지금 지원 담당자와 채팅
지원 담당자와 채팅

KACE Systems Management Appliance 14.0 Common Documents - KACE Service Desk Administrator Guide

About the KACE Service Desk Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Managing user notifications Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings Configuring Content Security Policy
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Deploying the KACE Agent to managed devices Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Registering KACE Agent with the appliance Provisioning the KACE Agent Manually deploying the KACE Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Using Task Chains
Patching devices and maintaining security
Using the Security Dashboard About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Windows Feature Updates Managing Dell devices and updates Managing Linux package upgrades Manage quarantined file attachments
Using reports and scheduling notifications Monitoring devices
Getting started with monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the appliance
Appendixes Glossary About us Legal notices

Create Managed Installations for RPM files

Create Managed Installations for RPM files

You can create Managed Installations to deploy software on Linux-based devices using RPM files.

To distribute applications to managed devices, you must attach the digital assets, which are the files required for installation, to applications. In addition, you must select the supported operating systems for applications. See Attach digital assets to applications and select supported operating systems.

1.
Go to the Managed Installation Detail page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Distribution, then click Managed Installations.
c.
Select Choose Action > New.
2.
In the Software drop-down list, select a software title. To search for a title, begin typing in the Software field.

rpm -U packagename.rpm

If you select a ZIP, TGZ, or TAR.GZ file, the content is unpacked, and the root directory is searched for all RPM files. The installation command runs against each of these files. The appliance finds all RPM files at the top level of an archive automatically, so you can install more than one package at a time. You can also create an archive containing a shell script and then specify that script name as the full command. The appliance runs that command if it is found; otherwise, the appliance logs an error.

Default parameters are used unless you specify parameters in the Run Parameters field.

You can specify wildcards in the filenames you use. If the filename contains spaces, enclose it in single or double quotation marks. The files are extracted into a directory in /tmp and it becomes the current working directory of the command.

If the path environment variable of your root account does not include the current working directory, and you want to run a shell script or other executable that you have included inside an archive, specify the relative path to the executable in the Full Command Line field. The command runs inside a directory alongside the files that have been extracted.

For example, to run a shell script called installThis.sh, package it alongside an RPM file, and then enter the command: ./installThis.sh in the Installation Command field. If you archive it inside another directory, the Installation Command field is:

./dir/filename.sh

Both these examples, as well as some other appliance functions, assume that sh is in the root's path. If you are using another scripting language, you might need to specify the full path to the command processor you want to run in the installation command, such as:

/bin/sh ./filename.sh

Include appropriate arguments for an unattended, batch script.

If you select the uninstall check box in the MI detail, the KACE Agent runs the following command on either your standalone RPM file or each RPM file it finds in the archive, removing the packages automatically:

//usr/sbin/rpm -e packagename.rpm

The package is removed only if the archive or package has been downloaded to the device. If you select the Uninstall Using Full Command Line check box, specify a full command line in the Installation Command field to ensure the correct removal command runs on the correct package. Because no package is downloaded in this case, specify the path in the installation database where the package receipt is stored.

Option

Description

Name

A name that identifies the Managed Installation. This name appears on the Managed Installations page.

Execution

Select the most appropriate time for this package to be deployed. For the Linux platform, the options are Anytime (next available) and Disabled.

Inventory

Indicate if you want to deploy the software title from Cataloged Software or all Software by selecting one of these options.

To search for a specific title, begin typing in the Software or Cataloged Software field.
NOTE: Reclaiming unused software licenses only. The name of the software that you want to uninstall appears in this field by default. For more information, see Reclaim unused software licenses.

Associated File

A Software and Cataloged Software title can have one or more files attached to them, as needed. Indicate if you want to select a specific file associated with the selected software title.

Choose associated file: Select this option if you want to associate a file. You can select a file in the list. If you know the file name, start typing it in the box, and select it from the available entries in the list.
Do not associate file: Select this option if you do not want to associate a file.

Alternate Location

Specify a location from which files can be downloaded for a specific Managed Installation.

Path: Enter the location where the KACE Agent can retrieve digital installation files.

Checksum: Enter an alternate checksum (MD5) that matches the MD5 checksum on the remote file share. If no checksum is entered, the digital asset on the file share must match the digital asset associated with the deployment package on the appliance. Also, the target path must include the complete filename (for example,\\fileserver_one\software\adobe.exe). You can create the checksum using any tool, including KDeploy.exe, which is installed with the KACE Agent.

To create the checksum using KDeploy.exe:

Windows 32-bit devices: C:\Program Files\Quest\KACE

Windows 64-bit devices: C:\Program Files (x86)\Quest\KACE

Mac OS X devices: /Library/Application Support/Quest/KACE/bin

3.
Enter the following command: KDeploy -hash=filename

Where filename is the UNC path to the file. If the path contains spaces, enclose the entire path in double quotation marks.

4.
Press Ctrl C or Command C to copy the MD5 checksum. You can then paste it into other files, such as Notepad.

Credential: The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add credential to add credentials not already listed. See Add and edit User/Password credentials.

See Distributing packages from alternate download locations and Replication Shares and Add or edit manual labels.

Installation Command

Installation command options.

Default Installation

Select this option if you have an RPM file and you want the appliance to run the default installation command. Linux devices use: rpm [-U | Run Parameters] "packagename.tgz"

Additional Parameters: (Optional) If you select Use Default, specify the parameters to use. Additional parameters are not required if you have an RPM file.

Enter a value to override (Default -U default).

For example, if you set Run Parameters to: -ivh --replacepkgs, then the command that runs on the device is:

rpm -ivh –replacepkgs package.rpm

Override Default Installation

Select this option to specify the complete command line here. If you are using an archive file, this command runs against all of the RPM files it finds.

Uninstall

Remove the package from the device using the command line. If you specified a command in the Full Command Line field, the command runs. Otherwise, the KACE Agent attempts to run the command, which is generally expected to remove the package.

Run Command Only (do not download file)

Run the command only. This does not download the actual digital asset.

Delete Downloaded Files

Delete the files when the deployment is complete.

ITNinja

Deployment tips from ITNinja. These tips are available only if you share usage data. See Configure data sharing preferences.

Option

Description

All Devices

Deploy to all devices. Clear the check box to limit the deployment to specific labels or devices.

Restrict to Labels

Limit deployment to devices that belong to specified labels. To select labels, click Edit, drag labels to the Limit Deployment to window, then click Save.

If you select a label that has a Replication Share or an alternate download location, the appliance copies digital assets from that Replication Share or alternate download location instead of downloading them directly from the appliance.

Devices

Limit deployment to specific devices. In the drop-down list, select the devices to which you want to deploy the application. To filter the list, type a few characters in the Devices field. The number next to the field indicates the number of devices available.

NOTE: Reclaiming unused software licenses only. Any devices from which you want to remove the applicable software are listed. You can edit the list of devices, as needed. To remove the software from all devices, simply select , as described above. For more information, see Reclaim unused software licenses.

Option

Description

Alert user before run

Display a message on managed devices before installation. When you select this option, the following fields appear:

Message: The message that appears on managed devices before installation begins. It starts with snooze options that allow the user to run the managed install at a later time.
Timeout: The length of time, in minutes, during which the message appears.
Action: The action that takes place at the end of the Initial Message Timeout period. Options include Install later or Install now. Select Install now to install the application immediately, or select Install later to postpone the installation until a user responds. Install later is useful when you want to notify users of an installation or reboot before it occurs.

Initial Message

Display a message on managed devices before installation. When you select this option, the following fields appear:

Message: The message that appears on managed devices before installation begins.
Timeout: The length of time, in minutes, during which the message appears.
Action: The action that takes place at the end of the Initial Message Timeout period. Options include Install later or Install now. Select Install now to install the application immediately, or select Install later to postpone the installation until a user responds. Install later is useful when you want to notify users of an installation or reboot before it occurs.

Completion Message

Display a message on managed devices after the installation is complete. When you select this option, the following fields appear:

Message: The message that appears on managed devices when the installation is complete.
Timeout: The length of time, in minutes, during which the message appears.

Option

Description

Deployment Window

Start

End

The time, in 24-hour clock format, for package deployment to start and end. The Deployment Window time affects all Action options. Also, the run intervals defined in the appliance Settings interact with or override the deployment window of specific packages.

Order

The order in which to install or uninstall applications. The lowest value is deployed first. If an install action and an uninstall action both have the same order value, the uninstall action is performed first.

Maximum Attempts

The maximum number of attempts, between 0 and 99, to indicate the number of times the appliance tries to install the package. If you specify 0, the appliance attempts to install the package indefinitely.

7.
Click Save.

Create Managed Installations for TAR.GZ files

Create Managed Installations for TAR.GZ files

Deploying software using a TAR.GZ file is a convenient way to package software when more than one file is required to deploy a particular software title.

For example, some applications require several files, such as RPM, configuration, and data files, for deployment. You can package these files together in a TAR.GZ file, upload them to your appliance, and create Managed Installations that use the TAR.GZ files.

To distribute applications to managed devices, you must attach the digital assets, which are the files required for installation, to applications. In addition, you must select the supported operating systems for applications. See Attach digital assets to applications and select supported operating systems.

a.
tar –cvf filename.tar packagename.rpm
b.
gzip filename.tar

This creates filename.tar.gz

2.
Log in to the appliance Administrator Console.
3.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.

You can do this manually from the Inventory > Software page, or by installing the package on a managed device that regularly connects to the appliance. See About the Software page.

a.
On the left navigation bar, click Distribution, then click Managed Installations.
b.
Select Choose Action > New.

If no Additional Parameters are provided, -U is used.

You do not need to specify a full command line. The appliance runs the installation command by itself. The Linux device tries to install using:

rpm [-U | Run Parameters] "packagename.tgz"

d.
Optional: If you have many files, create a ZIP archive that contains them, then direct the appliance to unpack the archive and run a specific file.
e.
Click Save.

The KACE Agent automatically runs deployment packages with RPM extensions.

Create Managed Installations for macOS X devices

Create Managed Installations for macOS X devices

You can create Managed Installations for macOS X devices as needed.

To distribute applications to managed devices, you must attach the digital assets, which are the files required for installation, to the application. In addition, you must select the supported operating systems for the application. See Attach digital assets to applications and select supported operating systems.

1.
Go to the Managed Installation Detail page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Distribution, then click Managed Installations.
c.
Select Choose Action > New.
2.
Select the application in the Software drop-down list.

If you have selected a DMG, ZIP, or TGZ, the contents are unpacked and the root directory is searched for all PKG files. The installation command runs against each of these PKG files and processes them in alphabetical order.

Next, the appliance searches for all plain applications (APP) on the top level of the archive and copies them to the Applications folder using the following command:

To run a script or change any of these command lines, you can specify the appropriate script invocation as the Full Command Line. You can specify wildcards in the filenames you use. Enclose the filename in single or double quotation marks if it contains spaces. The files are extracted into a directory in /tmp, and that becomes the current working directory of the command.
Tip:
 

Option

Description

Name

A name that identifies the Managed Installation. This name appears on the Managed Installations page.

Execution

The package deployment setting. Options include:

Disabled: Do not deploy the package.
Anytime: Deploy the package at the next opportunity, such as the next time the KACE Agent reports inventory information to the appliance.
At bootup: Deploy the package the next time the device starts up.
After login: Deploy the package after the user logs in but before the desktop loads.
With user logged in: Deploy the package while the user is logged on.
With user logged off: Deploy the package only when the device is running and the user is logged off.

Inventory

Indicate if you want to deploy the software title from Cataloged Software or all Software by selecting one of these options.

To search for a specific title, begin typing in the Software or Cataloged Software field.
NOTE: Reclaiming unused software licenses only. The name of the software that you want to uninstall appears in this field by default. For more information, see Reclaim unused software licenses.

Associated File

A Software and Cataloged Software title can have one or more files attached to them, as needed. Indicate if you want to select a specific file associated with the selected software title.

Choose associated file: Select this option if you want to associate a file. You can select a file in the list. If you know the file name, start typing it in the box, and select it from the available entries in the list.
Do not associate file: Select this option if you do not want to associate a file.

Alternate Location

Specify a location from which files can be downloaded for a specific Managed Installation.

Path: Enter the location where the KACE Agent can retrieve digital installation files.

Checksum: Enter an alternate checksum (MD5) that matches the MD5 checksum on the remote file share. If no checksum is entered, the digital asset on the file share must match the digital asset associated with the deployment package on the appliance. Also, the target path must include the complete filename (for example, \\fileserver_one\software\adobe.exe). You can create the checksum using any tool, including KDeploy.exe, which is installed with the KACE Agent.

To create the checksum using KDeploy.exe:

Windows 32-bit devices: C:\Program Files\Quest\KACE

Windows 64-bit devices: C:\Program Files (x86)\Quest\KACE

Mac OS X devices: /Library/Application Support/Quest/KACE/bin

3.
Enter the following command: KDeploy -hash=filename

Where filename is the UNC path to the file. If the path contains spaces, enclose the entire path in double quotation marks.

4.
Press Ctrl C or Command C to copy the MD5 checksum. You can then paste it into other files, such as Notepad.

Credential: The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add credential to add credentials not already listed. See Add and edit User/Password credentials.

See Distributing packages from alternate download locations and Replication Shares and Add or edit manual labels.

Default Installation

You do not need to specify an installation command. The server runs the installation command by itself. The Mac OS X device tries to install the package using this command:

installer -pkg packagename.pkg -target / [Run Parameters]

or

ditto -rsrc packagename.app /Applications/theapp

If you have specified an archive file, this command runs against all of the PKG files or APP files it can find.

Override Default Installation

Specify the full command-line parameters. See the MSI Command Line documentation for available runtime options.

Uninstall: Uninstall the application from the command line.
Run Command Only (do not download file): Run the command line only.
Don’t Prepend msiexec.exe: Prevent the appliance from adding msiexec.exe to the beginning of the file.

Delete Downloaded Files

Delete the files when the deployment is complete.

ITNinja

Deployment tips from ITNinja. These tips are available only if you share usage data. See Configure data sharing preferences.

Option

Description

All Devices

Deploy to all devices. Clear the check box to limit the deployment to specific labels or devices.

Restrict to Labels

Limit deployment to devices that belong to specified labels. To select labels, click Edit, drag labels to the Limit Deployment to window, then click Save.

If you select a label that has a Replication Share or an alternate download location, the appliance copies digital assets from that Replication Share or alternate download location instead of downloading them directly from the appliance.

Devices

Limit deployment to specific devices. In the drop-down list, select the devices to which you want to deploy the application. To filter the list, type a few characters in the Devices field. The number next to the field indicates the number of devices available.

NOTE: Reclaiming unused software licenses only. Any devices from which you want to remove the applicable software are listed. You can edit the list of devices, as needed. To remove the software from all devices, simply select , as described above. For more information, see Reclaim unused software licenses.

Option

Description

Deployment Window

Start

End

The time, in 24-hour clock format, for package deployment to start and end. The Deployment Window time affects all Action options. Also, the run intervals defined in the appliance Settings interact with or override the deployment window of specific packages.

Order

The order in which to install or uninstall applications. The lowest value is deployed first. If an install action and an uninstall action both have the same order value, the uninstall action is performed first.

Maximum Attempts

The maximum number of attempts, between 0 and 99, to indicate the number of times the appliance tries to install the package. If you specify 0, the appliance attempts to install the package indefinitely.

6.
Click Save.

For more information, see:

Create and use File Synchronization

Create and use File Synchronization

Using File Synchronization, you can push out any type of file to Agent-managed devices.

File Synchronization enable you to distribute files to managed devices. Unlike Managed Installations, however, File Synchronization do not install files; they simply distribute files. Use File Synchronization to copy files of any type to managed devices.

The string KACE_ALT_Location in the Alternate Location field is replaced with the value assigned by the corresponding label. You should not have a device in more than one label with an Alternate Location specified.

1.
Go to the File Synchronizations list:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Distribution, then click File Synchronizations.
c.
Select Choose Action > New.
2.
In the Configure section, provide the following information:

Option

Description

Persist

Confirm that the file does not already exist on target devices before attempting to distribute it.

Delete Temporary Files

Delete the files when the deployment is complete.

Name

A name that identifies the File Synchronization. This name appears on the File Synchronizations page.

Path

The directory location, on target devices, to which you want to save the file.

Create Path

Create the location specified in the Path field if it does not already exist.

Credentials

The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add credential to add credentials not already listed. See Add and edit User/Password credentials.

File

The file to be distributed to target devices. To appear on the list, applications must have associated files in inventory. See Attach digital assets to applications and select supported operating systems.

Do Not Uncompress Distribution

Prevent the appliance from uncompressing files.

Enabled

Enable the File Synchronization. When the KACE Agents on selected devices check into the appliance, the file is distributed.

Create Shortcut

Create a desktop shortcut to the file location on the device.

Name

The display name for the desktop shortcut.

ITNinja

Deployment tips from ITNinja. These tips are available only if you share usage data. See Configure data sharing preferences.

Alternate Location

Specify a location from which files can be downloaded for a specific Managed Installation.

Path: Enter the location where the KACE Agent can retrieve digital installation files.

Checksum: Enter an alternate checksum (MD5) that matches the MD5 checksum on the remote file share. If no checksum is entered, the digital asset on the file share must match the digital asset associated with the deployment package on the appliance. Also, the target path must include the complete filename (for example, \\fileserver_one\software\adobe.exe). You can create the checksum using any tool, including KDeploy.exe, which is installed with the KACE Agent.

To create the checksum using KDeploy.exe:

Windows 32-bit devices: C:\Program Files\Quest\KACE

Windows 64-bit devices: C:\Program Files (x86)\Quest\KACE

Mac OS X devices: /Library/Application Support/Quest/KACE/bin

3.
Enter the following command: KDeploy -hash=filename

Where filename is the UNC path to the file. If the path contains spaces, enclose the entire path in double quotation marks.

4.
Press Ctrl C or Command C to copy the MD5 checksum. You can then paste it into other files, such as Notepad.

Credential: The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add credential to add credentials not already listed. See Add and edit User/Password credentials.

See Distributing packages from alternate download locations and Replication Shares and Add or edit manual labels.

Option

Description

All Devices

Deploy to all devices. Clear the check box to limit the deployment to specific labels or devices.

Restrict to Labels

Limit deployment to devices that belong to specified labels. To select labels, click Edit, drag labels to the Limit Deployment to window, then click Save.

If you select a label that has a Replication Share or an alternate download location, the appliance copies digital assets from that Replication Share or alternate download location instead of downloading them directly from the appliance.

Devices

Limit deployment to specific devices. In the drop-down list, select the devices to which you want to deploy the application. To filter the list, type a few characters in the Devices field. The number next to the field indicates the number of devices available.

Blackout Window

The time during which Agents on managed devices are prevented from performing File Synchronizations.

Option

Description

Initial Message

Display a message on devices before installation.

Completion Message

Display a message on devices after the installation is complete.

5.
Click Save.
Tip:
 
TIP: To distribute files previously deployed after the deployment window has closed, go to the File Synchronization Detail page for the File Synchronization, then click Save and Resend Files at the bottom of the page.
관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택