Chat now with support
Chat with Support

KACE Systems Management Appliance 10.0 Common Documents - Administrator Guide

About the KACE Systems Management Appliance (SMA) Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Provisioning the KACE SMA Agent Manually deploying the KACE SMA Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles Using Task Chains
Patching devices and maintaining security
About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Dell devices and updates Maintaining device and appliance security
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the KACE SMA
Appendixes Glossary About us Legal notices

Add and edit User/Password credentials

Add and edit User/Password credentials

To streamline the management of username and password credentials used in Inventory, Distribution, and Scripting, add those credentials to the Credentials Management page. User/Password credentials can be created for Mac, Windows, and Linux operating systems as well as VMware ESXi hosts and vCenter Servers.

•
You have the usernames and passwords of the credentials you want to manage.
•
You have administrator privileges in the Administrator Console.

After you add credentials, you can select them on configuration pages instead of entering the credentials manually each time. In addition, you can add credentials from any of the configuration pages that use them. Credentials added on configuration pages are automatically added to the Credentials Management page.

1.
Go to the Credentials Management page:
a.
Log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Credentials.
2.
Select Choose Action > New.
3.
On the Add Credential form, specify credential properties:
* 
NOTE: You can also access this form from pages that use credentials, such as the Discovery Schedule Detail page. Credentials added on these pages are automatically added to the Credentials Management list.

Option

Description

Name

A unique name for the credential. This name appears on the Credentials Management list and in the credential selection drop-down lists in component sections, such as Scripting. This name is used for identification in Administrator Console, and it is not part of the actual credential on the target device.

Type

The classification of the credential. Select User/Password to specify credentials that have usernames and passwords.

User or Domain\User

The username required for the credential.

* 
TIP: The Domain\User format might be required for some Windows configurations.

Password

The password required for the credential.

Show typing

Show the characters in the Password field on the Add Credential form. This option is available only when you are adding credentials. If you are editing existing credentials, the password characters cannot be displayed.

Targets

The device types on which the credential can be used.

* 
TIP: You can select multiple device types, or operating systems, if the specified credentials can be used for authentication on multiple operating systems.

Notes

Any additional information you want to provide about the credential.

4.
Click Save.
The credential appears on the Credentials Management list and it is available for selection in components that use credentials.

Add and edit Google OAuth credentials

Add and edit Google OAuth credentials

To streamline the management of Google OAuth credentials used in Inventory, Distribution, and Scripting, add those credentials to the Credentials Management page.

•
You have a Google Apps for Business domain or Google Apps for Education domain, with Chrome Device Management support.
•
You have a Google User admin account that is a member of the business or education domain. The account must be assigned the super user role.
•
You have a Google account to be used as your developer account, and have created a project with a Client ID and Client Secret. See Obtain a Client ID and Client Secret for use in discovering Chrome devices.
•
You have administrator privileges in the Administrator Console.

After you add credentials, you can select them on configuration pages instead of entering them manually each time. In addition, you can add credentials from any of the configuration pages that use them. Credentials added on configuration pages are automatically added to the Credentials Management page.

1.
Go to the Credentials Management page:
a.
Log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Credentials.
2.
Select Choose Action > New.
3.
On the Add Credential form, specify credential properties:

Option

Description

Name

A unique name for the credential. This name appears on the Credentials Management list and in the credential selection drop-down lists in component sections, such as Scripting. This name is used for identification in Administrator Console, and it is not part of the actual credential.

Type

The classification of the credential. Select Google OAuth to specify credentials for Chrome devices.

Client ID

Your Google developer API Client ID.

Client Secret

Your Google developer API Client Secret.

Show typing

Show the characters in the Client Secret field on the Add Credential form. This option is available only when you are adding credentials. If you are editing existing credentials, the characters in the Client Secret field cannot be displayed.

Approval Code

The approval code for access. To obtain this code, provide your Client ID and Client Secret, then click Generate a new code.

Generate a new code

A link to the code-generator. To generate a new code:

a.
Click Generate a new code.
b.
Sign in with your Google Admin Account credentials on the Google sign-in page.

If a Google sign-in page does not appear, your Google account credentials are already cached. If the cached account is not the preferred Admin Account, log out and log back in with the preferred Admin Account.

c.
Click Accept to generate a code that allows the KACE SMA access to view user and Chrome OS devices on the Google Domain.
d.
Copy the generated code and close the Google window.
e.
Paste the code into Approval Code.

Notes

Any additional information you want to provide about the credential.

4.
Click Save.
The credential is available for selection in components that use credentials.

Add and edit SNMP credentials

Add and edit SNMP credentials

To streamline the management of SNMP credentials used in Inventory, Distribution, and Scripting, add those credentials to the Credentials Management page.

•
You have the information required for SNMP authentication.
•
You have administrator privileges in the Administrator Console

After you add credentials, you can select them on configuration pages instead of entering them manually each time. In addition, you can add credentials from any of the configuration pages that use them. Credentials added on configuration pages are automatically added to the Credentials Management page.

1.
Go to the Credentials Management page:
a.
Log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Credentials.
2.
Select Choose Action > New.
3.
On the Add Credential form, provide the following information:

Option

Description

Name

A unique name for the credential. This name appears on the Credentials Management list and in the credential selection drop-down lists in component sections, such as Scripting. This name is used for identification in Administrator Console, and it is not part of the actual credential.

Type

The classification of the credential. Select SNMP to specify SNMP credentials.

4.
For SNMP v1 or v2c, provide the following information:

Option

Description

SNMP v1 or v2c

SNMP credentials that do not use authentication or encryption.

Community String

For SNMP v1 or v2c, the community string to query. The default is Public. The Public String is required for SNMP v1 or v2c.

Notes

Any additional information you want to provide about the credential.

5.
For SNMP v3, provide the following information:

Option

Description

SNMP v3

SNMP credentials that require authentication and encryption algorithms to increase security.

Security Name

For SNMP v3, the name of the USM (user-based security model) user account. This account, and any passwords required for authentication and encryption, must be set up on target devices.

Security Level

For SNMP v3, the level of security. Security levels include:

•
authPriv: The highest level of SNMP v3 security, which uses both authentication and encryption. To use this level, you must specify all the SNMP V3 Authentication and Privacy settings.
•
authNoPriv: The mid-range of SNMP v3 security, which uses authentication only. Communications are not encrypted. To use this level, you must specify the Authentication settings.
•
noAuthNoPriv: The lowest level of SNMP v3 security. Communications are not encrypted.

Authentication Password

For SNMP v3, the password used to authenticate communications when authPriv or authNoPriv security levels are selected. This password is associated with the USM user and must be set up on target devices.

Protocol

For SNMP v3, the protocol used for communications. Protocols include:

•
SHA: Secure hash algorithm, SHA-1.
•
MD5: Message Digest 5. Faster than SHA, but considered to be less secure.

Privacy Password

For SNMP v3, the password used to authenticate communications when the authPriv security level is selected. This password is associated with the USM user and must be set up on target devices.

Protocol

For SNMP v3, the protocol used for the privacy password. Protocols include:

•
DES: Data Encryption Standard. This algorithm has a 56-bit key size and is considered to be less secure than AES.
•
AES: Advanced Encryption Standard. The appliance supports the 128-bit key size.

Notes

Any additional information you want to provide about the credential.

6.
Click Save.
The credential is available for selection in components that use credentials.

View credential usage

View credential usage

You can view credential usage on the Credentials Management page.

•
Credentials have been added to the Credentials Management page. See Managing credentials.
•
You have administrator privileges in the Administrator Console.
1.
Go to the Credentials Management page:
a.
Log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Settings, then click Credentials.
The In Use column shows the components using the credentials.
2.
To sort the list, select a Type from the View By drop-down list above the table.
Related Documents