KACE Asset Management Appliance 7.1

Log in to the K1000 Administrator Console, http://K1000_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.

On the left navigation bar, click Inventory, then click Discovery Results.

Select the check box next to one or more devices.

Select Choose Action > Provision > Agentless: Automatic.

Agentless management is enabled for the selected devices and one of the following icons appears next to the device names:

: Agentless management is enabled for the device.

: Agentless management is enabled for the device, but the device is not currently reachable.

Depending on the device, the appliance uses various connection types to run commands on the selected devices, obtain inventory information, and display that information on the Device Detail page. Information is updated according to the inventory schedule for Agentless devices. See:

◦

Managing inventory information

◦

Schedule inventory data collection for managed devices

Enable Agentless management by entering device information manually

You can enable Agentless management by entering device information manually.

You can choose from the following connection types: SSH/Telnet, SNMP, WinRM, and VMware. WinRM is the connection type to use for Windows devices.

Go to the Devices list:

On the left navigation bar, click Inventory.

Select Choose Action > New > Agentless Device to display the Agentless Device Connection Details page.

Provide information according to the type of connection.

◦

To set up SSH/Telnet connections with devices, provide the following information:

Option

Description

Name

The hostname or IP address of the device.

Asset Subtype

The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, routers, and Software assets that run on Windows, Mac, or Linux systems in the K1000 inventory. See About Asset Subtypes, custom fields, and device detail preferences.

Connection Type

The connection method to use to connect to the device and obtain inventory information, in this case, SSH or Telnet.

Protocol

The protocol to use during connections. When SSH/Telnet is selected, options include:

Use SSH2 if you want device communications to be more secure (recommended).

Use Telnet for devices that are not SSH-enabled or devices that have port 22 blocked. Telnet communications are not encrypted.

Port

The port number the appliance uses to connect to the device. No input is required for the following default port numbers:

•

SSH: 22

•

Telnet: 23

Credentials

The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed. Credentials are not required for SNMPv1 and SNMPv2c.

See Add and edit User/Password credentials.

Sudo Password

The name of a service user account with permission to connect to devices. Using a service account and Sudo Password is useful when you want to avoid using root credentials to access devices. On some devices, however, higher privileges enable the appliance to retrieve more detailed inventory information.

Operating System

The operating system of the device.

Shell

The shell to use during connections. See Shell support for SSH and Telnet connections.

Log Level

The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug.

Enable Inventory

The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted.

DNS Server

The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails.

◦

To set up SNMP connections with devices, provide the following information:

Option

Description

Name

The hostname or IP address of the device.

Asset Subtype

The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the K1000 inventory. See About Asset Subtypes, custom fields, and device detail preferences.

Connection Type

The connection method to use to connect to the device and obtain inventory information, in this case, SNMP.

SNMP (Simple Network Management Protocol) is a protocol for monitoring managed devices on a network. To enable SNMP, port 161 must be open on the appliance and on the device.

SNMP scan results include all SNMP capable devices. Remote shell extensions enable the K1000 to connect, run commands, and capture information that can be managed as inventory. For more information about SNMP options, see Add a Discovery Schedule for SNMP-enabled non-computer devices.

SNMP Version

The version of SNMP to use for connections. SNMPv1 and SNMPv2c do not use authentication or encryption.

SNMP v3 uses authentication and encryption algorithms to increase the security of SNMP communications. When you configure the SNMP v3 options, the appliance performs an SNMP v3 scan on selected devices. If that scan fails, the appliance attempts an SNMP v1 scan using the specified Public String

Read Community

(SNMP v1, SNMP v2c) The community string to query. The default is Public. The Public String is required if authentication is not required. When authentication is required, the scan returns SNMP enabled with no system data.

Credentials

The details of the service account required to connect to the device and run commands using SNMP v3. Select existing credentials from the drop-down list, or click Add new credential to add credentials not already listed. Credentials are not required for SNMPv1 and SNMPv2c.

See Add and edit User/Password credentials.

Inventory Type

The method used to collect inventory information.

•

Inventory: Collect a subset of device information, such as the IP Address, MAC Address, and device name.

•

Inventory/Walk: Conduct a full SNMP walk to collect inventory information. The full walk results appear on the Device Detail page.

NOTE: SNMP inventory walk does not support non-English characters on Windows devices. If it encounters non-English characters, the SNMP inventory process reports an error and stops loading inventory information.

Log Level

The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug.

Enable Inventory

DNS Server

◦

To set up WinRM connections with devices, provide the following information:

Option	Description
Name	The hostname or IP address of the device.
Asset Subtype	The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the K1000 inventory. See About Asset Subtypes, custom fields, and device detail preferences.
Connection Type	The connection method to use to connect to the Windows device and obtain inventory information, in this case, WinRM.
Port	The port number the appliance uses to connect to the device. No input is required for the following default port number: 5985.
Credentials	The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed. See Add and edit User/Password credentials.
Require Kerberos	If selected, Kerberos is required for authentication. NTLM will not be used as an alternative when Kerberos is unavailable. Using Kerberos requires DNS Lookup to be enabled in the same discovery configuration. The DNS Server is also required in the local K1000 network settings.
Log Level	The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug.
Enable Inventory	The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted.
DNS Server	The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails.

◦

To set up a VMware® device, provide the following information:

Option

Description

Name

The host name or IP address of the ESXi host or the vCenter Server.

Asset Subtype

The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as VMware devices. For example, hypervisors (ESXi hosts). See About Asset Subtypes, custom fields, and device detail preferences.

Connection Type

The connection method to use to connect to the VMware device and obtain inventory information.

VMware Type

The VMware device type: ESXi or vCenter Server.

NOTE: vCenter Server devices do not count against the total number of device licenses. That is because these device instances are only used to establish relationships between the vCenter Servers, ESXi hosts, and the virtual machines running on them.

Credentials

The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed. An account with read-only access can be used. See Add and edit User/Password credentials.

Log Level

The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug.

Enable Inventory

DNS Server

Click Test Connection.

The connection status appears.

Click Save.

The Agentless device is added. If Enable Inventory is selected, inventory information is updated according to the Agentless device inventory schedule. See Schedule inventory data collection for managed devices.

Shell support for SSH and Telnet connections

Operating systems vary in their support of shells used for SSH and Telnet connections between the appliance and managed devices.

The following table shows the shells available for SSH and Telnet connections for each operating system.

Table 21. Shell support for SSH and Telnet connections by operating system
Operating system	Default shell	Supported shells
AIX (IBM®)	ksh	bash, ksh, sh
CentOS	bash	bash, sh
Debian Linux	bash	bash, sh
Fedora	bash	bash, sh
FreeBSD	csh	bash, csh, sh
HP-UX	sh	ksh, sh
Mac OS X	sh	bash, sh
openSUSE/SLES™	bash	bash, sh
Oracle Enterprise Linux	bash	bash, sh
Red Hat® Enterprise Linux®	bash	bash, sh
Ubuntu	bash	bash, sh