KACE Systems Management Appliance 9.1 Common Documents

Log in to the KACE SMA Administrator Console, http://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.

On the left navigation bar, click Inventory.

Click the name of a device.

To expand the sections on the Device Detail page, click Expand All above the Summary section.

The fields that are displayed depend on the type of device and its operating system. For example, if the device is a virtual machine, the Monitor field is not displayed, although the Video Controller is. In addition, some fields are available for some operating systems but not for others. For example, System Description is available for Windows or SNMP devices only.

To view tables describing the contents of the groups and sections that appear on this page, see Groups and sections of items in device details.

Optional: If change tracking is enabled for inventory information, click Show All History above the Summary section to see the history of inventory changes.

Groups and sections of items in device details

The Device Details page for a device contains inventory information presented in sections that are collected in groups. The extent and focus of information included on the page depends on the device and any subtypes indicated.

NOTE: If you have assigned an Asset Subtype, you can choose whether to show or hide the details that appear for each Device on the Device Detail page. For example, for the subtype Printer, information that is irrelevant to printers, such as the items Installed Programs, Discovered Software, and Metered Software, could be made hidden. Whole groups can be hidden as well. See Add Asset Subtypes and select Device Detail page preferences.

Scoped users can see the details of all devices, but can only edit the details of those devices that are associated with their role. For more information about user roles, see Add or edit User Roles.

The following groups can appear on the Device Details page:

•

Summary group

•

Inventory Information group

•

Software group

•

Activities group

•

Security group

•

Dell Command | Monitor group

•

Dell Updates group

•

Logs group

•

Asset group

Summary group

Basic device identification information. The items are not separated into sections as in the other groups on the page. The entries that appear on the Device Detail page vary depending on the device, operating system (if relevant), connection type, and so on.

The hostname or IP address of the device.

NAME

Asset Subtype

The Asset Subtype for this device, if one has been assigned. Asset Subtypes are subcategories of assets that you can add to any Asset Type, including custom Asset Types. This enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers.

Asset Location

The location of this asset.

N/A

Assigned To

The device owner. This field is only populated if the device user record exists on the appliance. When you integrate with the KACE Cloud MDM, if the appliance is synchronized with the KACE MDM tenant's Active Directory, the name of the KACE MDM device owner is displayed. For other types of external devices, if the device user record is not found on the appliance, the field is set to Unassigned.

N/A

Manual Entry

A field that indicates the inventory information was added manually, either through WSAPI or XML upload. click Edit to modify the information.

MANUAL_ENTRY

Device Entry Type

A field that indicates how the device is being managed: Agent Device, Agentless Device, or Manually Entered Record. Click Edit to change connection protocols.

N/A

System Description

A description of the device, populated by Agentless inventory for Windows and SNMP devices.

The type of device, such as desktop or laptop.

CHASSIS_TYPE

Ownership

KACE MDM devices only. Indicates the ownership of the device: Company, Personal or Unknown.

OWNERSHIP

IP Address

The IP address of the device.

MAC Address

The device’s Media Access Control (MAC) address number.

MAC

RAM Total

The total amount of random-access memory (RAM) on the device.

RAM_TOTAL

Operating System Name

The operating system of the device, such as Windows, Mac OS X®, or Linux.

OS_NAME

Service Pack

The service pack version number (Windows or SUSE Linux Enterprise Server only).

SERVICE_PACK

Uptime Since Last Reboot

The amount of time the device has been running since it was restarted.

UPTIME

Agent Version

The version number of the KACE SMA Agent installed on the device.

CLIENT_VERSION

Device Timezone

The timezone used by the KACE SMA Agent installed on the device.

TZ_AGENT

Source

The source of the collected device details. For Agent-managed devices, this field is set to Agent. For Agentless devices, this field reflects the connection type. For example, VMware.

N/A

User Name

The name of the most recent user who logged in to the device. Some devices might have multiple users.

USER

Agent Connection

The time the Agent Messaging Protocol (AMP) service on the device connected to the KACE SMA and the current connection status (available for Agent-managed devices only). Connection status information includes:

: An Agent-managed device is connected to the appliance.

: An Agent-managed device with server monitoring enabled is connected to the appliance.

: An Agent-managed device is not connected to the appliance.

KBSYS.SMMP_CONNECTION

Agentless Connection

The time the Agentless device connected to the KACE SMA and the current connection status (available for Agentless devices only). Connection status information includes:

: Agentless-management is enabled for the device.

: Agentless-management and server monitoring is enabled for the device.

: Agentless management is enabled for the device, but the device is not currently reachable.

N/A

Agentless Connection Method

The protocol, such as SNMP, used to collect inventory information from the device.

N/A

Last Inventory

The time of the most recent inventory report.

LAST_SYNC

Device Created

The date and time that the device’s first inventory record was created.

CREATED

Device Modified

The date and time that the device’s inventory record was modified.

MODIFIED

Contact

Printers only. The contact information for the selected printer, such as an email address. This information is stored in the managed printer's SNMP sysContact field.

Location

Printers only. The location of the selected printer, such as the name of the organization. This information is stored in the managed printer's SNMP sysLocation field.

Volume n

The type and size of the disk drive’s file system, and amount of space used on the disk drive. To view changes to the drive usage, click Show Usage History link in this field. This information is updated when usage increases or decreases by 5% or more.

There is one entry for each volume.

For VMware® ESXi® host devices, each datastore associated with the ESXi host is listed as a volume.

MACHINE_DISKS

Force Inventory

Click Force Inventory to immediately update inventory information for the device and synchronize the device with the appliance.

Force Inventory is available only if the AMP connection to an Agent-managed device is active, or for Agentless devices, if the device is reachable.

N/A

VMware UUID

This field is only visible when you select a VMware device. The UUID is a globally unique identifier for the vCenter Server or the ESXi host.

INSTANCE_UUID

KACE Cloud Mobile Device Manager (MDM) commands

When you integrate with the KACE Cloud MDM and select a KACE Cloud MDM device, an additional set of commands is available in this section.

•

Force Inventory: Requests from the KACE Cloud MDM to initiate a new inventory for the device. When complete, the KACE SMA synchronizes the inventory information.

•

Lock: Blocks access to the selected device. Next time the user interacts with the device, they are prompted to provide the device's passcode.

•

Set Passcode: Allows you to specify a new passcode for the selected device.

NOTE: This command is only available for Android devices.

•

Clear Passcode: Unlocks the selected device. The device remains unlocked until a new passcode is provided.

•

Unenroll Device: Un-enrolls the selected device from the KACE Cloud MDM.

•

Factory Reset: Restores the factory settings on the selected device.

TIP: These commands are also accessible from the Devices list page, from the Choose Action menu. The Force Inventory command appears in the main menu, while the other commands are available in the KACE Cloud MDM menu.

N/A

VMware virtual machine commands

If your managed environment includes one or more provisioned VMware virtual machines, you can perform a set power device actions from this page, such as powering virtual machines on or off. These commands are available if the following pre-requisites are met:

•

The provisioned virtual machines must be running on a provisioned VMware ESXi server version 5.5.x or higher.

NOTE: Your KACE SMA license agreement allows administrator to manage a specific number of computers, servers, and assets. Each provisioned VMware ESXi server consumes a KACE SMA agentless license. If you want to use this feature, you must ensure that your KACE SMA license agreement covers all of your provisioned ESXi hosts. For more information, see http://quest.com/docs/Product_Guide.pdf. To increase your license capacity, visit https://quest.com/buy.

•

VMware Tools must be installed on the target virtual machines to issue Shut Down Guest OS and Restart Guest OS commands. The other commands do not require VMware Tools.

•

User account configured in the inventory must have sufficient administrative-level permissions in order to perform these actions.

The following commands are available when you select a provisioned VMware virtual machine.

•

Power On: Powers on the selected virtual machine. If the virtual machine is suspended, this action causes the suspended virtual machine to be powered on.

•

Power Off: Powers off the selected virtual machine. If the virtual machine is a fault-tolerant primary virtual machine, this results in one or more of the secondary virtual machines being powered off as well.

•

Suspend: Suspends the execution of the selected virtual machine.

•

Reset: Resets the power on the selected virtual machine. If the virtual machine is currently powered on, this action first powers it off, then powers it on.

•

Shut Down Guest OS: Issues a command to the guest operating system on the selected virtual machine to perform a clean shutdown of all services.

•

Restart Guest OS: Issues a command to the guest operating system on the selected virtual machine to perform a reboot.

TIP: These commands are always available on the Device Detail page. They can also appear on the Devices list page in the Choose Action menu when bulk actions against VMware virtual machine devices are enabled. This feature is disabled by default. To enable it, on the General Settings page, under Allowed Bulk Actions, select the Enable Bulk Virtual Machine Actions check box. For more information, see Configure Admin-level or organization-specific General Settings.

For complete information about these virtual machine actions, refer to your VMware ESXi documentation.

N/A

Inventory Information group

Additional details on items in the Summary section.

Information about the device’s hardware.

If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.

RAM Total

The total amount of random-access memory (RAM) installed on the device.

RAM_TOTAL

RAM Used

The amount of random-access memory (RAM) in use on the device.

RAM_USED

RAM Maximum

The maximum amount of random-access memory (RAM) that the device can support.

RAM_MAX

System Manufacturer

The device manufacturer.

The system serial number.

CSP_ID_NUMBER

Asset Tag

Windows and KACE MDM devices only. The BIOS Asset Tag of a system. An Admin can use a bios utility to set this value on the system.

ASSET_TAG

Domain

The Windows domain to which the device is joined.

CS_DOMAIN

Motherboard Primary Bus

The main bus.

MOTHERBOARD_PRIMARY_BUS

Motherboard Secondary Bus

The peripheral bus.

MOTHERBOARD_SECONDARY_BUS

Processors

The CPU count, type, and manufacturer.

PROCESSORS

Architecture

The architecture of the device operating system, such as x86 or x64.

SYS_ARCH

Virtual Device

Used to identify devices that are virtual, such as devices running on VMware platforms. Not displayed for physical devices, such as laptops and servers.

VIRTUAL

Trusted Platform Module (TPM)

On devices with the TPM dedicated microprocessor installed, displays specifications and information about whether TPM is enabled and activated.

See About Dell Data Protection | Encryption (DDP|E) and encryption information in device details.

MACHINE_TPM

Intel AMT Device

On Intel-based Windows devices with Intel AMT technology present, displays information about configuration.

See About Intel AMT information in device details.

INTEL_AMT

CD/DVD Drives

The configuration of CD-ROM and DVD-ROM drives installed on the device.

CDROM_DEVICES

Sound Devices

Information about audio devices on the device.

SOUND_DEVICES

Video Controllers

Information about video controllers on the device.

VIDEO_CONTROLLERS

Monitors

The type and manufacturer of the monitor attached to the device. For virtual devices, this displays monitor information if it is reported by the operating system.

MONITOR

Apple Support Information

Link to the Support page at Apple.

N/A

SMC Version

The System Management Controller version of the device CPU.

BIOS_NAME

Serial Number

The serial number of the device.

BIOS_SERIAL_NUMBER

Boot ROM Version

The Boot ROM or Firmware version of the device.

BIOS_VERSION

Dell Service Information

Information about Dell hardware, including the Service Tag, System Type, Ship Date, Country, and warranty information. This section also includes a Days Left column, which indicates the number of days remaining in the warranty period, and Last Updated column, which indicates the last time the warranty information was refreshed. To update Dell Service information, click Refresh.

The date the BIOS version was released.

BIOS_DATE

BIOS Manufacturer

The BIOS manufacturer.

BIOS_MANUFACTURER

BIOS Description

The BIOS description.

BIOS_DESCRIPTION

BIOS Serial Number

The BIOS serial number.

BIOS_SERIAL_NUMBER

Black Toner - Description

Printers only. The make and model of the black toner.

Black Toner - Maximum Level

Printers only. The maximum level of the black toner powder.

Black Toner - Current Level

Printers only. The current level of the black toner powder. If the toner is not installed, a message appears in this field.

Cyan Toner - Description

Color printers only. The make and model of the cyan toner.

Cyan Toner - Maximum Level

Color printers only. The maximum level of the cyan toner powder.

Cyan Toner - Current Level

Color printers only. The current level of the cyan toner powder. If the toner is not installed, a message appears in this field.

Magenta Toner - Description

Color printers only. The make and model of the magenta toner.

Magenta Toner - Maximum Level

Color printers only. The maximum level of the magenta toner powder.

Magenta Toner - Current Level

Color printers only. The current level of the magenta toner powder. If the toner is not installed, a message appears in this field.

Yellow Toner - Description

Color printers only. The make and model of the yellow toner.

Yellow Toner - Maximum Level

Color printers only. The maximum level of the yellow toner powder.

Yellow Toner - Current Level

Color printers only. The current level of the yellow toner powder. If the toner is not installed, a message appears in this field.

Volume n

There is one entry for each volume.

MACHINE_DISKS

Hewlett-Packard Service Information

Hewlett-Packard devices only. Information about the selected Hewlett-Packard (HP) device. This section is populated when you provide the manufacturer's API keys on the General Settings page. For more information, see Configure appliance General Settings with the Organization component enabled.

Serial Number: The serial number of the selected HP device.

SERIAL

Product Number: The specific number of the selected HP device.

Product Name: The name of the selected HP device.

PRODUCT

Last Updated: The time stamp of when the device information was last updated.

Service Status Type: The selected device's service type:

•

W: Warranty

•

P: Fixed care pack, equivalent to extended warranty

•

C: A contract, equivalent to extended warranty

SERVICE_TYPE

Type: The description of the service status type. For example, Waranty, or something else.

TYPE

Start Date: The warranty start date.

START_DATE

End Date: The warranty end date.

END_DATE

Service Level: A comma separated list of the device's service codes.

SERVICE_LEVEL

Lenovo Service Information

Lenovo devices only. Information about the selected Lenovo device. This section is populated when you provide the manufacturer's API keys on the General Settings page. For more information, see Configure appliance General Settings with the Organization component enabled.

Product: The name of the selected Lenovo device.

PRODUCT

Purchased: The date when the selected Lenovo device is purchased.

PURCHASED

Shipped: The date when the selected Lenovo device is shipped.

SHIPPED

In Warranty: Indicates if the selected Lenovo device is covered by the warranty (Yes or No).

IN_WARRANTY

Country: The country where the selected Lenovo printer is purchased.

COUNTRY

UpgradeUrl: The URL containing upgrade information.

UPGRADE_URL

Last Updated: The time stamp of when the device information was last updated.

Id: The warranty ID.

Type: The warranty type: UNKNOWN, BASE, UPGRADE, EXTENDED or INSTANT.

TYPE

Start Date: The warranty start date.

START_DATE

End Date: The warranty end date.

END_DATE

Name: The warranty name.

Description: The warranty description, as applicable.

DESCRIPTION

Printers

The printers that the device is configured to use.

PRINTERS

Network Interfaces

The type of network interface, such as Ethernet card or Bluetooth adapter, and details like IP address, whether DHCP (Dynamic Host Configuration Protocol) is enabled or disabled for the associated IPv4 (Internet Protocol version 4).

MACHINE_NICS

SNMP Data

The results of a SNMP Full Walk of data in the MIB (management information base) on a device, if you set up the Authenticated device discovery type to perform a Full Walk. This section does not appear if discovery was made with a Bulk GET.

Chrome OS

Chrome-related information.

NOTE: Chrome values are in the MACHINE_CHROMEOS_DETAIL table, not the MACHINE table.

N/A

Device ID

The unique ID of the Chrome device.

DEVICE_ID

Serial Number

The Chrome device serial number.

SERIAL_NUMBER

Status

The status of the Chrome device: ACTIVE, DEPROVISIONED, INACTIVE, RETURN_APPROVED, RETURN_REQUESTED, SHIPPED, UNKNOWN.

STATUS

Last Sync

The date and time the device was last synchronized with the policy settings in the Google Admin console.

LAST_SYNC

Support End Date

The final date the device will be supported. This is applicable only for those devices purchased directly from Google.

SUPPORT_END_DATE

Annotated User

The user of the device as noted by the administrator.

ANNOTATED_USER

Annotated Location

The address or location of the device as noted by the administrator.

ANNOTATED_LOCATION

Notes

Notes about this device added by the administrator.

NOTES

MEID

The Mobile Equipment Identifier (MEID) for the 3G mobile card in a mobile device.

MEID

Order Number

The device's order number. Only devices directly purchased from Google have an order number.

ORDER_NUMBER

OS Version

The Chrome device's operating system version.

OS_VERSION

Platform Version

The Chrome device's platform version.

PLATFORM_VERSION

Firmware Version

The Chrome device's firmware version.

FIRMWARE_VERSION

MAC Address

The device's wireless MAC address.

MAC_ADDRESS

DHCP

An indicator of whether DHCP is enabled for the IPv4 address associated with this network interface.

IPv6 Host Configuration

A list containing one or more IPv6 ((Internet Protocol version 6) addresses available on the network interface. For each listed item, this section displays its full IPv6 address and the number of bits in the IPv6 address prefix. An IPv6 prefix typically consists of 64 bits.

DNS Hostname

The host name associated with this network interface.

Boot Mode

The boot mode for the device.

BOOT_MODE

Last Enrollment Time

The date and time the device was last enrolled with the Google Admin console.

LAST_ENROLLMENT_TIME

Org Unit Path

The full parent path with the Google organization unit's name associated with the device.

ORG_UNIT_PATH

Wi-Fi

KACE MDM devices only. The IP or MAC address of the device.

Mobile Information

Information from devices managed by KACE Mobile Device Manager (KMDM), and AirWatch®

N/A

UDID

The device’s Unique Device Identifier. For iOS devices only.

UDID

Modem Firmware

The mobile device's firmware version.

FIRMWARE_VERSION

Device type

DMM devices only. The type of mobile device. Examples include iPhone, iPad, iPod, Android Phone, and Android Tablet.

DEVICE_TYPE

ICCID

KACE MDM and DMM devices only. The unique serial number for the device’s SIM card.

ICCID

IMEI

KACE MDM and DMM devices only. International Mobile Equipment Identity number for the device.

IMEI

Voice Roaming Enabled

KACE MDM Android phones only. An indicator of whether the selected KACE MDM Android phone has voice roaming enabled.

VOICE_ROAMING_ENABLED

Data Roaming Enabled

KACE MDM Android phones only. An indicator of whether the selected KACE MDM Android phone has data roaming enabled.

DATA_ROAMING_ENABLED

MEID

KACE MDM devices only. The Mobile Equipment Identifier. This is the unique identifier of the selected mobile device.

MEID

Phone Number

DMM devices only. Phone number associated with the device.

PHONE_NUMBER

Mobile Operator

KACE MDM and DMM devices only. The mobile network carrier.

CARRIER

Bluetooth MAC Address

DMM devices only. Media access control address for Bluetooth on the device.

BLUETOOTH_MAC

Battery Level

KACE MDM and DMM devices only. Amount of battery charge at last update, in percent.

BATTERY_LEVEL

Last Check-in

The time stamp of when the device information was last updated.

LAST_CHECK_IN

Enrolled

KACE MDM and AirWatch devices only.

The date and time the device was last enrolled with KACE MDM or AirWatch console.

IS_ENROLLED

Supervised

KACE MDM iOS devices only. An indicator of whether the selected KACE MDM iOS device is supervised. This is the highest level of control on an iOS device.

IS_SUPERVISED

Lost Mode

KACE MDM iOS supervised devices only. An indicator of whether the selected KACE MDM iOS device is in Lost mode. The Lost mode prevents a device from being unlocked by a third party.

IS_LOST

Encrypted

KACE MDM devices only. An indicator of whether the selected KACE MDM iOS device is in Encrypted mode.

IS_ENCRYPTED

Locator Service Enabled

KACE MDM iOS devices only. An indicator of whether the selected KACE MDM iOS device is has the Locator Service enabled. This service retrieves the device location information, if the device is responding.

LOCATOR_SERVICE_ENABLED

Activation Lock Enabled

KACE MDM iOS devices only. An indicator of whether the activation lock is enabled on the selected KACE MDM iOS device. This feature prevents anyone else from using an iOS device if it is lost or stolen.

ACTIVATION_LOCK_ENABLED

Rooted

KACE MDM Android devices only. An indicator of whether the OS of the selected KACE MDM Android device is unlocked.

IS_ROOTED

Compliant

AirWatch devices only. Indicates if the device meets pre-configured AirWatch compliance rules.

IS_COMPLIANT

Current Mobile Network

AirWatch devices onlyThe name of the mobile network associated with the AirWatch device.

N/A

Activation Lock Bypass Code

KACE MDM iOS DEP-managed devices only.The bypass code that can be used as the device password, when activation lock is enabled.

ACTIVATION_LOCK_BYPASS_CODE

Allow Supervised Activation Lock

KACE MDM iOS DEP-managed devices only. Indicates if activation lock is enabled for the device. Activation lock allows users to bypass the password and log in to the device with the activation lock bypass code.

ACTIVATION_LOCK_ALLOWED

DEP Managed

KACE MDM iOS devices only. Indicates if the device is managed by the Apple Device Enrollment Program (DEP).

IS_DEP_MANAGED

DEP Profile

KACE MDM iOS DEP-managed devices only. The name of the DEP profile associated with the device.

DEP_PROFILE

DEP Profile Assigned By

KACE MDM iOS DEP-managed devices only. The name of the user account that assigned the DEP profile to the device.

DEP_ASSIGNED_BY

DEP Profile Assigned Date

KACE MDM iOS DEP-managed devices only. The date when the DEP profile is assigned to the device.

DEP_ASSIGNED_DATE

DEP Profile Status

KACE MDM iOS DEP-managed devices only. The management status of the device:

•

Assigned: Apple DEP received a profile and it is ready to be assigned to the device.

•

Empty: profile is not assigned to the device.

•

Pushed: A profile is delivered to the activated device.

•

Removed: A profile was assigned to the device but has been removed. When the device reactivates, KACE MDM will no longer manage the device.

DEP_PROFILE_STATUS

Device Configured

KACE MDM iOS DEP-managed devices only.

IS_DEP_CONFIGURED

Do Not Disturb

Indicates if the device is in Do Not Disturb mode.

DO_NOT_DISTURB_ENABLED

Exchange Device ID

The Microsoft Exchange ID assigned to the device.

EAS_DEVICE_ID

First Enrolled

The date when the device was enrolled in KACE MDM.

ENROLLMENT_DATE

iCloud Enabled

KACE MDM iOS devices only. Indicates if cloud is enabled on the devices.

ICLOUD_ENABLED

Last iCloud Backup

KACE MDM iOS devices only. The date when Apple iCloud was last backed up on the device.

ICLOUD_LAST_BACKUP

Logged into iTunes

KACE MDM iOS devices only. Indicates if the device is logged in to iCloud.

IS_ITUNES_ACCOUNT_ACTIVE

Wi-Fi Received

KACE MDM Android devices only. The number of bytes the device received through a Wi-Fi network.

WIFI_BYTES_RECV

Wi-Fi Sent

KACE MDM Android devices only. The number of bytes the device sent through a Wi-Fi network.

WIFI_BYTES_SENT

WWAN Received

KACE MDM Android devices only. The number of bytes the device received through a mobile network.

WWAN_BYTES_RECV

WWAN Sent

KACE MDM Android devices only. The number of bytes the device sent through a mobile network.

WWAN_BYTES_SENT

Agent

Agent-related information.

N/A

Agent Version

The version number of the KACE SMA Agent installed on the device.

CLIENT_VERSION

Version

The version of Agent Messaging Protocol (AMP) used to connect the device to the KACE SMA.

AMP_VERSION

Connected

The time the Agent Messaging Protocol (AMP) service on the device connected to the KACE SMA.

CONNECT_TIME

Disconnected

If disconnected, the time the Agent Messaging Protocol (AMP) service on the device disconnected from the KACE SMA.

DISCONNECT_TIME

KACE ID

The character string used to identify the device in the KACE SMA database.

KUID

Database ID

The unique number used to identify the device in the KACE SMA database.

Manual Entry

A field that indicates the inventory information was added manually, either through WSAPI or XML upload.

MANUAL_ENTRY

Device Entry Type

A field that indicates how the device is being managed: Agent Device, Agentless Device, or Manually Entered Record. Click Edit to change connection protocols.

N/A

Last Inventory

The time of the most recent inventory report.

LAST_INVENTORY

Last Sync

For Agent-managed devices, the time the device last checked in to the KACE SMA. For Agentless devices, the time the KACE SMA last connected to the device and collected inventory.

LAST_SYNC

Last Agent Update

The time of the most recent update to the KACE SMA Agent, if any.

LAST_CLIENT_UPDATE

User

Information related to the device user.

N/A

User Logged

The user currently logged in to the device. This entry includes the username and the domain to which the user belongs.

USER_LOGGED

User Fullname

The full name of the user who owns the device.

USER_FULLNAME

User Name

The name of the current user.

USER_NAME

User Domain

The domain to which the user belongs.

USER_DOMAIN

Operating System

Information about the device's operating system.

N/A

Name

The operating system of the device, such as Windows, Mac OS X, or Linux.

OS_NAME

Service Pack

The service pack version number (Windows or SUSE Linux Enterprise Server only).

SERVICE_PACK

Operating System Version

The version number of the operating system.

OS_VERSION

Operating System Build Version

The build number of the operating system.

OS_BUILD

Number

The number of the operating system.

OS_NUMBER

Operating System Architecture

The architecture of the device operating system, such as x86 or x64.

OS_ARCH

Domain

The Windows domain to which the device is joined.

CS_DOMAIN

Operating System Installed On

The date the operating system was installed.

OS_INSTALLED_DATE

Last Startup

The length of time the operating system has been running.

LAST_REBOOT

Uptime Since Last Reboot

The amount of time the device has been running since it was restarted.

UPTIME

System Directory

The location of the system directory.

SYSTEM_DIRECTORY

Registry Size

The size of the registry.

REGISTRY_SIZE

Registry Maximum Size

The maximum size of the registry.

REGISTRY_MAX_SIZE

Pagefile Size

The current size of the Windows Pagefile.

PAGEFILE_SIZE

Pagefile Max Size

The maximum size of the Windows Pagefile.

PAGEFILE_MAX_SIZE

IE Version

The version of Internet Explorer installed on the device.

IE_VERSION

WMI Status

The status of the Windows Management Instrumentation (WMI) service (Windows Devices only).

WMI_STATUS

Drive Encryption

Information on encryption if a DDP|E client has been installed on a device, as well as BitLocker or FileVault2.

See About Dell Data Protection | Encryption (DDP|E) and encryption information in device details.

Drive Encryption Summary

Identifies encryption technology in place, and whether the encryption is enabled.

N/A

Dell Data Protection | Encryption (DDP|E)

Configuration and status information about DDP|E.

N/A

BitLocker

Configuration and status information about Windows BitLocker.

N/A

FileVault

Configuration and status information about Mac OS X FileVault 2.

N/A

Location

Information from devices managed by AirWatch.

N/A

Latitude

The latitude of the device detected during the last update.

LATITUDE

Longitude

The longitude of the device detected during the last update.

LONGITUDE

Last Update

The time stamp of when the device information was last updated.

LAST_UPDATE

Notes

Any additional information you want to provide.

NOTES

Virtual Machines

When an ESXi host is selected, this group lists the virtual machines running on the ESXi host. Some of the information in this list is only available if VMware tools are installed on the virtual machines. If some columns are not populated, this is because VMware tools are not installed on that virtual machine.

Name

The name of the virtual machine.

NAME

Hostname

The host name assigned to the virtual machine. If a virtual machine is already provisioned by the KACE SMA agent, its name in this column appears as a hyperlink. When you click the link, the page is updated to display device details for the provisioned virtual machine.

HOSTNAME

IP Address

The primary IP address assigned to the virtual machine.

State

Indicates if the virtual machine is running. Possible values:

•

0 - Running: Virtual machine is running normally.

•

1 - Shutting down: Virtual machine has a pending shutdown command.

•

2 – Resetting: Virtual machine has a pending reset command.

•

3 – Pending standby: Virtual machine has a pending standby command.

•

4 – Not running: Virtual machine is not running.

•

5 – Unknown: Virtual machine information is not available.

MACHINE_VIRTUAL_STATE

Status

The virtual machine status. Possible values:

•

0 – OK: No problems.

•

1 – Warning: Possible problem.

•

2 – Error: Definite problems.

•

3 – Unknown: Status is unknown.

MACHINE_VIRTUAL_STATUS

Hypervisors

When a vCenter is selected, this group lists the ESXi hosts managed by the vCenter.

Hostname

The host name assigned to the ESXi host. If an ESXi device is already added to the inventory, its name in this column appears as a hyperlink. When you click the link, the page is updated to display device details for the monitored ESXi device.

N/A

IP Address

The IP address assigned to the ESXi host.

N/A

Status

The ESXi host status.

N/A

Software group

Details on the applications installed on the device, including patching information, running processes, and startup programs.

Section	Description	Database field
Installed Programs	A list of the software installed on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Discovered Software	Discovered applications are executables in the KACE SMA inventory that match the definitions of applications in the Software Catalog. You can enable metering for Discovered applications and suites, mark them as Not Allowed, and add license information for them. In addition, the Discovered application list can be exported in CSV format. You can export the Discovered application list, the Uncataloged list, and the Locally Cataloged list; you cannot export the entire Software Catalog.	N/A
Metered Software	Applications for which metering has been enabled.	N/A
Custom Inventory Fields	A list of Custom Inventory fields for this device, along with the field name and value.	N/A
Uploaded Files	The files that have been uploaded to the appliance from this device using the upload a file script action.	N/A
Patches Reported Installed in Software Inventory	Microsoft patches that have been installed on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Running Processes	A list of processes running on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Startup Programs	A list of startup programs on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A
Services	A list of services that are running on the device. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items.	N/A

Activities group

Information about actions to be performed on the device.

Section	Description	Database field
Monitoring	Information related to server monitoring, if enabled and if the device's operating system is supported. If the operating system is not supported, that fact is stated in a message. If the device is eligible for monitoring but does not have monitoring enabled, the Enable Monitoring button appears.	N/A
Active/Paused	Whether monitoring is enabled for this device.	N/A
Profiles	Any alert criteria profiles that are assigned to this device.	N/A
Maintenance Windows	Any Maintenance Windows that are assigned to this device.	N/A
Level/Alert	Alerts that are active for this device, with icons indicating the level of alert.	N/A
Labels	The labels assigned to this device. Labels are used to organize and categorize inventory and assets.	N/A
Failed Managed Installations	A list of Managed Installations that have failed to install. To access details of the Managed Installations, click the Managed Installation Detail link.	N/A
Managed Install List	A list of Managed Installations that are scheduled to be sent to the device the next time it connects with the appliance.	N/A
Service Desk Tickets	A list of the tickets associated with this device. These can either be tickets assigned to the device owner or tickets submitted by the device owner. To view ticket details, click the ticket ID (for example, TICK:0032).	N/A
SNMP Inventory Configurations	A list of SNMP Inventory Configurations associated with this device. To access details of the configurations, or to add configurations, click Manage Associated SNMP Configurations.	N/A

Security group

Section	Description	Database field
Patching Detect/Deploy Status	A list of the patches detected and deployed on the device. If patch attempts have been made, but they have failed, you can click Reset Tries to reset the number of patch attempts to the maximum allowed.	N/A
Threat Level 5 List	Threats that are harmful to applications, processes, startup items, or services on the device.	N/A
OVAL Vulnerabilities	The results of OVAL (Open Vulnerability Assessment Language) vulnerability tests that have been run on this device. Only tests that failed on this device are listed by the OVAL ID and marked as Vulnerable. Tests that passed are grouped and marked as Safe.	N/A
SCAP Configuration Scans	The results of FDCC/SCAP Configuration Scans that have been run on this device.	N/A

Dell Command | Monitor group

Additional inventory information about selected Dell client systems using Dell Command | Monitor.

Section	Description	Database field
Alerts	DCM log entries. These can indicate hardware errors detected by firmware.	N/A
Hardware	Collected information that includes detailed battery specs and usage data, service processor presence and configuration, memory inventory, and attached Dell monitors.	N/A

For classes and properties queried by the KACE SMA using Dell Command | Monitor, see About Dell Command | Monitor.

Dell Updates group

Information regarding updates and inventory (for Dell devices only).

Section	Description	Database field
Dell Update Schedules	The Dell updates that are scheduled to run on this device, and the time they are scheduled to run.	N/A
Dell System Inventory Report	The Dell devices that are installed on this device.	N/A
Dell Update Catalog Comparison Report	A list of Dell devices, installed on this device, that have drivers in the Dell catalog feed. If the installed version does not match the version in the Dell catalog feed, an icon indicates that the device needs to be upgraded.	N/A
Dell Update History	A list of the updates, such as driver updates, that have been performed on this device.	N/A

Logs group

•

Management Service Logs: The primary role of appliance Management Service is to run the offline KScripts. The Management Service logs display the steps performed by Management

•

Service to run the offline KScripts. These steps include, downloading dependencies and validating the KBOTS file. Any error in the execution of offline KScript is logged in the Management Service logs.

•

Bootstrap Logs: The appliance sends a bootstrap request to get inventory information for devices that have checked in for the first time. The logs related to this request are displayed in Bootstrap logs.

•

Client Logs: The appliance sends a request to the Agent to get inventory information periodically. A script runs on the device, then sends the inventory information to the appliance and inventory is uploaded to the appliance. The Agent logs display these actions.

•

Scripting Updater: A request is initiated periodically from the device to get the latest information related to the changes in offline KScripts. Scripting Updater logs display this information.

•

Agentless Inventory Status Messages: The log displays messages related to collecting and submitting inventory data from Agentless-managed devices.

Section	Description	Database field
Agent Logs	The logs for the KACE SMA Agent. A question mark indicates that its status is unknown.	N/A
User Console Installation Logs	Details about User Console packages installed on this device.	N/A
Scripting Logs	Scripts, such as Configuration Policy scripts, that have run on this device, along with the available status of any scripts in progress.	N/A

Asset group

This section displays the details of the Asset associated with this device. Clicking the Edit this Asset link enables you to edit the asset information.

Section	Description	Database field
Asset Information	Details such as the date and time the record was created and last modified; the Asset Type, such as device; and the name of the asset.	N/A
Barcodes	Barcodes associated with this asset, if they exist.	N/A
Related Assets	Assets that are related to this asset, such as parent or child assets.	N/A
Task History	A list of tasks that have run on the device.	N/A

About Dell Data Protection | Encryption (DDP|E) and encryption information in device details

•

Detect data security risks on desktops, laptops, and external media.

•

Protect data on these devices by enforcing access control policies, authentication, and encryption of sensitive data.

•

Manage data centrally with policies using collaborative tools that integrate into existing user directories.

•

Support key and data recovery, automatic updates, and tracking for protected devices.

Table 10. Supported OSs for DDP|E
Operating system	Versions
Windows	7, 8, 8.1
Mac OS X	10.7.5, 10.8.3–10.8.5, 10.9.2–10.9.3

Table 11. DDP|E information displayed on the Device Detail page
Item	Description	MACHINE_DDPE Database field
Unique ID	An identification of the DDP\|E client used by the DDP\|E server.	MCID
Agent Version	Version of DDP\|E client installed.	AGENT_VERSION
Server Hostname	Hostname of the DDP\|E server managing this DDP\|E client.	SERVER_HOSTNAME
Protection Status	Example values are Protected and Unprotected. Values of Locked or Unknown might indicate a problem.	PROTECTION_STATUS
Last Inventory Generated	Timestamp of when the last DDP\|E client inventory occurred. Not to be confused with K1 inventory.	PROTECTION_STATUS_UPDATED

Table 12. DDP|E Volume information displayed on the Device Detail page
Item	Description	MACHINE_DDPE_VOLUME Database field
Device	Name of the device/volume as reported by the operating system.	DEVICE_ID
Protection Status	Indication of the current level/status of DDP\|E protection on the DDP\|E client.	PROTECTION_STATUS
Protection Reason	Manner of protection used on the DDP\|E client. The option is typically VendorProtected, which indicates DDP\|E or BitLocker.	PROTECTION_REASON

BitLocker

BitLocker is a full disk encryption feature included with Windows.

Table 13. Supported OSs for BitLocker
Operating system	Versions
Windows	Vista, 7 (Enterprise and Ultimate)
Windows	8, 8.1 (Pro and Enterprise)
Windows server	2008, 2008 R2, 2012, 2012 R2

Table 14. BitLocker information displayed on the Device Detail page

Item

Description

MACHINE_BITLOCKER_VOLUME

Database field

Device ID

Unique identifier for the volume on the system.

DEVICE_ID

Persistent Volume ID

A persistent identifier for the volume on the system.

PERSISTENT_VOLUME_ID

Protection status

Denotes whether BitLocker is protecting the volume.

•

•

•

•

Type of encryption used. For example, AES-128. Possible values:

•

None

•

AES-128 with Diffuser

•

AES-256 with Diffuser

•

•

•

•

SELF_ENCRYPTION_DRIVE

_ENCRYPTION_METHOD

Hardware Encryption Status

NOTE: The Hardware Encryption Status property is supported on Windows 8 and higher systems.

•

•

•

•

•

HARDWARE_ENCRYPTION_STATUS

•

•

•

Status of the conversion. Possible values:

•

Unknown

•

Fully Decrypted

•

Fully Encrypted

•

Encryption In Progress

•

Decryption In Progress

•

Encryption Paused

•

Decryption Paused

CONVERSION_STATUS

Encryption Percentage

The extent of conversion, shown as a percentage.

ENCRYPTION_PERCENTAGE

Wiping Status

Status of any wiping of free space. Possible values:

•

Unknown

•

Free Space Not Wiped

•

Free Space Wiped

•

Free Space Wiping In Progress

•

Free Space Wiping Paused

WIPING_STATUS

Wiping Percentage

The extent of free space wiping, shown as a percentage.

WIPING_PERCENTAGE

Key Protectors

Key protectors in place. Possible values:

•

Unknown

•

Trusted Platform Module (TPM)

•

•

•

•

•

TPM and PIN and Startup Key

•

Public Key

•

Passphrase

•

TPM Certificate

•

CryptoAPI Next Generation (CNG) Protector

KEY_PROTECTORS

FileVault 2

FileVault 2 is a full disk encryption feature included with Mac OS X.

Table 15. Supported OSs for FileVault 2
Operating system	Versions
Mac OS X	10.8, 10.9, 10.10

Table 16. FileVault 2 information displayed on the Device Detail page
Item	Description	MACHINE_FILEVAULT_VOLUME Database field
Enabled	Indicates if FileVault is enabled.	IS_ENABLED
Personal Recovery Key	Indicates the existence of a Personal Recovery Key.	HAS_PERSONAL_RECOVERY_KEY
Institutional Recovery Key	Indicates the existence of a corporate-provisioned X.509-based asymmetric key pair.	HAS_INSTITUTIONAL_RECOVERY _KEY
Authorized Users	A list of accounts that can unlock the drive in EFI.	AUTHORIZED_USERS
Conversion Status	The status of the encryption process. Examples include Pending Conversion, Converting, Encryption Paused, and Complete.	CONVERSION_STATUS
Conversion Percentage	The extent of conversion, shown as a percentage.	CONVERSION_PERCENTAGE
Encryption Status	Status of the encryption. For example, Locked or Unlocked.	ENCRYPTION_STATUS
Encryption Type	Type of encryption used. For example, AES-XTS.	ENCRYPTION_TYPE
Device	Unique identifier for the volume on the system.	DEVICE_ID
Version		VERSION

Trusted Platform Module (TPM)

TPM is a dedicated microprocessor that secures hardware by integrating cryptographic keys into devices.

Table 17. Supported OSs for TPM
Operating system	Versions
Windows	Vista, 7, 8, 8.1
Windows Server	2008, 2008 R2, 2012, 2012 R2

Table 18. TPM information displayed on the Device Detail page
Item	Description	MACHINE_TPM Database field
Manufacturer	Manufacturer of the TPM chip.	MANUFACTURER_ID_TEXT
Manufacturer Version	Version of the TPM chip.	MANUFACTURER_VERSION
Manufacturer Version Info	Additional version information that is specific to the manufacturer.	MANUFACTURER_VERSION_INFO
Specification Version	The version of the Trusted Computing Group (TCG) specification that the TPM supports.	SPECIFICATION_VERSION
Physical Presence Version	The version of the Physical Presence Interface that the device supports. The Physical Presence Interface is a communication mechanism that runs device operations that require physical presence.	PHYSICAL_PRESENCE_VERSION _INFO
TPM Enabled	Step 1 of TPM initialization.	IS_TPM_ENABLED
TPM Activated	Step 2 of TPM initialization.	IS_TPM_ACTIVATED
TPM Owned	Step 3 of TPM initialization.	IS_TPM_OWNED

Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices

Add the DumpXmlInventory registry key to an Agent-managed Windows device

Add the DumpXmlInventory registry key to an Agentless-managed Windows device

If DumpXmlInventory is absent on a Windows DDP|E client, the KACE SMA cannot get access to the inventory .xml file in order to collect the relevant field information.

Dell Data Protection | Encryption is installed on the Windows device. Go to http://www.dell.com/support/home/us/en/19/product-support/product/dell-data-protection-encryption/drivers.

The procedure for adding the key is different for Agent-managed devices and Agentless-managed devices.

Add the DumpXmlInventory registry key to an Agent-managed Windows device

You must add DumpXmlInventory to a Windows DDP|E client before the KACE SMA can collect field information from that client's inventory.xml file.

For Agent-managed Windows devices, you can use a default offline KScript from the KACE SMA scripting feature to set the "dump inventory" registry key. This key is necessary for the DDP|E agent to write the detailed inventory XML data to the KACE SMA file system.

NOTE: After you set the registry key, the DDP|E service requires a full policy update schedule before the KACE SMA is able to collect inventory.

Go to the Script Detail page for the KACE SMA Enable Detailed DDPE Inventory (Windows) script.

On the left navigation bar, click Scripting.

From the list, select KACE SMA Enable Detailed DDPE Inventory (Windows).

In the Configure section, specify script settings:

Option	Description
Name	KACE SMA Enable Detailed DDPE Inventory (Windows), the name of this default script.
Enabled	Select this check box to run the script on the target devices. Do not enable a script until you are finished testing it and are ready to run it. Enable the script on a test label before you enable it on all devices.
Type	The script type is Offline KScripts.
Status	Indicates the readiness of the script to be rolled out to the network. Set the status to Production.
Description	Contains the brief description of the actions the default script performs.
Notes	Any additional information you want to provide.

In the Deploy section specify deployment options:

Option

Description

All Devices

Deploy to all devices. Clear the check box to limit the deployment to specific labels or devices.

Labels

Limit deployment to devices that belong to specified labels. To select labels, click Edit, drag labels to the Limit Deployment to window, then click Save.

If you select a label that has a Replication Share or an alternate download location, the appliance copies digital assets from that Replication Share or alternate download location instead of downloading them directly from the appliance.

NOTE: The appliance uses a Replication Share before it uses the KACE Alt Location.

Devices

Limit deployment to one or more devices. To find devices, begin typing in the field.

Operating Systems

LThe operating systems on which the application runs. Applications are deployed only to devices with the selected operating systems.

Click Manage Operating Systems.

In the Operating Systems dialog box that appears, select the OS versions in the navigation tree, as applicable.

You have an option to select OS versions by their family, product, architecture, or build version. You can choose a specific build versions, or a parent node, as needed. Selecting a parent node in the tree automatically selects the associated child nodes. This behavior allows you to select any future OS versions, as devices are added or upgraded in your managed environment. For example, to select all build current and future versions associated with the Windows 10 x64 architecture, under All > Windows > Windows 10, select x64.

In the Schedule section, specify run options:

Option

Description

None

Run in combination with an event rather than on a specific date or at a specific time.

Every n hours

Run at a specified interval.

Every day/specific day at HH:MM

Run daily at a specified time, or run on a designated day of the week at a specified time.

Run on the nth of every month/specific month at HH:MM

Run on the same day every month, or a specific month, at the specified time.

Run on the nth weekday of every month/specific month at HH:MM

Run on the specific weekday of every month, or a specific month, at the specified time.

Custom

Run according to a custom schedule.

Use standard 5-field cron format (extended cron format is not supported):

Use the following when specifying values:

•

Spaces ( ): Separate each field with a space.

•

Asterisks (*): Include the entire range of values in a field with an asterisk. For example, an asterisk in the hour field indicates every hour.

•

Commas (,): Separate multiple values in a field with a comma. For example, 0,6 in the day of the week field indicates Sunday and Saturday.

•

Hyphens (-): Indicate a range of values in a field with a hyphen. For example, 1-5 in the day of the week field is equivalent to 1,2,3,4,5, which indicates Monday through Friday.

•

Slashes (/): Specify the intervals at which to repeat an action with a slash. For example, */3 in the hour field is equivalent to 0,3,6,9,12,15,18,21. The asterisk (*) specifies every hour, but /3 restricts this to hours divisible by 3.

Examples:

•

15 * * * * Run 15 minutes after every hour every day

•

0 22 * * * Run at 22:00 every day

•

0 0 1 1,6 * Run at 00:00 on January 1 and June 1

•

30 8,12 * * 1-5 Run weekdays at 08:30 and 12:30

•

0 2 */2 * * Run every other day at 02:00

View Task Schedule

Click to view the task schedule. The Task Schedule dialog box displays a list of scheduled. Click a task to review the task details. For more information, see View task schedules.

Skip the Dependencies and Tasks sections.

Do one of the following:

◦

Click Run Now to immediately push the script to all devices.

Use this option with caution. See Using the Run and Run Now commands.

◦

Click Save.

Add the DumpXmlInventory registry key to an Agentless-managed Windows device

You must add DumpXmlInventory to a Windows DDP|E client before the KACE SMA can collect field information from that client's inventory.xml file.

For an Agentless-managed Windows device, the process requires that you create a new Group Policy Object on a Windows Server 2008 or 2012 device so that you can deploy the registry setting to multiple devices in a domain.

On a Windows Server 2008 or 2012 device, open the Group Policy Management Console.

Right-click Group Policy Objects and click New.

Provide a description name for the new GPO (for instance, Dell Data Protection | Encryption: Inventory Registry Setting) and click OK.

Right-click the new GPO and click Edit.

Browse to Computer Configuration > Preferences > Windows Settings > Registry.

Right-click Registry and select New > Registry Item.

On the General tab, select Update in the Action drop-down menu.

Select HKEY_LOCAL_MACHINE in the Hive drop-down list.

Specify a Key Path of SYSTEM\CurrentControlSet\services\DellMgmtAgent\Parameters.

10.

Specify a Value name of DumpXmlInventory.

11.

Select REG_DWORD in the Value type drop-down list.

12.

Specify 1 in the Value data field.

13.

Select the Hexadecimal option in the Base group, and click OK.

14.

Close the Group Policy Management Editor.

You can now link this new group policy object to a specific domain, Organizational Unit, and so on.

IMPORTANT: You should test the GPO on a specific computer or set of computers before deploying it to all systems.

KACE Systems Management Appliance 9.1 Common Documents - Administrator Guide

View device inventory and details

Groups and sections of items in device details

About Dell Data Protection | Encryption (DDP|E) and encryption information in device details

Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices