Chat now with support
Chat with Support

KACE Systems Deployment Appliance 7.0 Common Documents - Administrator Guide

About the KACE Systems Deployment Appliance Getting started Using the Dashboard Configuring the KACE SDA Setting up user accounts and user authentication Configuring security settings Preparing for deployment Managing device inventory Using labels Creating a Windows or Linux Boot Environment Managing drivers Capturing images Capturing user states Creating scripted installations Creating a task sequence Automating deployments Performing manual deployments Managing custom deployments Imaging Mac devices About the Remote Site Appliance Importing and exporting appliance components Managing disk space Troubleshooting appliance issues Updating appliance software Glossary About us Legal notices

Delete user accounts

Delete user accounts

You can delete user accounts.

1.
On the left navigation pane, click Settings to display the Control Panel, then click Users to display the Users page.
2.
Select the check box next to one or more accounts.
3.
Select Choose Action > Delete.
4.
Click Yes to confirm.

Configuring security settings

Enable SNMP monitoring
Enable SSL using an existing certificate
Generate private key for new SSL certificate
Disable SSL
Enable database access
Enable SSH Root Login (KACE Support)
Prevent brute-force login attacks

You can enable SSH to allow the Quest KACE Technical Support team to access your appliance for remote support. Other security settings include enabling SNMP to allow remote monitoring, and enabling Offboard Database Access to allow the appliance database to be available to external programs, which can be useful for reporting. Enabling SSL provides a secure web browser to run the KACE SDA.

Enable SNMP monitoring

Enable SNMP monitoring

The SNMP agent on the KACE SDA enables remote monitoring of the appliance.

The internal SNMP agent uses the standard UDP port 161 and cannot be configured using TRAP and INFORM methods. If you have a Master SNMP agent configured on a different device, it can send GET, GETNEXT, and GETBULK requests to the KACE SDA and have the appliance return the requested information.

1.
On the left navigation pane, click Settings to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Enable SNMP Monitoring to display the SNMP Community String field.
3.
Enter a unique community string, for example newString.
If the community name contains spaces, enclose it in quotation marks (" "). Quest KACE recommends creating a unique string. The default is KaceSDA.
* 
NOTE: In versions prior to 7.0, the community string is set to public by default. If you upgrade from a pre-7.0 version, and SNMP monitoring is disabled, the community string changes from public to KaceSDA. If SNMP monitoring is enabled, the community string stays set to public, you should update it to prevent security issues. Warnings appear on the Dashboard and on the Security Settings page, alerting you to update the community string.
4.
Click Save.

Enable SSL using an existing certificate

Enable SSL using an existing certificate

By default, SSL is disabled. You can use an existing SSL certificate, an intermediate certificate, or a self-signed certificate to run your KACE SDA on a secure web browser. Using an existing certificate requires having an SSL private key and ensuring that port 80 is open.

* 
NOTE: If you do not have a valid certificate, the appliance can generate a Certificate Signing Request (CSR) that you can send to your Certificate Signing Authority. You can download the private key and save it in a safe place. See Generate private key for new SSL certificate.
1.
On the left navigation pane, click Settings to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Enable SSL and click I already have an SSL certificate, Can I use it?
3.
Click Use My Certificate.
4.
Under Optional SSL Settings, select one of the following certificate types:
◦
Private Key & Certificate (most common).
◦
What if I also have an intermediate certificate?
◦
PKCS-12 (.pkcs12, .pfx, .p12)
Enter the password for the PKCS-12 SSL formatted certificate.
5.
Browse to the key or certificate and click Apply Certificate.

The secure web browser using https is available.

Related Documents