Chat now with support
Chat with Support

KACE Asset Management Appliance 7.1 - Administrator Guide

About the KACE Systems Management Appliance (K1000) Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Using Replication Shares Managing credentials Configuring assets
About the Asset Management component About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations
Setting up License Compliance Managing License Compliance Setting up Service Desk Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Provisioning the K1000 Agent Manually deploying the K1000 Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles
Patching devices and maintaining security
About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Dell devices and updates Maintaining device and appliance security
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the K1000
Appendixes Glossary About us Legal notices

Verifying the status of the NTP service

Verifying the status of the NTP service

When downloading patches using HTTPS, the NTP (Network Time Protocol) service must be running on the K1000 appliance. The NTP service is required because the secure protocol uses the current date stamps from the appliance to ensure certificate validity.

If the NTP service is not running, patch download failures, suggesting invalid certificates, might result.

Make necessary websites accessible to the K1000 appliance

Make necessary websites accessible to the K1000 appliance

To complete patch downloads, access product information, and interact with Quest Support, firewall, DNS server, and proxy server settings must allow the K1000 appliance to access domains on both port 80 and port 443.

•
Ensure that the K1000 Administrator Console has links to the following websites:

Website

Description

https://kace.influitive.com/users/sign_in

KACEKonnect

https://twitter.com/quest

Twitter®

https://www.facebook.com/questsoftware

Facebook®

http://linkedin.com/

LinkedIn®

http://my.kace.com/inKpadsubscriptioncenter

Quest KACE Inkpad

https://www.quest.com/community/b/en/p/endpoint-management

Quest KACE blog

https://kace.uservoice.com/forums/82699-k1000

Quest KACE Uservoice

Configuring network and security settings

Configuring network and security settings

Changing appliance network settings
Configure local routing tables
Configure local web server settings and whitelist hosts
Configure security settings for the appliance
Configure Active Directory as the single sign on method
Configure Quest Identity Broker as the single sign on method
Generate an SSL certificate

Appliance network settings include the hostname, web server name, IP address, and other information required to access the appliance over the network.

Changing appliance network settings

Changing appliance network settings

You can change the appliance network settings to meet the needs of your environment any time after the initial configuration.

For virtual and physical versions of the appliance, network settings are initially configured during the first login to the Administrator Console or the Command Line Console. See Changing appliance network settings.

For K1 as a Service, the appliance is preconfigured with a static IP address, subnet mask, and default gateway. For configuration information, see the K1000 as a Service Setup Guide. Go to https://support.quest.com/k1000-as-a-service/release-notes-guides.

Changing appliance network settings requires that you reboot the appliance. Total reboot downtime is one to two minutes, provided that the changes result in a valid configuration.

1.
Go to the appliance Control Panel:
◦
If the Organization component is not enabled on the appliance, log in to the K1000 Administrator Console, http://K1000_hostname/admin, then click Settings.
◦
If the Organization component is enabled on the appliance, log in to the K1000 System Administration Console, http://K1000_hostname/system, or select System in the drop-down list in the top-right corner of the page, then click Settings.
2.
Click Network Settings to display the Network Settings page.
3.
Provide the following information:

Option

Description

DNS Hostname

Enter the hostname of the appliance. The default is k1000.

Web Server Name

Enter the fully-qualified domain name of the appliance. This is the Hostname concatenated with Domain. For example: k1000.example.com. Devices connect to the appliance using this name. Quest recommends that you add a static IP address entry for the appliance to your DNS server. If you use an SSL certificate, the hostname must be fully qualified and it must match the name on the certificate.

Autogenerate Server Name

Select this check box to enable the system to generate the K1000 web server name using this format: Hostname.Domain. For example: k1000.example.com. Clear this check box to enter a custom web server name.

Configure Network Using DHCP

Use DHCP (Dynamic Host Configuration Protocol) to automatically obtain the IP address and other network configuration information for the appliance.

Configure Network Manually

Specify the IP address, domain, subnet mask, default gateway, and DNS settings for the appliance manually.

IP Address

Enter the static IP address of the appliance.

* 
CAUTION: If the IP address is incorrect, you cannot access the appliance through the web interfaces (Administrator Console and User Console). If this happens, open the appliance Command Line Console, and use the konfig login to enter the correct IP address.

Domain

Enter the domain that the appliance is on. For example, example.com.

Subnet Mask

Enter the subnet (network segment) that the appliance is on. The default is 255.255.255.0.

Default Gateway

Enter the network gateway for the appliance.

Primary DNS

Enter the IP address of the primary DNS server the appliance uses to resolve hostnames.

Secondary DNS

(Optional) Enter the IP address of the secondary DNS server the appliance uses to resolve hostnames.

Network Speed

If you are configuring a physical K1000, select the speed of your network. This should match the setting of your LAN switch. If you select Auto-negotiate, the system determines the best value automatically, provided that the LAN switch supports auto-negotiation.

4.
Optional: To set a proxy server, select the Enable Proxy Server in the Proxy Configuration section, then specify proxy server settings:

Option

Description

Type

Enter the proxy type, either HTTP or SOCKS5.

Server

Enter the name of the proxy server.

Port

Enter the port for the proxy server. The default port is 8080.

Enable Basic Proxy Authentication

Select the check box to use the local credentials for accessing the proxy server.

Login

Enter the username for accessing the proxy server.

Password and Confirm Password

Enter the password for accessing the proxy server.

* 
NOTE: The appliance supports proxy servers that use basic, realm-based authentication, requiring usernames and passwords. If your proxy server uses a different kind of authentication, add the appliance’s IP address to the proxy server’s exception list.
5.
Optional: To use an external SMTP server, select Enable SMTP Server in the Email Configuration section, then specify SMTP server options:

Option

Description

Server

Specify the hostname or IP address of an external SMTP server, such as smtp.gmail.com. External SMTP servers must allow anonymous (non-authenticated) outbound email transport. Ensure that your network policies allow the appliance to contact the SMTP server directly. In addition, the mail server must be configured to allow the relaying of email from the appliance without authentication. If you specify an IP address, enclose the address in brackets. For example [10.10.10.10].

Port

Enter the port number to use for the external SMTP server. For standard SMTP, use port 25. For secure SMTP, use port 587.

Login

Enter the username of an account that has access to the external SMTP server, such as your_account_name@gmail.com.

Password and Confirm Password

Enter the password of the specified server account.

Enable Service Desk POP3 Server

Select this check box to use POP3 for Service Desk ticket email. After POP3 is enabled, you can specify the POP3 server settings on Service Desk Queue Detail pages. See Configure ticket queues.

6.
To test the email service, use the email sending test in Diagnostic Utilities.
7.
Click Save.
The appliance reboots. Total reboot downtime is one to two minutes, provided that the changes result in a valid configuration.
8.
If you changed the appliance IP address, go to the new address to display the Administrator Console login page.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating