KACE Asset Management Appliance 7.1

To complete patch downloads, access product information, and interact with Quest Support, firewall, DNS server, and proxy server settings must allow the K1000 appliance to access domains on both port 80 and port 443.

•

Ensure that the K1000 Administrator Console has links to the following websites:

Website	Description
https://kace.influitive.com/users/sign_in	KACEKonnect
https://twitter.com/quest	Twitter®
https://www.facebook.com/questsoftware	Facebook®
http://linkedin.com/	LinkedIn®
http://my.kace.com/inKpadsubscriptioncenter	Quest KACE Inkpad
https://www.quest.com/community/b/en/p/endpoint-management	Quest KACE blog
https://kace.uservoice.com/forums/82699-k1000	Quest KACE Uservoice

Configuring network and security settings

Changing appliance network settings

Configure local routing tables

Configure local web server settings and whitelist hosts

Configure security settings for the appliance

Configure Active Directory as the single sign on method

Configure Quest Identity Broker as the single sign on method

Generate an SSL certificate

Appliance network settings include the hostname, web server name, IP address, and other information required to access the appliance over the network.

Changing appliance network settings

You can change the appliance network settings to meet the needs of your environment any time after the initial configuration.

For virtual and physical versions of the appliance, network settings are initially configured during the first login to the Administrator Console or the Command Line Console. See Changing appliance network settings.

For K1 as a Service, the appliance is preconfigured with a static IP address, subnet mask, and default gateway. For configuration information, see the K1000 as a Service Setup Guide. Go to https://support.quest.com/k1000-as-a-service/release-notes-guides.

Changing appliance network settings requires that you reboot the appliance. Total reboot downtime is one to two minutes, provided that the changes result in a valid configuration.

Go to the appliance Control Panel:

◦

If the Organization component is not enabled on the appliance, log in to the K1000 Administrator Console, http://K1000_hostname/admin, then click Settings.

◦

If the Organization component is enabled on the appliance, log in to the K1000 System Administration Console, http://K1000_hostname/system, or select System in the drop-down list in the top-right corner of the page, then click Settings.

Click Network Settings to display the Network Settings page.

Provide the following information:

Option

Description

DNS Hostname

Enter the hostname of the appliance. The default is k1000.

Web Server Name

Enter the fully-qualified domain name of the appliance. This is the Hostname concatenated with Domain. For example: k1000.example.com. Devices connect to the appliance using this name. Quest recommends that you add a static IP address entry for the appliance to your DNS server. If you use an SSL certificate, the hostname must be fully qualified and it must match the name on the certificate.

Autogenerate Server Name

Select this check box to enable the system to generate the K1000 web server name using this format: Hostname.Domain. For example: k1000.example.com. Clear this check box to enter a custom web server name.

Configure Network Using DHCP

Use DHCP (Dynamic Host Configuration Protocol) to automatically obtain the IP address and other network configuration information for the appliance.

Configure Network Manually

Specify the IP address, domain, subnet mask, default gateway, and DNS settings for the appliance manually.

IP Address

Enter the static IP address of the appliance.

CAUTION: If the IP address is incorrect, you cannot access the appliance through the web interfaces (Administrator Console and User Console). If this happens, open the appliance Command Line Console, and use the konfig login to enter the correct IP address.

Domain

Enter the domain that the appliance is on. For example, example.com.

Subnet Mask

Enter the subnet (network segment) that the appliance is on. The default is 255.255.255.0.

Default Gateway

Enter the network gateway for the appliance.

Primary DNS

Enter the IP address of the primary DNS server the appliance uses to resolve hostnames.

Secondary DNS

(Optional) Enter the IP address of the secondary DNS server the appliance uses to resolve hostnames.

Network Speed

If you are configuring a physical K1000, select the speed of your network. This should match the setting of your LAN switch. If you select Auto-negotiate, the system determines the best value automatically, provided that the LAN switch supports auto-negotiation.

Optional: To set a proxy server, select the Enable Proxy Server in the Proxy Configuration section, then specify proxy server settings:

Option	Description
Type	Enter the proxy type, either HTTP or SOCKS5.
Server	Enter the name of the proxy server.
Port	Enter the port for the proxy server. The default port is 8080.
Enable Basic Proxy Authentication	Select the check box to use the local credentials for accessing the proxy server.
Login	Enter the username for accessing the proxy server.
Password and Confirm Password	Enter the password for accessing the proxy server.

NOTE: The appliance supports proxy servers that use basic, realm-based authentication, requiring usernames and passwords. If your proxy server uses a different kind of authentication, add the appliance’s IP address to the proxy server’s exception list.

Optional: To use an external SMTP server, select Enable SMTP Server in the Email Configuration section, then specify SMTP server options:

Option	Description
Server	Specify the hostname or IP address of an external SMTP server, such as smtp.gmail.com. External SMTP servers must allow anonymous (non-authenticated) outbound email transport. Ensure that your network policies allow the appliance to contact the SMTP server directly. In addition, the mail server must be configured to allow the relaying of email from the appliance without authentication. If you specify an IP address, enclose the address in brackets. For example [10.10.10.10].
Port	Enter the port number to use for the external SMTP server. For standard SMTP, use port 25. For secure SMTP, use port 587.
Login	Enter the username of an account that has access to the external SMTP server, such as your_account_name@gmail.com.
Password and Confirm Password	Enter the password of the specified server account.
Enable Service Desk POP3 Server	Select this check box to use POP3 for Service Desk ticket email. After POP3 is enabled, you can specify the POP3 server settings on Service Desk Queue Detail pages. See Configure ticket queues.