You can view the list of devices in inventory on the Devices page, and you can view information about any selected device on the Device Detail page.
1. |
a. |
Log in to the KACE SMA Administrator Console, http://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
b. |
2. |
The fields that are displayed depend on the type of device and its operating system. For example, if the device is a virtual machine, the Monitor field is not displayed, although the Video Controller is. In addition, some fields are available for some operating systems but not for others. For example, System Description is available for Windows or SNMP devices only.
To view tables describing the contents of the groups and sections that appear on this page, see Groups and sections of items in device details.
3. |
Optional: If change tracking is enabled for inventory information, click Show All History above the Summary section to see the history of inventory changes. |
The Device Details page for a device contains inventory information presented in sections that are collected in groups. The extent and focus of information included on the page depends on the device and any subtypes indicated.
NOTE: If you have assigned an Asset Subtype, you can choose whether to show or hide the details that appear for each Device on the Device Detail page. For example, for the subtype Printer, information that is irrelevant to printers, such as the items Installed Programs, Discovered Software, and Metered Software, could be made hidden. Whole groups can be hidden as well. See Add Asset Subtypes and select Device Detail page preferences. |
Scoped users can see the details of all devices, but can only edit the details of those devices that are associated with their role. For more information about user roles, see Add or edit User Roles.
The following groups can appear on the Device Details page:
Basic device identification information. The items are not separated into sections as in the other groups on the page. The entries that appear on the Device Detail page vary depending on the device, operating system (if relevant), connection type, and so on.
A field that indicates the inventory information was added manually, either through WSAPI or XML upload. click Edit to modify the information. |
||||||||||||||||||
A field that indicates how the device is being managed: Agent Device, Agentless Device, or Manually Entered Record. Click Edit to change connection protocols. |
||||||||||||||||||
A description of the device, populated by Agentless inventory for Windows and SNMP devices. |
||||||||||||||||||
KACE MDM devices only. Indicates the ownership of the device: Company, Personal or Unknown. |
||||||||||||||||||
The total amount of random-access memory (RAM) on the device. |
||||||||||||||||||
The operating system of the device, such as Windows, Mac OS X®, or Linux. |
||||||||||||||||||
The service pack version number (Windows or SUSE Linux Enterprise Server only). |
||||||||||||||||||
The amount of time the device has been running since it was restarted. |
||||||||||||||||||
The version number of the KACE SMA Agent installed on the device. |
||||||||||||||||||
The timezone used by the KACE SMA Agent installed on the device. |
||||||||||||||||||
|
||||||||||||||||||
|
||||||||||||||||||
The protocol, such as SNMP, used to collect inventory information from the device. |
||||||||||||||||||
The date and time that the device’s first inventory record was created. |
||||||||||||||||||
The date and time that the device’s inventory record was modified. |
||||||||||||||||||
Printers only. The contact information for the selected printer, such as an email address. This information is stored in the managed printer's SNMP sysContact field. |
||||||||||||||||||
Printers only. The location of the selected printer, such as the name of the organization. This information is stored in the managed printer's SNMP sysLocation field. |
||||||||||||||||||
Volume n |
The type and size of the disk drive’s file system, and amount of space used on the disk drive. To view changes to the drive usage, click Show Usage History link in this field. This information is updated when usage increases or decreases by 5% or more. There is one entry for each volume. For VMware® ESXi® host devices, each datastore associated with the ESXi host is listed as a volume. |
|||||||||||||||||
Click Force Inventory to immediately update inventory information for the device and synchronize the device with the appliance. Force Inventory is available only if the AMP connection to an Agent-managed device is active, or for Agentless devices, if the device is reachable. |
||||||||||||||||||
|
||||||||||||||||||
The following commands are available when you select a provisioned VMware virtual machine.
|
Additional details on items in the Summary section.
Information about the device’s hardware. If change history is enabled for this section, and the information in this section has changed, the Show Changes link appears next to the heading. Click Show Changes to view only those items that have changed. Click Hide Changes to view all items. |
||||||||||||||
The total amount of random-access memory (RAM) installed on the device. |
||||||||||||||
The amount of random-access memory (RAM) in use on the device. |
||||||||||||||
The maximum amount of random-access memory (RAM) that the device can support. |
||||||||||||||
Windows and KACE MDM devices only. The BIOS Asset Tag of a system. An Admin can use a bios utility to set this value on the system. |
||||||||||||||
The architecture of the device operating system, such as x86 or x64. |
||||||||||||||
See About Dell Data Protection | Encryption (DDP|E) and encryption information in device details. |
||||||||||||||
The configuration of CD-ROM and DVD-ROM drives installed on the device. |
||||||||||||||
Information about Dell hardware, including the Service Tag, System Type, Ship Date, Country, and warranty information. This section also includes a Days Left column, which indicates the number of days remaining in the warranty period, and Last Updated column, which indicates the last time the warranty information was refreshed. To update Dell Service information, click Refresh. |
||||||||||||||
Printers only. The make and model of the black toner. |
||||||||||||||
Printers only. The maximum level of the black toner powder. |
||||||||||||||
Printers only. The current level of the black toner powder. If the toner is not installed, a message appears in this field. |
||||||||||||||
Color printers only. The make and model of the cyan toner. |
||||||||||||||
Color printers only. The maximum level of the cyan toner powder. |
||||||||||||||
Color printers only. The current level of the cyan toner powder. If the toner is not installed, a message appears in this field. |
||||||||||||||
Color printers only. The make and model of the magenta toner. |
||||||||||||||
Color printers only. The maximum level of the magenta toner powder. |
||||||||||||||
Color printers only. The current level of the magenta toner powder. If the toner is not installed, a message appears in this field. |
||||||||||||||
Color printers only. The make and model of the yellow toner. |
||||||||||||||
Color printers only. The maximum level of the yellow toner powder. |
||||||||||||||
Color printers only. The current level of the yellow toner powder. If the toner is not installed, a message appears in this field. |
||||||||||||||
Volume n |
The type and size of the disk drive’s file system, and amount of space used on the disk drive. To view changes to the drive usage, click Show Usage History link in this field. This information is updated when usage changes by plus or minus 5%. |
|||||||||||||
Hewlett-Packard devices only. Information about the selected Hewlett-Packard (HP) device. This section is populated when you provide the manufacturer's API keys on the General Settings page. For more information, see Configure appliance General Settings with the Organization component enabled. |
||||||||||||||
Product Number: The specific number of the selected HP device. |
||||||||||||||
Last Updated: The time stamp of when the device information was last updated. |
||||||||||||||
Type: The description of the service status type. For example, Waranty, or something else. |
||||||||||||||
Service Level: A comma separated list of the device's service codes. |
||||||||||||||
Lenovo devices only. Information about the selected Lenovo device. This section is populated when you provide the manufacturer's API keys on the General Settings page. For more information, see Configure appliance General Settings with the Organization component enabled. |
||||||||||||||
Purchased: The date when the selected Lenovo device is purchased. |
||||||||||||||
Shipped: The date when the selected Lenovo device is shipped. |
||||||||||||||
In Warranty: Indicates if the selected Lenovo device is covered by the warranty (Yes or No). |
||||||||||||||
Country: The country where the selected Lenovo printer is purchased. |
||||||||||||||
Last Updated: The time stamp of when the device information was last updated. |
||||||||||||||
Type: The warranty type: UNKNOWN, BASE, UPGRADE, EXTENDED or INSTANT. |
||||||||||||||
The results of a SNMP Full Walk of data in the MIB (management information base) on a device, if you set up the Authenticated device discovery type to perform a Full Walk. This section does not appear if discovery was made with a Bulk GET. |
||||||||||||||
|
||||||||||||||
The address or location of the device as noted by the administrator. |
||||||||||||||
The Mobile Equipment Identifier (MEID) for the 3G mobile card in a mobile device. |
||||||||||||||
The device's order number. Only devices directly purchased from Google have an order number. |
||||||||||||||
An indicator of whether DHCP is enabled for the IPv4 address associated with this network interface. |
||||||||||||||
The date and time the device was last enrolled with the Google Admin console. |
||||||||||||||
The full parent path with the Google organization unit's name associated with the device. |
||||||||||||||
KACE MDM devices only. The IP or MAC address of the device. |
||||||||||||||
Information from devices managed by KACE Mobile Device Manager (KMDM), and AirWatch® |
||||||||||||||
The device’s Unique Device Identifier. For iOS devices only. |
||||||||||||||
DMM devices only. The type of mobile device. Examples include iPhone, iPad, iPod, Android Phone, and Android Tablet. |
||||||||||||||
KACE MDM and DMM devices only. The unique serial number for the device’s SIM card. |
||||||||||||||
KACE MDM and DMM devices only. International Mobile Equipment Identity number for the device. |
||||||||||||||
KACE MDM Android phones only. An indicator of whether the selected KACE MDM Android phone has voice roaming enabled. |
||||||||||||||
KACE MDM Android phones only. An indicator of whether the selected KACE MDM Android phone has data roaming enabled. |
||||||||||||||
KACE MDM devices only. The Mobile Equipment Identifier. This is the unique identifier of the selected mobile device. |
||||||||||||||
DMM devices only. Phone number associated with the device. |
||||||||||||||
KACE MDM and DMM devices only. The mobile network carrier. |
||||||||||||||
DMM devices only. Media access control address for Bluetooth on the device. |
||||||||||||||
KACE MDM and DMM devices only. Amount of battery charge at last update, in percent. |
||||||||||||||
The time stamp of when the device information was last updated. |
||||||||||||||
KACE MDM and AirWatch devices only. The date and time the device was last enrolled with KACE MDM or AirWatch console. |
||||||||||||||
KACE MDM iOS devices only. An indicator of whether the selected KACE MDM iOS device is supervised. This is the highest level of control on an iOS device. |
||||||||||||||
KACE MDM iOS supervised devices only. An indicator of whether the selected KACE MDM iOS device is in Lost mode. The Lost mode prevents a device from being unlocked by a third party. |
||||||||||||||
KACE MDM devices only. An indicator of whether the selected KACE MDM iOS device is in Encrypted mode. |
||||||||||||||
KACE MDM iOS devices only. An indicator of whether the selected KACE MDM iOS device is has the Locator Service enabled. This service retrieves the device location information, if the device is responding. |
||||||||||||||
KACE MDM iOS devices only. An indicator of whether the activation lock is enabled on the selected KACE MDM iOS device. This feature prevents anyone else from using an iOS device if it is lost or stolen. |
||||||||||||||
KACE MDM Android devices only. An indicator of whether the OS of the selected KACE MDM Android device is unlocked. |
||||||||||||||
AirWatch devices only. Indicates if the device meets pre-configured AirWatch compliance rules. |
||||||||||||||
AirWatch devices onlyThe name of the mobile network associated with the AirWatch device. |
||||||||||||||
KACE MDM iOS DEP-managed devices only.The bypass code that can be used as the device password, when activation lock is enabled. |
||||||||||||||
KACE MDM iOS DEP-managed devices only. Indicates if activation lock is enabled for the device. Activation lock allows users to bypass the password and log in to the device with the activation lock bypass code. |
||||||||||||||
KACE MDM iOS devices only. Indicates if the device is managed by the Apple Device Enrollment Program (DEP). |
||||||||||||||
KACE MDM iOS DEP-managed devices only. The name of the DEP profile associated with the device. |
||||||||||||||
KACE MDM iOS DEP-managed devices only. The name of the user account that assigned the DEP profile to the device. |
||||||||||||||
KACE MDM iOS DEP-managed devices only. The date when the DEP profile is assigned to the device. |
||||||||||||||
KACE MDM iOS DEP-managed devices only. The management status of the device:
|
||||||||||||||
KACE MDM iOS devices only. Indicates if cloud is enabled on the devices. |
||||||||||||||
KACE MDM iOS devices only. The date when Apple iCloud was last backed up on the device. |
||||||||||||||
KACE MDM iOS devices only. Indicates if the device is logged in to iCloud. |
||||||||||||||
KACE MDM Android devices only. The number of bytes the device received through a Wi-Fi network. |
||||||||||||||
KACE MDM Android devices only. The number of bytes the device sent through a Wi-Fi network. |
||||||||||||||
KACE MDM Android devices only. The number of bytes the device received through a mobile network. |
||||||||||||||
KACE MDM Android devices only. The number of bytes the device sent through a mobile network. |
||||||||||||||
The version number of the KACE SMA Agent installed on the device. |
||||||||||||||
The version of Agent Messaging Protocol (AMP) used to connect the device to the KACE SMA. |
||||||||||||||
The time the Agent Messaging Protocol (AMP) service on the device connected to the KACE SMA. |
||||||||||||||
The character string used to identify the device in the KACE SMA database. |
||||||||||||||
The unique number used to identify the device in the KACE SMA database. |
||||||||||||||
A field that indicates how the device is being managed: Agent Device, Agentless Device, or Manually Entered Record. Click Edit to change connection protocols. |
||||||||||||||
The time of the most recent update to the KACE SMA Agent, if any. |
||||||||||||||
The operating system of the device, such as Windows, Mac OS X, or Linux. |
||||||||||||||
The service pack version number (Windows or SUSE Linux Enterprise Server only). |
||||||||||||||
The architecture of the device operating system, such as x86 or x64. |
||||||||||||||
The amount of time the device has been running since it was restarted. |
||||||||||||||
The status of the Windows Management Instrumentation (WMI) service (Windows Devices only). |
||||||||||||||
See About Dell Data Protection | Encryption (DDP|E) and encryption information in device details. |
||||||||||||||
Identifies encryption technology in place, and whether the encryption is enabled. |
||||||||||||||
Configuration and status information about Windows BitLocker. |
||||||||||||||
Configuration and status information about Mac OS X FileVault 2. |
||||||||||||||
The longitude of the device detected during the last update. |
||||||||||||||
The time stamp of when the device information was last updated. |
||||||||||||||
Indicates if the virtual machine is running. Possible values:
|
||||||||||||||
The virtual machine status. Possible values:
|
||||||||||||||
When a vCenter is selected, this group lists the ESXi hosts managed by the vCenter. |
||||||||||||||
Information about actions to be performed on the device.
Information related to patching and device vulnerabilities.
A list of the patches detected and deployed on the device. If patch attempts have been made, but they have failed, you can click Reset Tries to reset the number of patch attempts to the maximum allowed. |
||
Threats that are harmful to applications, processes, startup items, or services on the device. |
||
The results of OVAL (Open Vulnerability Assessment Language) vulnerability tests that have been run on this device. Only tests that failed on this device are listed by the OVAL ID and marked as Vulnerable. Tests that passed are grouped and marked as Safe. |
||
The results of FDCC/SCAP Configuration Scans that have been run on this device. |
Additional inventory information about selected Dell client systems using Dell Command | Monitor.
DCM log entries. These can indicate hardware errors detected by firmware. |
||
For classes and properties queried by the KACE SMA using Dell Command | Monitor, see About Dell Command | Monitor.
Information regarding updates and inventory (for Dell devices only).
The Dell updates that are scheduled to run on this device, and the time they are scheduled to run. |
||
A list of the updates, such as driver updates, that have been performed on this device. |
Information related to appliance records.
• |
Management Service Logs: The primary role of appliance Management Service is to run the offline KScripts. The Management Service logs display the steps performed by Management |
• |
Bootstrap Logs: The appliance sends a bootstrap request to get inventory information for devices that have checked in for the first time. The logs related to this request are displayed in Bootstrap logs. |
• |
Client Logs: The appliance sends a request to the Agent to get inventory information periodically. A script runs on the device, then sends the inventory information to the appliance and inventory is uploaded to the appliance. The Agent logs display these actions. |
• |
Scripting Updater: A request is initiated periodically from the device to get the latest information related to the changes in offline KScripts. Scripting Updater logs display this information. |
• |
Agentless Inventory Status Messages: The log displays messages related to collecting and submitting inventory data from Agentless-managed devices. |
The logs for the KACE SMA Agent. A question mark indicates that its status is unknown. |
||
Details about User Console packages installed on this device. |
||
This section displays the details of the Asset associated with this device. Clicking the Edit this Asset link enables you to edit the asset information.
Assets that are related to this asset, such as parent or child assets. |
||
If devices in the network have the DDP|E client installed, the KACE SMA can collect status and configuration information and display it on the Device Detail page.
A requirement for the KACE SMA being able to collect detailed inventory from Windows DDP|E clients is to set the DumpXmlInventory key in the client.
This registry value causes DDP|E to write an inventory.xml file to the target device, which is then parsed by inventory. See Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices.
This requirement applies only to Windows.
DDP|E consists of applications that enable a user to:
An identification of the DDP|E client used by the DDP|E server. |
||
Example values are Protected and Unprotected. Values of Locked or Unknown might indicate a problem. |
||
Timestamp of when the last DDP|E client inventory occurred. Not to be confused with K1 inventory. |
BitLocker is a full disk encryption feature included with Windows.
|
||||||||||
Type of encryption used. For example, AES-128. Possible values:
|
||||||||||
|
||||||||||
|
||||||||||
Status of the conversion. Possible values:
|
||||||||||
Status of any wiping of free space. Possible values:
|
||||||||||
Key protectors in place. Possible values:
|
FileVault 2 is a full disk encryption feature included with Mac OS X.
Indicates the existence of a corporate-provisioned X.509-based asymmetric key pair. |
||
The status of the encryption process. Examples include Pending Conversion, Converting, Encryption Paused, and Complete. |
||
Status of the encryption. For example, Locked or Unlocked. |
||
If DumpXmlInventory is absent on a Windows DDP|E client, the KACE SMA cannot get access to the inventory .xml file in order to collect the relevant field information.
Dell Data Protection | Encryption is installed on the Windows device. Go to http://www.dell.com/support/home/us/en/19/product-support/product/dell-data-protection-encryption/drivers.
You must add DumpXmlInventory to a Windows DDP|E client before the KACE SMA can collect field information from that client's inventory.xml file.
1. |
a. |
Log in to the KACE SMA Administrator Console, http://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
b. |
c. |
2. |
KACE SMA Enable Detailed DDPE Inventory (Windows), the name of this default script. | |
The script type is Offline KScripts. | |
Indicates the readiness of the script to be rolled out to the network. Set the status to Production. | |
Contains the brief description of the actions the default script performs. | |
3. |
Deploy to all devices. Clear the check box to limit the deployment to specific labels or devices. | |||||
Limit deployment to devices that belong to specified labels. To select labels, click Edit, drag labels to the Limit Deployment to window, then click Save. | |||||
Limit deployment to one or more devices. To find devices, begin typing in the field. | |||||
|
4. |
Run in combination with an event rather than on a specific date or at a specific time. | |||||||||||
Every n hours |
|||||||||||
Run daily at a specified time, or run on a designated day of the week at a specified time. | |||||||||||
Run on the nth of every month/specific month at HH:MM |
Run on the same day every month, or a specific month, at the specified time. | ||||||||||
Run on the nth weekday of every month/specific month at HH:MM |
Run on the specific weekday of every month, or a specific month, at the specified time. | ||||||||||
Run according to a custom schedule. Use standard 5-field cron format (extended cron format is not supported): Use the following when specifying values:
| |||||||||||
Click to view the task schedule. The Task Schedule dialog box displays a list of scheduled. Click a task to review the task details. For more information, see View task schedules. |
5. |
◦ |
Click Run Now to immediately push the script to all devices. |
Use this option with caution. See Using the Run and Run Now commands.
◦ |
Click Save. |
You must add DumpXmlInventory to a Windows DDP|E client before the KACE SMA can collect field information from that client's inventory.xml file.
1. |
2. |
3. |
Provide a description name for the new GPO (for instance, Dell Data Protection | Encryption: Inventory Registry Setting) and click OK. |
4. |
5. |
6. |
7. |
8. |
9. |
10. |
11. |
12. |
13. |
14. |
You can now link this new group policy object to a specific domain, Organizational Unit, and so on.
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy