Chat now with support
Chat with Support

KACE as a Service 7.1 - Administrator Guide

About the KACE Systems Management Appliance (K1000) Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Using Replication Shares Managing credentials Configuring assets
About the Asset Management component About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations
Setting up License Compliance Managing License Compliance Setting up Service Desk Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Provisioning the K1000 Agent Manually deploying the K1000 Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles
Patching devices and maintaining security
About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Dell devices and updates Maintaining device and appliance security
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the K1000
Appendixes Glossary About us Legal notices

Select patch download settings

Select patch download settings

The patches you subscribe to are downloaded to the appliance according to the settings you choose.

Be aware that the first patch download might use a large amount of network bandwidth.

1.
Go to the Patch Download settings.
◦
If the Organization component is not enabled on the appliance, on the left navigation bar click Security.
◦
If the Organization component is enabled on the appliance, log in to the K1000 System Administration Console, http://K1000_hostname/system, or select System in the drop-down list in the top-right corner of the page, then click Settings.
2.
Click Patch Download Settings.
3.
In the Configure section, select the following options.

Option

Description

Disabled

Prevent the downloading of patch packages. This prevention includes the installers that are required to install the patches.

All subscribed files

Maintain a full cache of subscribed packages on your K1000 appliance. This option downloads all deployment packages to which you subscribe, without checking to determine whether they are required for your environment.

It is important for some environments to maintain a full cache. For example, if you select the Offline Target or Online Source option, full caching is required.

Files detected as missing

Allow the appliance to determine which packages to download based on the results of Detect jobs. If a patch detection signature has been detected as Not Patched on any managed device, the patch package is downloaded. If no managed devices are detected as Not Patched, no packages for this patch are downloaded.

Delete unused files after __ days

Delete patches that have not been deployed in the specified number of days. Patches that are marked as Inactive or Disabled are automatically deleted during the patch download process.

Offline Update

The action to take if the appliance is offline when the update process is scheduled to start. Clear the Offline Update option if the appliance is expected to be connected to the internet and can download patches directly.

Offline Target

The Offline Target to use if the appliance is not connected to the internet, and you want to upload the patch files from a local directory. If you have a K1000 appliance that is connected to the internet, you can configure that appliance as an Offline Source. Then you can manually copy the patch files from the Offline Source Patches file share to the following directory on the Offline Target: \\k1000_host\patches.

Click Upload to load patch TAR files.

Online Source

Whether the appliance is used as a source for a different appliance. When this option is selected, patch files are downloaded to the K1000 appliance’s Patches file share.

4.
Select schedule options for patch signatures in the Schedule section. Patch signatures include the security bulletins and other files that define patches downloaded from Lumension.

Option

Description

None

Prevent the downloading of patch signatures.

Every __ hours

Download signatures at a specified interval. Use caution when specifying frequent intervals (4, 8 or 12 hours), because this can increase bandwidth requirements.

Every day at the specified time

Select day to download patch detection signatures every day, or select a day of the week to download once a week.

Select the time to start the download. Time is displayed in 24-hour clock format, where 0 is midnight, 1:00 a.m. is 1 and 11:00 p.m. is 23.

* 
NOTE: When setting up patch downloads, timing is important. The appliance activity log is created at 1:30, and maintenance tasks occur between 01:00 and 01:30. Quest recommends that you schedule patch downloads to occur after the log and maintenance tasks are complete, which is about 3:00.

On the nth of every month or on a specific month at HH:MM

Select the day of the month to download patch detection signatures on a monthly basis.

5.
Set the schedule options for patch files:

Option

Description

After signature download

Download packages after the signatures have been downloaded. This option is not available if package download is disabled in the Patch Download Options section.

Every __ minutes

Specify the frequency with which signatures and packages are downloaded. This option is available only if Patches detected as missing in the Patch Download Options section is selected.

Download Blackout: Start __ End __

Specify a time period during which patch detection signatures cannot be downloaded. For example, use an early morning stop time to prevent the process from using a large amount of network bandwidth during regular working hours.

If you select this option, the appliance stops patch downloads at the specified time. It does not start patch downloads again until the next specified patch download time. When the download resumes, it starts up where it left off. Downloads that are incomplete might not appear on the Patch Catalog page.

6.
Click Save.
7.
To immediately download the patches to which you have subscribed, regardless of the schedule, click Run Now.
8.
To immediately remove all patches from the appliance, click Delete. This can be useful if you no longer need any patches and you want to quickly reclaim the disk space that they used.

To schedule patch detection and deployment for managed devices, see Creating and managing patch schedules.

Viewing available patches and download status

Viewing available patches and download status

View available patches
View patch download status

You can review the available patches and set appropriate patch download filters to download only the patches you need.

For example, once the patch packages are downloaded, you can set a filter to view patches based on category; view Operating System patches only.

View available patches

View available patches

After you have subscribed to patches, and the patches have been downloaded, you can view available patches.

You must subscribe to patch detection signatures and select patch download settings to view patches. See:

•
Subscribe to patches
•
Select patch download settings
1.
Go to the Patch Catalog list:
a.
Log in to the K1000 Administrator Console, http://K1000_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security.
c.
On the Patch Management panel, click Catalog.
2.
Search for application patches.
a.
Click the Advanced Search tab above the list on the right to display the Advanced Search panel.
b.
Enter search criteria:
Patch Listing Information: Category | is | Application
c.
Click Search.

View patch download status

View patch download status

After you have subscribed to patches, you can view patch download status.

You must subscribe to patches to view patch download status. See Subscribe to patches.

1.
Go to the Patch Catalog list:
a.
Log in to the K1000 Administrator Console, http://K1000_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security.
c.
On the Patch Management panel, click Catalog.
2.
Do one of the following:
◦
In the View By drop-down list, which appears above the table on the right, select Download Status > Downloaded or Download Status > Not Downloaded.
◦
Click the Advanced Search tab, which appears above the table on the right, then select search criteria. For example:

Patch Listing Information: Download Status | is | Downloaded

See Viewing patch information.

Related Documents