powered on.

•

Power Off: Powers off the selected virtual machine. If the virtual machine is a fault-tolerant primary virtual machine, this results in one or more of the secondary virtual machines being powered off as well.

•

Suspend: Suspends the execution of the selected virtual machine.

•

Reset: Resets the power on the selected virtual machine. If the virtual machine is currently powered on, this action first powers it off, then powers it on.

•

Shut Down Guest OS: Issues a command to the guest operating system on the selected virtual machine to perform a clean shutdown of all services.

•

Restart Guest OS: Issues a command to the guest operating system on the selected virtual machine to perform a reboot.

Tip:

TIP: These commands are always available on the Device Detail page. They can also appear on the Devices list page in the Choose Action menu when bulk actions against virtual machines are enabled. This feature is disabled by default. To enable it, on the General Settings page, under Allowed Bulk Actions, select the Enable Bulk Virtual Machine Actions check box. For more information, see Configure Admin-level or organization-specific General Settings.

For complete information about these virtual machine actions, refer to your VMware ESXi documentation.

N/A

Hyper-V virtual machine commands

If your managed environment includes one or more provisioned Hyper-V virtual machines, you can perform device actions from this page, such as powering virtual machines on or off.

The following commands are available when you select a provisioned Hyper-V virtual machine.

•

Power On: Powers on the selected virtual machine. If the virtual machine is suspended, this action causes the suspended virtual machine to be powered on.

•

Suspend: Suspends (pauses) of the selected virtual machine.

•

Resume: Resumes a suspended virtual machine.

•

Reset: Resets the power on the selected virtual machine. If the virtual machine is currently powered on, this action first powers it off, then powers it on.

•

Shut Down Guest OS: Issues a command to the guest operating system on the selected virtual machine to perform a clean shutdown of all services.

•

Restart Guest OS: Issues a command to the guest operating system on the selected virtual machine to perform a reboot.

Tip:

For complete information about these virtual machine actions, refer to your Hyper-V documentation.

N/A

Chrome device commands

If your managed environment includes one or more provisioned Chrome devices, the following commands are available when you select a Chrome device:

•

Move: Moves a provisioned device to a different organizational unit.

•

Disable: Disables a provisioned device. You can use this command if a device is lost or stolen.

•

Re-Enable: Enables a previously disabled device.

•

Deprovision: Removes all provisioning policies from the device. You typically need to do that for devices that are no longer used in your organization so that you no longer need to manage them.

Tip:

TIP: These commands are always available on the Device Detail page. They can also appear on the Devices list page in the Choose Action menu when bulk actions against virtual machines are enabled. This feature is disabled by default. To enable it, on the General Settings page, under Allowed Bulk Actions, select the Enable Bulk Chrome OS Actions check box. For more information, see Configure Admin-level or organization-specific General Settings.

For complete information about these Chrome device actions, refer to the Google documentation.

Microsoft Defender commands

The following requirements must be met in order for a managed device to have access to these commands:

•

Agent managed or agentless device

•

Windows 10 or later, or Windows Server 2016 or later

•

Powershell is required

The following commands are available:

•

Perform a Microsoft Defender Quick Scan: Scans the locations in which malware can be registered, such as registry keys and Windows startup directories.

•

Perform a Microsoft Defender Full Scan: Starts by running a quick scan followed by a scan of all fixed, removable, and network drives, as applicable.

•

Update Microsoft Defender Signatures: Updates the anti-malware definitions.

•

Enable Microsoft Defender: Turn on Microsoft Defender on the selected device.

•

Disable Network Traffic: Disables network traffic to and from the selected device.

Tip:

TIP: These commands are also accessible from the Devices list page, from the Choose Action menu, when Microsoft Defender bulk actions are enabled. This feature is disabled by default. To enable it, on the General Settings page, under Allowed Bulk Actions, select the Enable Bulk Microsoft Defender Actions check box. For more information, see Configure Admin-level or organization-specific General Settings.

Inventory Information group

Additional details on items in the Summary section.

Information about the device’s hardware.

If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.

RAM Total

The total amount of random-access memory (RAM) installed on the device.

RAM_TOTAL

RAM Used

The amount of random-access memory (RAM) in use on the device.

RAM_USED

RAM Maximum

The maximum amount of random-access memory (RAM) that the device can support.

RAM_MAX

System Manufacturer

The device manufacturer.

The system serial number.

CSP_ID_NUMBER

Asset Tag

Windows, Chrome and KACE MDM devices only. The BIOS Asset Tag of a system. An Admin can use a bios utility to set this value on the system.

ASSET_TAG

Domain

The Windows domain to which the device is joined.

CS_DOMAIN

Motherboard Primary Bus

The main bus.

MOTHERBOARD_PRIMARY_BUS

Motherboard Secondary Bus

The peripheral bus.

MOTHERBOARD_SECONDARY_BUS

Processors

The CPU count, type, and manufacturer.

PROCESSORS

Architecture

The architecture of the device operating system, such as x86 or x64.

SYS_ARCH

Virtual Device

Used to identify devices that are virtual, such as devices running on VMware platforms. Not displayed for physical devices, such as laptops and servers.

VIRTUAL

Trusted Platform Module (TPM)

On devices with the TPM dedicated microprocessor installed, displays specifications and information about whether TPM is enabled and activated.

See About Dell Data Protection | Encryption (DDP|E) and encryption information in device details.

MACHINE_TPM

Intel AMT Device

On Intel-based Windows devices with Intel AMT technology present, displays information about configuration.

See About Intel AMT information in device details.

INTEL_AMT

CD/DVD Drives

The configuration of CD-ROM and DVD-ROM drives installed on the device.

CDROM_DEVICES

Sound Devices

Information about audio devices on the device.

SOUND_DEVICES

Video Controllers

Information about video controllers on the device.

VIDEO_CONTROLLERS

Monitors

The type and manufacturer of the monitor attached to the device. For virtual devices, this displays monitor information if it is reported by the operating system.

MONITOR

Apple Support Information

Link to the Support page at Apple.

N/A

SMC Version

The System Management Controller version of the device CPU.

BIOS_NAME

Serial Number

The serial number of the device.

BIOS_SERIAL_NUMBER

Boot ROM Version

The Boot ROM or Firmware version of the device.

BIOS_VERSION

Dell Service Information

Information about Dell hardware, including the Service Tag, System Type, Ship Date, Country, and warranty information. This section also includes a Days Left column, which indicates the number of days remaining in the warranty period, and Last Updated column, which indicates the last time the warranty information was refreshed. To update Dell Service information, click Refresh.

The date the BIOS version was released.

BIOS_DATE

BIOS Manufacturer

The BIOS manufacturer.

BIOS_MANUFACTURER

BIOS Description

The BIOS description.

BIOS_DESCRIPTION

BIOS Serial Number

The BIOS serial number.

BIOS_SERIAL_NUMBER

Black Toner - Description

Printers only. The make and model of the black toner.

Black Toner - Maximum Level

Printers only. The maximum level of the black toner powder.

Black Toner - Current Level

Printers only. The current level of the black toner powder. If the toner is not installed, a message appears in this field.

Cyan Toner - Description

Color printers only. The make and model of the cyan toner.

Cyan Toner - Maximum Level

Color printers only. The maximum level of the cyan toner powder.

Cyan Toner - Current Level

Color printers only. The current level of the cyan toner powder. If the toner is not installed, a message appears in this field.

Magenta Toner - Description

Color printers only. The make and model of the magenta toner.

Magenta Toner - Maximum Level

Color printers only. The maximum level of the magenta toner powder.

Magenta Toner - Current Level

Color printers only. The current level of the magenta toner powder. If the toner is not installed, a message appears in this field.

Yellow Toner - Description

Color printers only. The make and model of the yellow toner.

Yellow Toner - Maximum Level

Color printers only. The maximum level of the yellow toner powder.

Yellow Toner - Current Level

Color printers only. The current level of the yellow toner powder. If the toner is not installed, a message appears in this field.

Volume n

There is one entry for each volume.

MACHINE_DISKS

Lenovo Service Information

Lenovo devices only. Information about the selected Lenovo device. This section is populated when you provide the manufacturer's API keys on the General Settings page. For more information, see Configure appliance General Settings with the Organization component enabled.

Product: The name of the selected Lenovo device.

PRODUCT

Purchased: The date when the selected Lenovo device is purchased.

PURCHASED

Shipped: The date when the selected Lenovo device is shipped.

SHIPPED

In Warranty: Indicates if the selected Lenovo device is covered by the warranty (Yes or No).

IN_WARRANTY

Country: The country where the selected Lenovo printer is purchased.

COUNTRY

UpgradeUrl: The URL containing upgrade information.

UPGRADE_URL

Last Updated: The time stamp of when the device information was last updated.

Id: The warranty ID.

Type: The warranty type: UNKNOWN, BASE, UPGRADE, EXTENDED or INSTANT.

TYPE

Start Date: The warranty start date.

START_DATE

End Date: The warranty end date.

END_DATE

Name: The warranty name.

Description: The warranty description, as applicable.

DESCRIPTION

Printers

The printers that the device is configured to use.

PRINTERS

Network Interfaces

The type of network interface, such as Ethernet card or Bluetooth adapter, and details like IP address, whether DHCP (Dynamic Host Configuration Protocol) is enabled or disabled for the associated IPv4 (Internet Protocol version 4).

MACHINE_NICS

SNMP Data

The results of a SNMP Full Walk of data in the MIB (management information base) on a device, if you set up the Authenticated device discovery type to perform a Full Walk. This section does not appear if discovery was made with a Bulk GET.

MAC Address

The device's wireless MAC address.

MAC_ADDRESS

DHCP

An indicator of whether DHCP is enabled for the IPv4 address associated with this network interface.

IPv6 Host Configuration

A list containing one or more IPv6 ((Internet Protocol version 6) addresses available on the network interface. For each listed item, this section displays its full IPv6 address and the number of bits in the IPv6 address prefix. An IPv6 prefix typically consists of 64 bits.

DNS Hostname

The host name associated with this network interface.

Wi-Fi

KACE MDM devices only. The IP or MAC address of the device.

Chrome OS

Chrome-related information.

NOTE: Chrome values are in the MACHINE_CHROMEOS_DETAIL table, not the MACHINE table.

N/A

Directory API ID

The unique ID of the Chrome device.

DEVICE_ID

Status

The status of the Chrome device: ACTIVE, DEPROVISIONED, INACTIVE, RETURN_APPROVED, RETURN_REQUESTED, SHIPPED, UNKNOWN.

STATUS

Support End Date

The final date the device will be supported. This is applicable only for those devices purchased directly from Google.

SUPPORT_END_DATE

Custom User

The user of the device as noted by the administrator.

ANNOTATED_USER

Custom Location

The address or location of the device as noted by the administrator.

ANNOTATED_LOCATION

Order Number

The device's order number. Only devices directly purchased from Google have an order number.

ORDER_NUMBER

Chrome Version

The Chrome device's operating system version.

OS_VERSION

Platform Version

The Chrome device's platform version.

PLATFORM_VERSION

Firmware Version

The Chrome device's firmware version.

FIRMWARE_VERSION

Boot Mode

The boot mode for the device.

BOOT_MODE

Organizational Unit

The full parent path with the Google organization unit's name associated with the device.

ORG_UNIT_PATH

Auto-Update Expiration

The date and time until which the device receives automatic updates.

AUTO_UPDATE_EXPIRATION

Mobile Information

Information from devices managed by KACE Mobile Device Manager (KMDM), and Workspace ONE®

N/A

UDID

The device’s Unique Device Identifier. For iOS devices only.

UDID

Modem Firmware

The mobile device's firmware version.

FIRMWARE_VERSION

Device type

DMM devices only. The type of mobile device. Examples include iPhone, iPad, iPod, Android Phone, and Android Tablet.

DEVICE_TYPE

ICCID

KACE MDM and DMM devices only. The unique serial number for the device’s SIM card.

ICCID

IMEI

KACE MDM and DMM devices only. International Mobile Equipment Identity number for the device.

IMEI

Voice Roaming Enabled

KACE MDM Android phones only. An indicator of whether the selected KACE MDM Android phone has voice roaming enabled.

VOICE_ROAMING_ENABLED

Data Roaming Enabled

KACE MDM Android phones only. An indicator of whether the selected KACE MDM Android phone has data roaming enabled.

DATA_ROAMING_ENABLED

MEID

KACE MDM devices only. The Mobile Equipment Identifier. This is the unique identifier of the selected mobile device.

MEID

Phone Number

DMM devices only. Phone number associated with the device.

PHONE_NUMBER

Mobile Operator

KACE MDM and DMM devices only. The mobile network carrier.

CARRIER

Bluetooth MAC Address

DMM devices only. Media access control address for Bluetooth on the device.

BLUETOOTH_MAC

Battery Level

KACE MDM and DMM devices only. Amount of battery charge at last update, in percent.

BATTERY_LEVEL

Last Check-in

The time stamp of when the device information was last updated.

LAST_CHECK_IN

Last Enrollment Time

The date and time the device was last enrolled with the Google Admin console.

LAST_ENROLLMENT_TIME

Enrolled

KACE MDM and Workspace ONE devices only.

The date and time the device was last enrolled with KACE MDM or Workspace ONE console.

IS_ENROLLED

Supervised

KACE MDM iOS devices only. An indicator of whether the selected KACE MDM iOS device is supervised. This is the highest level of control on an iOS device.

IS_SUPERVISED

Lost Mode

KACE MDM iOS supervised devices only. An indicator of whether the selected KACE MDM iOS device is in Lost mode. The Lost mode prevents a device from being unlocked by a third party.

IS_LOST

Encrypted

KACE MDM devices only. An indicator of whether the selected KACE MDM iOS device is in Encrypted mode.

IS_ENCRYPTED

Locator Service Enabled

KACE MDM iOS devices only. An indicator of whether the selected KACE MDM iOS device is has the Locator Service enabled. This service retrieves the device location information, if the device is responding.

LOCATOR_SERVICE_ENABLED

Activation Lock Enabled

KACE MDM iOS devices only. An indicator of whether the activation lock is enabled on the selected KACE MDM iOS device. This feature prevents anyone else from using an iOS device if it is lost or stolen.

ACTIVATION_LOCK_ENABLED

Rooted

KACE MDM Android devices only. An indicator of whether the OS of the selected KACE MDM Android device is unlocked.

IS_ROOTED

Compliant

Workspace ONE devices only. Indicates if the device meets pre-configured Workspace ONE compliance rules.

IS_COMPLIANT

Current Mobile Network

Workspace ONE devices onlyThe name of the mobile network associated with the Workspace ONE device.

N/A

Activation Lock Bypass Code

KACE MDM iOS DEP-managed devices only.The bypass code that can be used as the device password, when activation lock is enabled.

ACTIVATION_LOCK_BYPASS_CODE

Allow Supervised Activation Lock

KACE MDM iOS DEP-managed devices only. Indicates if activation lock is enabled for the device. Activation lock allows users to bypass the password and log in to the device with the activation lock bypass code.

ACTIVATION_LOCK_ALLOWED

DEP Managed

KACE MDM iOS devices only. Indicates if the device is managed by the Apple Device Enrollment Program (DEP).

IS_DEP_MANAGED

DEP Profile

KACE MDM iOS DEP-managed devices only. The name of the DEP profile associated with the device.

DEP_PROFILE

DEP Profile Assigned By

KACE MDM iOS DEP-managed devices only. The name of the user account that assigned the DEP profile to the device.

DEP_ASSIGNED_BY

DEP Profile Assigned Date

KACE MDM iOS DEP-managed devices only. The date when the DEP profile is assigned to the device.

DEP_ASSIGNED_DATE

DEP Profile Status

KACE MDM iOS DEP-managed devices only. The management status of the device:

•

Assigned: Apple DEP received a profile and it is ready to be assigned to the device.

•

Empty: profile is not assigned to the device.

•

Pushed: A profile is delivered to the activated device.

•

Removed: A profile was assigned to the device but has been removed. When the device reactivates, KACE MDM will no longer manage the device.

DEP_PROFILE_STATUS

Device Configured

KACE MDM iOS DEP-managed devices only.

IS_DEP_CONFIGURED

Do Not Disturb

Indicates if the device is in Do Not Disturb mode.

DO_NOT_DISTURB_ENABLED

Exchange Device ID

The Microsoft Exchange ID assigned to the device.

EAS_DEVICE_ID

First Enrolled

The date when the device was enrolled in KACE MDM.

ENROLLMENT_DATE

iCloud Enabled

KACE MDM iOS devices only. Indicates if cloud is enabled on the devices.

ICLOUD_ENABLED

Last iCloud Backup

KACE MDM iOS devices only. The date when Apple iCloud was last backed up on the device.

ICLOUD_LAST_BACKUP

Logged into iTunes

KACE MDM iOS devices only. Indicates if the device is logged in to iCloud.

IS_ITUNES_ACCOUNT_ACTIVE

Wi-Fi Received

KACE MDM Android devices only. The number of bytes the device received through a Wi-Fi network.

WIFI_BYTES_RECV

Wi-Fi Sent

KACE MDM Android devices only. The number of bytes the device sent through a Wi-Fi network.

WIFI_BYTES_SENT

WWAN Received

KACE MDM Android devices only. The number of bytes the device received through a mobile network.

WWAN_BYTES_RECV

WWAN Sent

KACE MDM Android devices only. The number of bytes the device sent through a mobile network.

WWAN_BYTES_SENT

Agent

Agent-related information.

N/A

Agent Version

The version number of the KACE Agent installed on the device.

CLIENT_VERSION

Connected

The time the agent messaging protocol service on the device connected to the appliance.

CONNECT_TIME

Disconnected

If disconnected, the time the agent messaging protocol service on the device disconnected from the appliance.

DISCONNECT_TIME

KACE ID

The character string used to identify the device in the appliance database.

KUID

Database ID

The unique number used to identify the device in the appliance database.

Manual Entry

A field that indicates the inventory information was added manually, either through WSAPI or XML upload.

MANUAL_ENTRY

Device Entry Type

A field that indicates how the device is being managed: Agent Device, Agentless Device, or Manually Entered Record. Click Edit to change connection protocols.

N/A

Last Inventory

The time of the most recent inventory report.

LAST_INVENTORY

Last Sync

For Agent-managed devices, the time the device last checked in to the appliance. For Agentless devices, the time the appliance last connected to the device and collected inventory.

LAST_SYNC

Last Agent Update

The time of the most recent update to the KACE Agent, if any.

LAST_CLIENT_UPDATE

Konductor Tasks

The status of tasks that are currently running, or that are scheduled to run, on Agent-managed devices. This section displays the following information about each task:

•

Task Type: The type of task. Depending on appliance configuration, task types include alerts, inventory, kbot, krash upload, and scripting updates.

•

Start Time: The start time of the task.

•

Completed: The completion time of the task.

•

Next Scheduled: The next scheduled run time for the task.

•

Timeout: The time limit for completing the task.

•

Priority:The importance or rank of the task.

This information also appears on the Agent Tasks list page. For more information, see View Agent task status.

A link to the quarantine details for this Agent. For more information, see Registering KACE Agent with the appliance.

KUID

Approved Time

The date and time the KACE Agent is authenticated by the appliance.

APPROVED_TIME

Token Used

If the KACE Agent used a token to register with the appliance, this field contains the token name and a link to the token details.

TOKEN_ID

Approved By

If the KACE Agent connected to the appliance after being granted access by the appliance administrator, this field contains the name of the administrative user that approved the agent's connection.

APPROVED_BY

User

Information related to the device user.

N/A

User Logged

The user currently logged in to the device. This entry includes the username and the domain to which the user belongs.

USER_LOGGED

User Fullname

The full name of the user who owns the device.

USER_FULLNAME

User Name

The name of the current user.

USER_NAME

User Domain

The domain to which the user belongs.

USER_DOMAIN

Operating System

Information about the device's operating system.

N/A

Name

The operating system of the device, such as Windows, Mac OS X, or Linux.

OS_NAME

Service Pack

The service pack version number (Windows or SUSE Linux Enterprise Server only).

SERVICE_PACK

Operating System Version

The version number of the operating system.

OS_VERSION

Operating System Build Version

The build number of the operating system.

OS_BUILD

Number

The number of the operating system.

OS_NUMBER

Operating System Architecture

The architecture of the device operating system, such as x86 or x64.

OS_ARCH

Domain

The Windows domain to which the device is joined.

CS_DOMAIN

Operating System Installed On

The date the operating system was installed.

OS_INSTALLED_DATE

Last Startup

The length of time the operating system has been running.

LAST_REBOOT

Uptime Since Last Reboot

The amount of time the device has been running since it was restarted.

UPTIME

System Directory

The location of the system directory.

SYSTEM_DIRECTORY

Registry Size

The size of the registry.

REGISTRY_SIZE

Registry Maximum Size

The maximum size of the registry.

REGISTRY_MAX_SIZE

Pagefile Size

The current size of the Windows Pagefile.

PAGEFILE_SIZE

Pagefile Max Size

The maximum size of the Windows Pagefile.

PAGEFILE_MAX_SIZE

IE Version

The version of Internet Explorer installed on the device.

IE_VERSION

Edge Version

The version of Microsoft Edge installed on the device.

EDGE_VERSION

WMI Status

The status of the Windows Management Instrumentation (WMI) service (Windows Devices only).

WMI_STATUS

Drive Encryption

Information on encryption if a DDP|E client has been installed on a device, as well as BitLocker or FileVault2.

See About Dell Data Protection | Encryption (DDP|E) and encryption information in device details.

Drive Encryption Summary

Identifies encryption technology in place, and whether the encryption is enabled.

N/A

Dell Data Protection | Encryption (DDP|E)

Configuration and status information about DDP|E.

N/A

BitLocker

Configuration and status information about Windows BitLocker.

N/A

FileVault

Configuration and status information about Mac OS X FileVault 2.

N/A

Location

Information from devices managed by Workspace ONE or KACE MDM Cloud.

Address

The street address of the selected device.

STREET_ADDRESS

City

The city where the selected device is located.

LOCALITY

State/Province

The state or province in which the selected device is located.

REGION

Country

The country where the device is located.

COUNTRY

Latitude

The latitude of the device detected during the last update.

LATITUDE

Longitude

The longitude of the device detected during the last update.

LONGITUDE

Last Update

The time stamp of when the device information was last updated.

LAST_UPDATE

Notes

Any additional information you want to provide.

NOTES

Virtual Machines

When an ESXi host or a Hyper-V server is selected, this group lists the virtual machines associated with the selected device. Some of the information in this list is only available if VMware tools/Microsoft Integration services are installed on the virtual machines. If some columns are not populated, this may be due to missing VMware tools or Microsoft Integration services.

Name

The name of the virtual machine.

NAME

Hostname

The host name assigned to the virtual machine. If a virtual machine is already provisioned by the KACE Agent, its name in this column appears as a hyperlink. When you click the link, the page is updated to display device details for the provisioned virtual machine.

HOSTNAME

IP Address

The primary IP address assigned to the virtual machine.

State

Indicates if the virtual machine is running. Possible values:

•

0 - Running: Virtual machine is running normally.

•

1 - Shutting down: Virtual machine has a pending shutdown command.

•

2 – Resetting: Virtual machine has a pending reset command.

•

3 – Pending standby: Virtual machine has a pending standby command.

•

4 – Not running: Virtual machine is not running.

•

5 – Unknown: Virtual machine information is not available.

MACHINE_VIRTUAL_STATE

Status

The virtual machine status. Possible values:

•

0 – OK: No problems.

•

1 – Warning: Possible problem.

•

2 – Error: Definite problems.

•

3 – Unknown: Status is unknown.

MACHINE_VIRTUAL_STATUS

Hardware Version

The hardware version of a virtual machine reflects the virtual machine's supported virtual hardware features.

HARDWARE_VERSION

Hypervisors

When a vCenter or a SCVMM environment is selected, this group lists the hypervisors managed by vCenter or SCVMM.

Hostname

The host name assigned to the ESXi host or Hyper-V server. If an ESXi or or Hyper-V device is already added to the inventory, its name in this column appears as a hyperlink. When you click the link, the page is updated to display device details for the selected device.

N/A

Platform

The platform and version of the associated ESXi or Hyper-V hypervisor.

PLATFORM

IP Address

The IP address assigned to the ESXi host.

N/A

Virtual Machines

The number of virtual machines on the ESXi or Hyper-V hypervisor.

N/A

System Serial Number

The serial number of the device hosting the ESXi or Hyper-V hypervisor.

N/A

Status

The ESXi host status.

N/A

SDA Deployment Information

When you select a device deployed from the KACE System Deployment Appliance (SDA), this group displays the deployment details.

Deployment Time

The time when the deployment is successfully completed.

SDA_DEPLOYMENT_TIME

Deployment Type

The type of the deployment, such as Scripted Installation, System Image, or Custom Deployment.

SDA_DEPLOYMENT_TYPE

Deployment Name

The name of the deployment, as specified in the KACE SDA.

SDA_DEPLOYMENT_NAME

Deployment URL

The URL to the deployment on the associated KACE SDA.

SDA_DEPLOYMENT_URL

Deployment ID

The ID of the deployment on the KACE SDA.

SDA_SCRIPTED_INSTALLATION_ID

SDA Name

The host name or IP address of the KACE SDA.

SDA_NAME

SDA URL

The URL of the KACE SDA.

SDA_URL

Batteries

This group displays battery information for Windows, Linux and MacOS Agent- and Agentless-managed devices.

Charge

The percentage of the current battery capacity.

CHARGE_PERCENT

Chemistry

Windows and Linux devices only. The battery type, such as Lithium Ion, and so on.

CHEMISTRY

Current Capacity (mWh)

The current battery capacity.

CURRENT_CAPACITY

Design Capacity (mWh)

The maximum capacity of battery by design.

DESIGN_CAPACITY

Full Charge Capacity (mWh)

Current maximum capacity of battery. This value degrades over time.

FULL_CHARGE_CAPACITY

Health (%)

The percentage of the current battery capacity compared to its maximum designed capacity.

HEALTH_PERCENT

Manufacturer

The battery manufacturer.

MANUFACTURER

Name

The battery name or model.

NAME

Plugged In

An indicator of whether the battery is currently plugged into a power source.

PLUGGED_IN

Recharge Count

MacOS devices only. The number of times the battery has been recharged.

RECHARGE_COUNT

Serial Number

The serial number of the battery.

SERIAL

Time Remaining (Minutes)

The number of minutes after which the battery becomes discharged. When the battery is plugged in, this field is blank.

TIME_REMAINING

Software group

Details on the applications installed on the device, including patching information, running processes, and startup programs.

Section	Description	Database field
Installed Programs	A list of the software installed on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Discovered Software	Discovered applications are executables in the appliance inventory that match the definitions of applications in the Software Catalog. You can enable metering for Discovered applications and suites, mark them as Not Allowed, and add license information for them. In addition, the Discovered application list can be exported in CSV format. You can export the Discovered application list, the Uncataloged list, and the Locally Cataloged list; you cannot export the entire Software Catalog.	N/A
Metered Software	Applications for which metering has been enabled.	N/A
Custom Inventory Fields	A list of Custom Inventory fields for this device, along with the field name and value.	N/A
Uploaded Files	The files that have been uploaded to the appliance from this device using the upload a file script action.	N/A
Patches Reported Installed in Software Inventory	Microsoft patches that have been installed on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Running Processes	A list of processes running on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Startup Programs	A list of startup programs on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Services	A list of services that are running on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A

Activities group

Information about actions to be performed on the device.

Section	Description	Database field
Monitoring	Information related to server monitoring, if enabled and if the device's operating system is supported. If the operating system is not supported, that fact is stated in a message. If the device is eligible for monitoring but does not have monitoring enabled, the Enable Monitoring button appears.	N/A
Active/Paused	Whether monitoring is enabled for this device.	N/A
Profiles	Any alert criteria profiles that are assigned to this device.	N/A
Maintenance Windows	Any Maintenance Windows that are assigned to this device.	N/A
Level/Alert	Alerts that are active for this device, with icons indicating the level of alert.	N/A
Labels	The labels assigned to this device. Labels are used to organize and categorize inventory and assets.	N/A
Failed Managed Installations	A list of Managed Installations that have failed to install. To access details of the Managed Installations, click the Managed Installation Detail link.	N/A
Managed Install List	A list of Managed Installations that are scheduled to be sent to the device the next time it connects with the appliance.	N/A
Service Desk Tickets	A list of the tickets associated with this device. These can either be tickets assigned to the device owner or tickets submitted by the device owner. To view ticket details, click the ticket ID (for example, TICK:0032).	N/A
SNMP Inventory Configurations	A list of SNMP Inventory Configurations associated with this device. To access details of the configurations, or to add configurations, click Manage Associated SNMP Configurations.	N/A

Security group

Section	Description	Database field
Patching Detect/Deploy Status	A list of the patches detected and deployed on the device. If patch attempts have been made, but they have failed, you can click Reset Tries to reset the number of patch attempts to the maximum allowed.	N/A
Threat Level 5 List	Threats that are harmful to applications, processes, startup items, or services on the device.	N/A
Windows Feature Update Status	A list of the Windows Feature Update tasks detected and deployed on the device. If updates attempts have been made, but they have failed, you can click Reset Tries to reset the number of patch attempts to the maximum allowed.
Linux Package Repository Information	A list of URL to the device-associated Linux package repositories.	N/A
Linux Package Upgrades Status	A list of the patches detected and deployed on the device. If patch attempts have been made, but they have failed, you can click Reset Tries to reset the number of patch attempts to the maximum allowed.	N/A
Microsoft Defender	A list of the Microsoft Defender components and their properties, including its summary, antimalware, antispyware, and antivirus, antivirus network inspection, real-time protection, and tamper protection.	N/A
Microsoft Defender Threat History	A list of the threats detected by Microsoft Defender. For each threat, the list displays its name, the date and time it was first detected, the severity, whether the threat is quarantined, and if the threat is launched and active. For additional details, click a threat, and in the dialog box that appears, you can review the threat category, type, launch status, detection source, and the affected files.	N/A

Dell Command | Monitor group

Additional inventory information about selected Dell client systems using Dell Command | Monitor.

Section	Description	Database field
Alerts	DCM log entries. These can indicate hardware errors detected by firmware.	N/A
Hardware	Collected information that includes detailed battery specs and usage data, service processor presence and configuration, memory inventory, and attached Dell monitors.	N/A

For classes and properties queried by the appliance using Dell Command | Monitor, see .

Dell Updates group

Information regarding updates and inventory (for Dell devices only).

Section

Description

Database field

Dell Updates Detect/Deploy Status

A list of the Dell Updates detected and deployed on the device, and any related schedules.

If update attempts have been made, but they have failed, you can click Reset Tries to reset the number of update attempts to the maximum allowed.

N/A

Logs and Diagnostics group

•

Management Service Logs: The primary role of appliance Management Service is to run the offline KScripts. The Management Service logs display the steps performed by Management

•

Service to run the offline KScripts. These steps include, downloading dependencies and validating the KBOTS file. Any error in the execution of offline KScript is logged in the Management Service logs.

•

Bootstrap Logs: The appliance sends a bootstrap request to get inventory information for devices that have checked in for the first time. The logs related to this request are displayed in Bootstrap logs.

•

Client Logs: The appliance sends a request to the Agent to get inventory information periodically. A script runs on the device, then sends the inventory information to the appliance and inventory is uploaded to the appliance. The Agent logs display these actions.

•

Scripting Updater: A request is initiated periodically from the device to get the latest information related to the changes in offline KScripts. Scripting Updater logs display this information.

•

Agentless Inventory Status Messages: The log displays messages related to collecting and submitting inventory data from Agentless-managed devices.

Section	Description	Database field
Agent Logs	The logs for the KACE Agent.	N/A
Agent Diagnostic Files	Files uploaded by selecting Choose Action > Upload Agent Fileson this page.	N/A
User Console Installation Logs	Details about User Console packages installed on this device.	N/A
Scripting Logs	Scripts, such as Configuration Policy scripts, that have run on this device, along with the available status of any scripts in progress.	N/A
Server-side Device Log Data	Log entries for the selected device. This section shows the last five entries of each related log, allowing you to troubleshoot any existing issues.	N/A
Device Activity	Chrome devices only. It shows the date the device was last active, the length of time the device was active for, and the activity history. Each entry in the activity history shows the date and length or each user session.	N/A

Asset group

This section displays the details of the Asset associated with this device. Clicking the Edit this Asset link enables you to edit the asset information.

Section	Description	Database field
Asset Information	Details such as the date and time the record was created and last modified; the Asset Type, such as device; and the name of the asset.	N/A
Barcodes	Barcodes associated with this asset, if they exist.	N/A
Related Assets	Assets that are related to this asset, such as parent or child assets.	N/A
Task History	A list of tasks that have run on the device.	N/A

About Dell Data Protection | Encryption (DDP|E) and encryption information in device details

About Dell Data Protection ||E) and encryption information in device details

If devices in the network have the DDP|E client installed, the appliance can collect status and configuration information and display it on the Device Detail page.

Registry key needed to be set on Windows DDP|E client

A requirement for the appliance being able to collect detailed inventory from Windows DDP|E clients is to set the DumpXmlInventory key in the client.

Key: HKLM\SYSTEM\CurrentControlSet\services\DellMgmtAgent\Parameters
DWORD Value: DumpXmlInventory
Data: 0x1

This registry value causes DDP|E to write an inventory.xml file to the target device, which is then parsed by inventory. See Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices.

This requirement applies only to Windows.

Dell Data Protection ||E)

DDP|E consists of applications that enable a user to:

•

Detect data security risks on desktops, laptops, and external media.

•

Protect data on these devices by enforcing access control policies, authentication, and encryption of sensitive data.

•

Manage data centrally with policies using collaborative tools that integrate into existing user directories.

•

Support key and data recovery, automatic updates, and tracking for protected devices.

Table 11. Supported OSs for DDP|E
Operating system	Versions
Windows	7, 8, 8.1
Mac OS X	10.7.5, 10.8.3–10.8.5, 10.9.2–10.9.3

Table 12. DDP|E information displayed on the Device Detail page
Item	Description	MACHINE_DDPE Database field
Unique ID	An identification of the DDP\|E client used by the DDP\|E server.	MCID
Agent Version	Version of DDP\|E client installed.	AGENT_VERSION
Server Hostname	Hostname of the DDP\|E server managing this DDP\|E client.	SERVER_HOSTNAME
Protection Status	Example values are Protected and Unprotected. Values of Locked or Unknown might indicate a problem.	PROTECTION_STATUS
Last Inventory Generated	Timestamp of when the last DDP\|E client inventory occurred. Not to be confused with K1 inventory.	PROTECTION_STATUS_UPDATED

Table 13. DDP|E Volume information displayed on the Device Detail page
Item	Description	MACHINE_DDPE_VOLUME Database field
Device	Name of the device/volume as reported by the operating system.	DEVICE_ID
Protection Status	Indication of the current level/status of DDP\|E protection on the DDP\|E client.	PROTECTION_STATUS
Protection Reason	Manner of protection used on the DDP\|E client. The option is typically VendorProtected, which indicates DDP\|E or BitLocker.	PROTECTION_REASON

BitLocker

BitLocker is a full disk encryption feature included with Windows.

Table 14. Supported OSs for BitLocker
Operating system	Versions
Windows	Vista, 7 (Enterprise and Ultimate)
Windows	8, 8.1 (Pro and Enterprise)
Windows server	2008, 2008 R2, 2012, 2012 R2

Table 15. BitLocker information displayed on the Device Detail page

Item

Description

MACHINE_BITLOCKER_VOLUME

Database field

Device ID

Unique identifier for the volume on the system.

DEVICE_ID

Persistent Volume ID

A persistent identifier for the volume on the system.

PERSISTENT_VOLUME_ID

Protection status

Denotes whether BitLocker is protecting the volume.

•

•

•

•

Type of encryption used. For example, AES-128. Possible values:

•

None

•

AES-128 with Diffuser

•

AES-256 with Diffuser

•

•

•

•

SELF_ENCRYPTION_DRIVE

_ENCRYPTION_METHOD (self-encrypting drives only)

ENCRYPTION_METHOD (software-based encryption only)

Hardware Encryption Status

NOTE: The Hardware Encryption Status property is supported on Windows 8 and higher systems.

•

•

•

•

•

HARDWARE_ENCRYPTION_STATUS

•

•

•

Status of the conversion. Possible values:

•

Unknown

•

Fully Decrypted

•

Fully Encrypted

•

Encryption In Progress

•

Decryption In Progress

•

Encryption Paused

•

Decryption Paused

CONVERSION_STATUS

Encryption Percentage

The extent of conversion, shown as a percentage.

ENCRYPTION_PERCENTAGE

Wiping Status

Status of any wiping of free space. Possible values:

•

Unknown

•

Free Space Not Wiped

•

Free Space Wiped

•

Free Space Wiping In Progress

•

Free Space Wiping Paused

WIPING_STATUS

Wiping Percentage

The extent of free space wiping, shown as a percentage.

WIPING_PERCENTAGE

Key Protectors

Key protectors in place. Possible values:

•

Unknown

•

Trusted Platform Module (TPM)

•

•

•

•

•

TPM and PIN and Startup Key

•

Public Key

•

Passphrase

•

TPM Certificate

•

CryptoAPI Next Generation (CNG) Protector

KEY_PROTECTORS

FileVault 2

FileVault 2 is a full disk encryption feature included with Mac OS X.

Table 16. Supported OSs for FileVault 2
Operating system	Versions
Mac OS X	10.8, 10.9, 10.10

Table 17. FileVault 2 information displayed on the Device Detail page
Item	Description	MACHINE_FILEVAULT_VOLUME Database field
Enabled	Indicates if FileVault is enabled.	IS_ENABLED
Personal Recovery Key	Indicates the existence of a Personal Recovery Key.	HAS_PERSONAL_RECOVERY_KEY
Institutional Recovery Key	Indicates the existence of a corporate-provisioned X.509-based asymmetric key pair.	HAS_INSTITUTIONAL_RECOVERY _KEY
Authorized Users	A list of accounts that can unlock the drive in EFI.	AUTHORIZED_USERS
Conversion Status	The status of the encryption process. Examples include Pending Conversion, Converting, Encryption Paused, and Complete.	CONVERSION_STATUS
Conversion Percentage	The extent of conversion, shown as a percentage.	CONVERSION_PERCENTAGE
Encryption Status	Status of the encryption. For example, Locked or Unlocked.	ENCRYPTION_STATUS
Encryption Type	Type of encryption used. For example, AES-XTS.	ENCRYPTION_TYPE
Device	Unique identifier for the volume on the system.	DEVICE_ID
Version		VERSION

Trusted Platform Module (TPM)

TPM is a dedicated microprocessor that secures hardware by integrating cryptographic keys into devices.

Table 18. Supported OSs for TPM
Operating system	Versions
Windows	Vista, 7, 8, 8.1
Windows Server	2008, 2008 R2, 2012, 2012 R2

Table 19. TPM information displayed on the Device Detail page
Item	Description	MACHINE_TPM Database field
Manufacturer	Manufacturer of the TPM chip.	MANUFACTURER_ID_TEXT
Manufacturer Version	Version of the TPM chip.	MANUFACTURER_VERSION
Manufacturer Version Info	Additional version information that is specific to the manufacturer.	MANUFACTURER_VERSION_INFO
Specification Version	The version of the Trusted Computing Group (TCG) specification that the TPM supports.	SPECIFICATION_VERSION
Physical Presence Version	The version of the Physical Presence Interface that the device supports. The Physical Presence Interface is a communication mechanism that runs device operations that require physical presence.	PHYSICAL_PRESENCE_VERSION _INFO
TPM Enabled	Step 1 of TPM initialization.	IS_TPM_ENABLED
TPM Activated	Step 2 of TPM initialization.	IS_TPM_ACTIVATED
TPM Owned	Step 3 of TPM initialization.	IS_TPM_OWNED

Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices

Add the DumpXmlInventory registry key to an Agent-managed Windows device

Add the DumpXmlInventory registry key to an Agentless-managed Windows device

If DumpXmlInventory is absent on a Windows DDP|E client, the appliance cannot get access to the inventory .xml file in order to collect the relevant field information.

Dell Data Protection | Encryption is installed on the Windows device. Go to http://www.dell.com/support/home/us/en/19/product-support/product/dell-data-protection-encryption/drivers.

The procedure for adding the key is different for Agent-managed devices and Agentless-managed devices.

Add the DumpXmlInventory registry key to an Agent-managed Windows device

You must add DumpXmlInventory to a Windows DDP|E client before the appliance can collect field information from that client's inventory.xml file.

For Agent-managed Windows devices, you can use a default offline KScript from the appliance scripting feature to set the "dump inventory" registry key. This key is necessary for the DDP|E agent to write the detailed inventory XML data to the appliance file system.

NOTE: After you set the registry key, the DDP|E service requires a full policy update schedule before the appliance is able to collect inventory.

Go to the Script Detail page for the K1000 Enable Detailed DDPE Inventory (Windows) script.

Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.

On the left navigation bar, click Scripting, then click Scripts.

From the list, select KACE SMA Enable Detailed DDPE Inventory (Windows).

In the Configure tab, specify script settings:

Option	Description
Name	KACE SMA Enable Detailed DDPE Inventory (Windows), the name of this default script.
Enabled	Select this check box to run the script on the target devices. Do not enable a script until you are finished testing it and are ready to run it. Enable the script on a test label before you enable it on all devices.
Type	The script type is Offline KScripts.
Status	Indicates the readiness of the script to be rolled out to the network. Set the status to Production.
Description	Contains the brief description of the actions the default script performs.
Notes	Any additional information you want to provide.

In the Deploy tab specify deployment options:

Option

Description

All Devices

Deploy to all devices. Clear the check box to limit the deployment to specific labels or devices.

Restrict to Labels

Limit deployment to devices that belong to specified labels. To select labels, click Edit, drag labels to the Limit Deployment to window, then click OK.

If you select a label that has a Replication Share or an alternate download location, the appliance copies digital assets from that Replication Share or alternate download location instead of downloading them directly from the appliance.

NOTE: The appliance uses a Replication Share before it uses the KACE Alt Location.

Devices

Limit deployment to one or more devices. To find devices, begin typing in the field.

Operating Systems

The operating systems on which the application runs. Applications are deployed only to devices with the selected operating systems.

Click Manage Operating Systems.

In the Operating Systems dialog box that appears, select the OS versions in the navigation tree, as applicable.

You have an option to select OS versions by their family, product, architecture, release ID, or build version. You can choose a specific build version, or a parent node, as needed. Selecting a parent node in the tree automatically selects the associated child nodes. This behavior allows you to select any future OS versions, as devices are added or upgraded in your managed environment. For example, to select all build current and future versions associated with the Windows 10 x64 architecture, under All > Windows > Windows 10, select x64.

In the Schedule tab, specify run options:

Option

Description

None

Run in combination with an event rather than on a specific date or at a specific time.

Every n hours

Run at a specified interval.

Every day/specific day at HH:MM

Run daily at a specified time, or run on a designated day of the week at a specified time.

Run on the nth of every month/specific month at HH:MM

Run on the same day every month, or a specific month, at the specified time.

Run on the nth weekday of every month/specific month at HH:MM

Run on the specific weekday of every month, or a specific month, at the specified time.

Custom

Run according to a custom schedule.

Use standard 5-field cron format (extended cron format is not supported):

Use the following when specifying values:

•

Spaces ( ): Separate each field with a space.

•

Asterisks (*): Include the entire range of values in a field with an asterisk. For example, an asterisk in the hour field indicates every hour.

•

Commas (,): Separate multiple values in a field with a comma. For example, 0,6 in the day of the week field indicates Sunday and Saturday.

•

Hyphens (-): Indicate a range of values in a field with a hyphen. For example, 1-5 in the day of the week field is equivalent to 1,2,3,4,5, which indicates Monday through Friday.

•

Slashes (/): Specify the intervals at which to repeat an action with a slash. For example, */3 in the hour field is equivalent to 0,3,6,9,12,15,18,21. The asterisk (*) specifies every hour, but /3 restricts this to hours divisible by 3.

Examples:

•

15 * * * * Run 15 minutes after every hour every day

•

0 22 * * * Run at 22:00 every day

•

0 0 1 1,6 * Run at 00:00 on January 1 and June 1

•

30 8,12 * * 1-5 Run weekdays at 08:30 and 12:30

•

0 2 */2 * * Run every other day at 02:00

View Task Schedule

Click to view the task schedule. The Task Schedule dialog box displays a list of scheduled tasks. Click a task to review the task details. For more information, see View task schedules.

Skip the Dependencies and Tasks tab.

Do one of the following:

◦

Click Run Now to immediately push the script to all devices.

Use this option with caution. See Using the Run and Run Now commands.

◦

Click Save.

Add the DumpXmlInventory registry key to an Agentless-managed Windows device

You must add DumpXmlInventory to a Windows DDP|E client before the appliance can collect field information from that client's inventory.xml file.

For an Agentless-managed Windows device, the process requires that you create a new Group Policy Object on a Windows Server 2008 or 2012 device so that you can deploy the registry setting to multiple devices in a domain.

On a Windows Server 2008 or 2012 device, open the Group Policy Management Console.

Right-click Group Policy Objects and click New.

Provide a description name for the new GPO (for instance, Dell Data Protection | Encryption: Inventory Registry Setting) and click OK.

Right-click the new GPO and click Edit.

Browse to Computer Configuration > Preferences > Windows Settings > Registry.

Right-click Registry and select New > Registry Item.

On the General tab, select Update in the Action drop-down menu.

Select HKEY_LOCAL_MACHINE in the Hive drop-down list.

Specify a Key Path of SYSTEM\CurrentControlSet\services\DellMgmtAgent\Parameters.

10.

Specify a Value name of DumpXmlInventory.

11.

Select REG_DWORD in the Value type drop-down list.

12.

Specify 1 in the Value data field.

13.

Select the Hexadecimal option in the Base group, and click OK.

14.

Close the Group Policy Management Editor.

You can now link this new group policy object to a specific domain, Organizational Unit, and so on.

Important:

IMPORTANT: You should test the GPO on a specific computer or set of computers before deploying it to all systems.

製品を選択してください:

サービス向上のために、「Purpose of your Chat（チャットの目的）」を記入してください。

お客様の不具合に推奨されるソリューション

KACE Systems Management Appliance 14.0 Common Documents - KACE Service Desk Administrator Guide

Viewing information about devices enrolled in KACE Cloud MDM

Groups and sections of items in device details

About Dell Data Protection | Encryption (DDP|E) and encryption information in device details

Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices