About Diagnostic Console Two-Factor Authentication

About Diagnostic Console Two-Factor Authentication

Diagnostic Console Two-Factor Authentication (2FA) allows you to control access to the appliance back-end. When you enable SSH access to the appliance and create a tether, the Quest Support team can log in to the back-end of the appliance using the appliance root password together with an access token. Tokens are provided in the Initial Setup Wizard. They can be viewed and regenerated using the Diagnostic Console Two-Factor Authentication page in the appliance System Console. Each token can only be used once and must be given to the Quest Support contact before they can log in to the appliance through the tether or the console.

To navigate to this page, log in to the appliance System Console. On the left navigation bar, under Settings, click Support, and on the Support page, under Troubleshooting Tools, click Diagnostic Console Two-Factor Authentication.

The security key and offline tokens that are provided with the appliance during the initial setup should be recorded and stored in secure location, not on the appliance machine. You may be required to provide this information to Support, when needed.

After upgrading from an earlier version, if a message appears indicating that Diagnostic Console Two-Factor Authentication is disabled, and you want to enable it for enhanced security, follow the instructions in the message to enable it.

Appendixes

Appendixes

Database table names

Database table names can be used in reports and other database queries.

The following tables list the current database table names and the table names that have changed between the 6.3 and 6.4 versions of the appliance:

Organization-level (ORG1) database tables

The following table lists organization-level (ORG1) database table names. Reference these table names when creating custom reports using SQL queries. See Create reports using SQL queries.

System-level (KBSYS) database tables

The following table shows the System-level (KBSYS) database table names. Reference these table names when creating custom reports using SQL queries. See Create reports using SQL queries.

Database table names

Appendixes

Database table names

Database table names can be used in reports and other database queries.

The following tables list the current database table names and the table names that have changed between the 6.3 and 6.4 versions of the appliance:

Organization-level (ORG1) database tables

The following table lists organization-level (ORG1) database table names. Reference these table names when creating custom reports using SQL queries. See Create reports using SQL queries.

System-level (KBSYS) database tables

The following table shows the System-level (KBSYS) database table names. Reference these table names when creating custom reports using SQL queries. See Create reports using SQL queries.

Adding steps to task sections of scripts

Adding steps to task sections of scripts

You can add steps to scripts in the Scripting component.

The following tables detail the steps that can be added to the task sections of scripts. Task sections are available on the Script Detail page when you add a task. See Adding and editing scripts.

The column headings V, OS, R, ORS, and ORF indicate whether a particular step is available in the corresponding task sections: Verify, On Success, Remediation, On Remediation Success, and On Remediation Failure.

Steps for Windows devices

NOTE: For the syntax to use when specifying registry paths, see Specifying Windows registry paths.

Table 38. Adding steps to scripts used on Windows devices

Step	Description	V	OS	R	ORS	ORF
Always fail		X		X
Call a custom DLL function	Call function "%{procName}" from "%{path}\%{file}".	X	X	X
Create a custom DLL object	Create object "%{className}" from "%{path}\%{file}".	X	X	X
Create a message window	Create a message window named "%{name}" with title "%{title}", message "%{message}" and timeout "%{timeout}" seconds.	X	X	X	X	X
Delete a registry key	Delete "%{key}" from the registry. See Specifying Windows registry paths.		X	X
Delete a registry value	Delete "%{key}!%{name}" from the registry. See Specifying Windows registry paths.		X	X
Destroy a message window	Destroy the message window named "%{name}".	X	X	X	X	X
Install an application package	Install "%{name}" with arguments "%{install_cmd}".   NOTE: This step requires you to choose from a list of application packages already uploaded using the functionality in the Inventory > Software page. See Adding and deleting applications in Software page inventory.		X	X
Stop a process	Stop the process "%{name}".	X	X	X	X	X
Launch a program	Launch "%{path}\%{program}" with params "%{parms}".	X	X	X	X	X
Log a registry value	Log "%{key}!%{name}".			X
Log file information	Log "%{attrib}" from ""%{path}\%{file}".			X	X	X
Log message	Log "%{message}" to "%{type}".			X
Restart a service	Restart service "%{name}"			X
Run a batch file	Run the batch file "%{_fake_name}" with params "%{parms}".   NOTE: In this step, you do not need to upload the batch file. You create the batch file by pasting the script in the space provided.	X	X	X
Set a registry key	Set "%{key}".	X	X
Set a registry value	Set "%{key}!%{name}" to "%{newValue}".	X	X
Start a service	Restart service "%{name}".			X
Stop a service	Stop service "%{name}"			X
Unzip a file	Unzip "%{path}\%{file}" to "%{target}".	X		X	X	X
Update message window text	Set the text in the message window named "%{name}" to "%{text}".	X		X	X	X
Update policy and job schedule	Update policy and job schedule from the appliance.	X
Upload a file	Upload "%{path}\%{file}" to the server.		X	X
Verify a directory exists	Verify that the directory "%{path}" exists.	X
Verify a file exists	Verify that the file "%{path}\%{file}" exists.	X
Verify a file version is exactly	Verify that the file "%{path}\%{file}" has version "%{expectedValue}".	X
Verify a file version is greater than	Verify that the file "%{path}\%{file}" has version greater than "%{expectedValue}".	X
Verify a file version is greater than or equal to	Verify that the file "%{path}\%{file}" has version greater than or equal to "%{expectedValue}".	X
Verify a file version is less than	Verify that the file "%{path}\%{file}" has version less than "%{expectedValue}".	X
Verify a file version is less than or equal to	Verify that the file "%{path}\%{file}" has version less than or equal to "%{expectedValue}.	X
Verify a file version is not	Verify that the file "%{path}\%{file}" does not have version "%{expectedValue}".	X
Verify a file was modified since	Verify that the file "%{path}\%{file}" was modified since "%{expectedValue}".	X
Verify a process is not running	Verify the process "%{name}" is not running.	X
Verify a process is running	Verify the process "%{name}" is running.	X
Verify a product version is exactly	Verify that the product "%{path}\%{file}" has version "%{expectedValue}".	X
Verify a product version is greater than	Verify that the product "%{path}\%{file}" has version greater than "%{expectedValue}".	X
Verify a product version is greater than or equal to	Verify that the product "%{path}\%{file}" has version greater than or equal to "%{expected-Value}".	X
Verify a product version is less than	Verify that the product "%{path}\%{file}" has version less than "%{expectedValue}".	X
Verify a product version is less than or equal to	Verify that the product "%{path}\%{file}" has version less than or equal to "%{expectedValue}".	X
Verify a product version is not	Verify that the product "%{path}\%{file}" does not have version "%{expectedValue}".	X
NOTE: For the syntax to use when specifying registry paths, see Specifying Windows registry paths.
Verify a registry key does not exist	Verify that "%{key}" does not exist.	X
Verify a registry key exists	Verify that "%{key}" exists.	X
Verify a registry key’s subkey count is exactly	Verify that "%{key}" has exactly "%{expectedValue}" subkeys.	X
Verify a registry key’s subkey count is greater than	Verify that "%{key}" has greater than "%{expectedValue}" subkeys.	X
Verify a registry key’s subkey count is greater than or equal to	Verify that "%{key}" has greater than or equal to "%{expectedValue}" subkeys.	X
Verify a registry key’s subkey count is less than	Verify that "%{key}" has less than "%{expectedValue}" subkeys.	X
Verify a registry key’s subkey count is less than or equal to	Verify that "%{key}" has less than or equal to "%{expectedValue}" subkeys.	X
Verify a registry key’s subkey count is not	Verify that "%{key}" does not have exactly "%{expectedValue}" subkeys.	X
Verify a registry key’s value count is exactly	Verify that "%{key}" has exactly "%{expectedValue}" values.	X
Verify a registry key’s value count is greater than	Verify that "%{key}" has greater than "%{expectedValue}" values.	X
Verify a registry key’s value count is greater than or equal to	Verify that "%{key}" has greater than or equal to "%{expectedValue}" values.	X
Verify a registry key’s value count is less than	Verify that "%{key}" has less than "%{expectedValue}" values.	X
Verify a registry key’s value count is less than or equal to	Verify that "%{key}" has less than or equal to "%{expectedValue}" values.	X
Verify a registry key’s value count is not	Verify that "%{key}" does not have exactly "%{expectedValue}" values.	X
Verify a registry pattern doesn’t match	Verify that "%{key}!%{name}=%{expectedValue}" doesn't match.	X
Verify a registry pattern match	Verify that "%{key}!%{name}=%{expectedValue}" matches.	X
Verify a registry value does not exist	Verify that "%{key}!%{name}" does not exist.	X
Verify a registry value exists	Verify that "%{key}!%{name}" exists.	X
Verify a registry value is exactly	Verify that "%{key}!%{name}" is equal to "%{expectedValue}".	X
Verify a registry value is greater than	Verify that "%{key}!%{name}" is greater than "%{expectedValue}".	X
Verify a registry value is greater than or equal to	Verify that "%{key}!%{name}" is greater than or equal to "%{expectedValue}" .	X
Verify a registry value is less than	Verify that "%{key}!%{name}" is less than "%{expectedValue}".	X
Verify a registry value is less than or equal to	Verify that "%{key}!%{name}" is less than or equal to "%{expectedValue}".	X
Verify a registry value is not	Verify that "%{key}!%{name}" is not equal to "%{expectedValue}".	X
Verify a service exists	Verify the service "%{name}" exists.	X
Verify a service is running	Verify the service "%{name}" is running.	X