Enable Agentless management by entering device information manually
To manage devices without installing KACE Agent software, you can enable Agentless management using Discovery information or by entering device connection details manually.
Features available to Agentless devices differ from those features available to Agent-managed devices. See Features available for each device management method.
You can enable Agentless management using Discovery information.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
Select Choose Action > Provision > Agentless: Automatic. |
|
 : Agentless management is enabled for the device.
 : Agentless management is enabled for the device, but the device is not currently reachable.
|
Depending on the device, the appliance uses various connection types to run commands on the selected devices, obtain inventory information, and display that information on the Device Detail page. Information is updated according to the inventory schedule for Agentless devices. See:
You can enable Agentless management by entering device information manually.
You can choose from the following connection types: SSH, SNMP, WinRM, and VMware. WinRM is the connection type to use for Windows devices.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
2. |
Select Choose Action > New > Agentless Device to display the Agentless Device Connection Details page. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the device and obtain inventory information, in this case, SSH. |
|
Port |
The port number the appliance uses to connect to the device. No input is required for the following the default port number (22). |
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed.
See Add and edit User/Password credentials. |
|
Sudo Password |
The name of a service user account with permission to connect to devices. Using a service account and Sudo Password is useful when you want to avoid using root credentials to access devices. On some devices, however, higher privileges enable the appliance to retrieve more detailed inventory information. |
|
Operating System |
The operating system of the device. |
|
Shell |
The shell to use during connections. See Shell support for SSH connections. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the device and obtain inventory information, in this case, SNMP.
SNMP (Simple Network Management Protocol) is a protocol for monitoring managed devices on a network. To enable SNMP, port 161 must be open on the appliance and on the device.
SNMP scan results include all SNMP capable devices. Remote shell extensions enable the appliance to connect, run commands, and capture information that can be managed as inventory. For more information about SNMP options, see Add a Discovery Schedule for SNMP-enabled non-computer devices. |
|
SNMP Version |
The version of SNMP to use for connections. SNMPv1 and SNMPv2c do not use authentication or encryption.
SNMP v3 uses authentication and encryption algorithms to increase the security of SNMP communications. When you configure the SNMP v3 options, the appliance performs an SNMP v3 scan on selected devices. If that scan fails, the appliance attempts an SNMP v1 scan using the specified Public String |
|
Credentials |
The details of the service account required to connect to the device and run commands using SNMP v3. Select existing credentials from the drop-down list, or click Add new credential to add credentials not already listed. Credentials are not required for SNMPv1 and SNMPv2c.
See Add and edit User/Password credentials. |
|
Inventory Configurations |
One or more inventory configurations for the new SNMP agentless device, such as Brother Laser Printer: Color, and others. |
|
Inventory Type |
The method used to collect inventory information.
|
• |
Inventory: Collect a subset of device information, such as the IP Address, MAC Address, and device name. |
|
• |
Inventory/Walk: Conduct a full SNMP walk to collect inventory information. The full walk results appear on the Device Detail page. |
|
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the Windows device and obtain inventory information, in this case, WinRM. |
|
Port |
The port number the appliance uses to connect to the device. No input is required for the following default port number: 5985. |
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed.
See Add and edit User/Password credentials. |
|
Require Kerberos |
If selected, Kerberos is required for authentication. NTLM will not be used as an alternative when Kerberos is unavailable.
Using Kerberos requires DNS Lookup to be enabled in the same discovery configuration. The DNS Server is also required in the local appliance network settings. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Inventory Hyper-V or Virtual Machine Manager |
Select this option to allow the appliance to import a Microsoft Hyper-V or System Center Virtual Machine Manager infrastructure using agentless management. For more information about this feature, see Add a Discovery Schedule for a Microsoft Hyper-V or System Center Virtual Machine Manager. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The host name or IP address of the ESXi host or the vCenter Server. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as VMware devices. For example, hypervisors (ESXi hosts). See About Asset Subtypes, custom fields, and device detail preferences. |
|
Connection Type |
The connection method to use to connect to the VMware device and obtain inventory information. |
|
VMware Type |
The VMware device type: ESXi or vCenter Server.
|
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed. An account with read-only access can be used. See Add and edit User/Password credentials. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
Operating systems vary in their support of shells used for SSH connections between the appliance and managed devices.
The following table shows the shells available for SSH connections for each operating system.
Table 22. Shell support for SSH connections by operating system
|
Operating system |
Default shell |
Supported shells |
|
CentOS |
bash |
bash, sh |
|
Debian Linux |
bash |
bash, sh |
|
Fedora |
bash |
bash, sh |
|
FreeBSD |
csh |
bash, csh, sh |
|
Mac OS X |
sh |
bash, sh |
|
openSUSE/SLES™ |
bash |
bash, sh |
|
Oracle Enterprise Linux |
bash |
bash, sh |
|
Red Hat® Enterprise Linux® |
bash |
bash, sh |
|
Ubuntu |
bash |
bash, sh |
You can edit the device connection details for Agentless devices and you can delete Agentless devices as needed.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
In the Summary section, click Edit in the Device Entry Type row to display the Agentless Device Connection Details page. |
Shell support for SSH connections
To manage devices without installing KACE Agent software, you can enable Agentless management using Discovery information or by entering device connection details manually.
Features available to Agentless devices differ from those features available to Agent-managed devices. See Features available for each device management method.
You can enable Agentless management using Discovery information.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
Select Choose Action > Provision > Agentless: Automatic. |
|
: Agentless management is enabled for the device.
: Agentless management is enabled for the device, but the device is not currently reachable. |
Depending on the device, the appliance uses various connection types to run commands on the selected devices, obtain inventory information, and display that information on the Device Detail page. Information is updated according to the inventory schedule for Agentless devices. See:
You can enable Agentless management by entering device information manually.
You can choose from the following connection types: SSH, SNMP, WinRM, and VMware. WinRM is the connection type to use for Windows devices.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
2. |
Select Choose Action > New > Agentless Device to display the Agentless Device Connection Details page. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the device and obtain inventory information, in this case, SSH. |
|
Port |
The port number the appliance uses to connect to the device. No input is required for the following the default port number (22). |
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed.
See Add and edit User/Password credentials. |
|
Sudo Password |
The name of a service user account with permission to connect to devices. Using a service account and Sudo Password is useful when you want to avoid using root credentials to access devices. On some devices, however, higher privileges enable the appliance to retrieve more detailed inventory information. |
|
Operating System |
The operating system of the device. |
|
Shell |
The shell to use during connections. See Shell support for SSH connections. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the device and obtain inventory information, in this case, SNMP.
SNMP (Simple Network Management Protocol) is a protocol for monitoring managed devices on a network. To enable SNMP, port 161 must be open on the appliance and on the device.
SNMP scan results include all SNMP capable devices. Remote shell extensions enable the appliance to connect, run commands, and capture information that can be managed as inventory. For more information about SNMP options, see Add a Discovery Schedule for SNMP-enabled non-computer devices. |
|
SNMP Version |
The version of SNMP to use for connections. SNMPv1 and SNMPv2c do not use authentication or encryption.
SNMP v3 uses authentication and encryption algorithms to increase the security of SNMP communications. When you configure the SNMP v3 options, the appliance performs an SNMP v3 scan on selected devices. If that scan fails, the appliance attempts an SNMP v1 scan using the specified Public String |
|
Credentials |
The details of the service account required to connect to the device and run commands using SNMP v3. Select existing credentials from the drop-down list, or click Add new credential to add credentials not already listed. Credentials are not required for SNMPv1 and SNMPv2c.
See Add and edit User/Password credentials. |
|
Inventory Configurations |
One or more inventory configurations for the new SNMP agentless device, such as Brother Laser Printer: Color, and others. |
|
Inventory Type |
The method used to collect inventory information.
|
• |
Inventory: Collect a subset of device information, such as the IP Address, MAC Address, and device name. |
|
• |
Inventory/Walk: Conduct a full SNMP walk to collect inventory information. The full walk results appear on the Device Detail page. |
|
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the Windows device and obtain inventory information, in this case, WinRM. |
|
Port |
The port number the appliance uses to connect to the device. No input is required for the following default port number: 5985. |
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed.
See Add and edit User/Password credentials. |
|
Require Kerberos |
If selected, Kerberos is required for authentication. NTLM will not be used as an alternative when Kerberos is unavailable.
Using Kerberos requires DNS Lookup to be enabled in the same discovery configuration. The DNS Server is also required in the local appliance network settings. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Inventory Hyper-V or Virtual Machine Manager |
Select this option to allow the appliance to import a Microsoft Hyper-V or System Center Virtual Machine Manager infrastructure using agentless management. For more information about this feature, see Add a Discovery Schedule for a Microsoft Hyper-V or System Center Virtual Machine Manager. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The host name or IP address of the ESXi host or the vCenter Server. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as VMware devices. For example, hypervisors (ESXi hosts). See About Asset Subtypes, custom fields, and device detail preferences. |
|
Connection Type |
The connection method to use to connect to the VMware device and obtain inventory information. |
|
VMware Type |
The VMware device type: ESXi or vCenter Server.
|
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed. An account with read-only access can be used. See Add and edit User/Password credentials. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
Operating systems vary in their support of shells used for SSH connections between the appliance and managed devices.
The following table shows the shells available for SSH connections for each operating system.
Table 22. Shell support for SSH connections by operating system
|
Operating system |
Default shell |
Supported shells |
|
CentOS |
bash |
bash, sh |
|
Debian Linux |
bash |
bash, sh |
|
Fedora |
bash |
bash, sh |
|
FreeBSD |
csh |
bash, csh, sh |
|
Mac OS X |
sh |
bash, sh |
|
openSUSE/SLES™ |
bash |
bash, sh |
|
Oracle Enterprise Linux |
bash |
bash, sh |
|
Red Hat® Enterprise Linux® |
bash |
bash, sh |
|
Ubuntu |
bash |
bash, sh |
You can edit the device connection details for Agentless devices and you can delete Agentless devices as needed.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
In the Summary section, click Edit in the Device Entry Type row to display the Agentless Device Connection Details page. |
Edit Agentless device connection details or delete Agentless devices
To manage devices without installing KACE Agent software, you can enable Agentless management using Discovery information or by entering device connection details manually.
Features available to Agentless devices differ from those features available to Agent-managed devices. See Features available for each device management method.
You can enable Agentless management using Discovery information.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
Select Choose Action > Provision > Agentless: Automatic. |
|
: Agentless management is enabled for the device.
: Agentless management is enabled for the device, but the device is not currently reachable. |
Depending on the device, the appliance uses various connection types to run commands on the selected devices, obtain inventory information, and display that information on the Device Detail page. Information is updated according to the inventory schedule for Agentless devices. See:
You can enable Agentless management by entering device information manually.
You can choose from the following connection types: SSH, SNMP, WinRM, and VMware. WinRM is the connection type to use for Windows devices.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
2. |
Select Choose Action > New > Agentless Device to display the Agentless Device Connection Details page. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the device and obtain inventory information, in this case, SSH. |
|
Port |
The port number the appliance uses to connect to the device. No input is required for the following the default port number (22). |
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed.
See Add and edit User/Password credentials. |
|
Sudo Password |
The name of a service user account with permission to connect to devices. Using a service account and Sudo Password is useful when you want to avoid using root credentials to access devices. On some devices, however, higher privileges enable the appliance to retrieve more detailed inventory information. |
|
Operating System |
The operating system of the device. |
|
Shell |
The shell to use during connections. See Shell support for SSH connections. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the device and obtain inventory information, in this case, SNMP.
SNMP (Simple Network Management Protocol) is a protocol for monitoring managed devices on a network. To enable SNMP, port 161 must be open on the appliance and on the device.
SNMP scan results include all SNMP capable devices. Remote shell extensions enable the appliance to connect, run commands, and capture information that can be managed as inventory. For more information about SNMP options, see Add a Discovery Schedule for SNMP-enabled non-computer devices. |
|
SNMP Version |
The version of SNMP to use for connections. SNMPv1 and SNMPv2c do not use authentication or encryption.
SNMP v3 uses authentication and encryption algorithms to increase the security of SNMP communications. When you configure the SNMP v3 options, the appliance performs an SNMP v3 scan on selected devices. If that scan fails, the appliance attempts an SNMP v1 scan using the specified Public String |
|
Credentials |
The details of the service account required to connect to the device and run commands using SNMP v3. Select existing credentials from the drop-down list, or click Add new credential to add credentials not already listed. Credentials are not required for SNMPv1 and SNMPv2c.
See Add and edit User/Password credentials. |
|
Inventory Configurations |
One or more inventory configurations for the new SNMP agentless device, such as Brother Laser Printer: Color, and others. |
|
Inventory Type |
The method used to collect inventory information.
|
• |
Inventory: Collect a subset of device information, such as the IP Address, MAC Address, and device name. |
|
• |
Inventory/Walk: Conduct a full SNMP walk to collect inventory information. The full walk results appear on the Device Detail page. |
|
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The hostname or IP address of the device. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as Device assets that are computers, printers, or routers, and Software assets that run on Windows, Mac, or Linux systems in the inventory. See About Asset Subtypes, custom fields, and device detail preferences.
|
|
NOTE: In a default installation, Device Assets include two Asset Subtypes for printer devices: Laser Printer: Color and Laser Printer: Monochrome. Each of these subtypes provides a common set of fields that apply to most printers. The appliance also comes with a set of printer templates for typical SNMP-enabled printer models, based on these Asset Subtypes. You can edit these templates or add new ones, as needed. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle. For more information, see About printer templates. | |
|
Connection Type |
The connection method to use to connect to the Windows device and obtain inventory information, in this case, WinRM. |
|
Port |
The port number the appliance uses to connect to the device. No input is required for the following default port number: 5985. |
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed.
See Add and edit User/Password credentials. |
|
Require Kerberos |
If selected, Kerberos is required for authentication. NTLM will not be used as an alternative when Kerberos is unavailable.
Using Kerberos requires DNS Lookup to be enabled in the same discovery configuration. The DNS Server is also required in the local appliance network settings. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
|
Inventory Hyper-V or Virtual Machine Manager |
Select this option to allow the appliance to import a Microsoft Hyper-V or System Center Virtual Machine Manager infrastructure using agentless management. For more information about this feature, see Add a Discovery Schedule for a Microsoft Hyper-V or System Center Virtual Machine Manager. |
|
Relay Device |
The name of the device that you want to use as a relay for agentless device inventory.
A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. You can select a relay device on the Discovery Schedule Detail page. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network. |
|
Option |
Description |
|
Name |
The host name or IP address of the ESXi host or the vCenter Server. |
|
Asset Subtype |
The asset subcategory, if applicable. This information enables you to identify and manage subtypes of assets, such as VMware devices. For example, hypervisors (ESXi hosts). See About Asset Subtypes, custom fields, and device detail preferences. |
|
Connection Type |
The connection method to use to connect to the VMware device and obtain inventory information. |
|
VMware Type |
The VMware device type: ESXi or vCenter Server.
|
|
Credentials |
The details of the service account required to connect to the device and run commands. Select existing credentials from the drop-down list, or select Add new credential to add credentials not already listed. An account with read-only access can be used. See Add and edit User/Password credentials. |
|
Log Level |
The level of information to display on the Device Detail page. To see only the most important messages, select Critical. To see all messages, select Debug. |
|
Enable Inventory |
The inventory collection option. If this option is selected, the appliance collects inventory information for the device according to the Agentless device inventory schedule. If this option is cleared, inventory information is not collected. In both cases, however, Agentless devices are counted. |
|
DNS Server |
The hostname of the DNS server to use when identifying the device hostname and other information. Providing the DNS server information enables the appliance to match the device to existing inventory information during updates. If the appliance cannot detect the device due to changes made to its hostname or IP address, inventory fails. |
Operating systems vary in their support of shells used for SSH connections between the appliance and managed devices.
The following table shows the shells available for SSH connections for each operating system.
Table 22. Shell support for SSH connections by operating system
|
Operating system |
Default shell |
Supported shells |
|
CentOS |
bash |
bash, sh |
|
Debian Linux |
bash |
bash, sh |
|
Fedora |
bash |
bash, sh |
|
FreeBSD |
csh |
bash, csh, sh |
|
Mac OS X |
sh |
bash, sh |
|
openSUSE/SLES™ |
bash |
bash, sh |
|
Oracle Enterprise Linux |
bash |
bash, sh |
|
Red Hat® Enterprise Linux® |
bash |
bash, sh |
|
Ubuntu |
bash |
bash, sh |
You can edit the device connection details for Agentless devices and you can delete Agentless devices as needed.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
In the Summary section, click Edit in the Device Entry Type row to display the Agentless Device Connection Details page. |
Using SNMP Inventory Configurations to identify specific SNMP objects and non-computer devices to add to inventory
You can identify specific SNMP (Simple Network Management Protocol) objects and non-computer devices to be inventoried so that you can expand or limit the inventory to fit your needs. In addition, the appliance enables you to map SNMP OIDs (Object Identifiers) to particular fields in the appliance inventory table, using Asset Subtypes.
SNMP is one of the possible methods that appliance Agentless Inventory uses to extract data for inventory and integration into the appliance. The appliance uses the RFC1213 MIB (Management Information Base) as the primary data gathering layer, because it contains data that is specific to all SNMP-capable devices. All SNMP-capable devices expose RFC1213 data. For more information, go to http://tools.ietf.org/html/rfc1213.
With the appliance SNMP inventory configuration feature, you can define an additional set of OIDs to be collected during inventory beyond the standard RFC1213 data. This enables instant extensibility and robustness to what would otherwise be limited in terms of the amount of data that could be gathered from each device.
If you do not have a vendor-provided management information base (MIB) or a generally available MIB for an object, you can obtain a list of object identifiers by using the appliance to probe the object.
You can define an additional set of OIDs to be collected during inventory beyond the standard RFC1213 data, which expands the amount of data that can be gathered from each device. To find these OIDs, you can use a MIB browser on MIBs you have obtained elsewhere. With the appliance, you can perform an SNMP full walk either through device discovery or device inventory if you do not have access to a MIB otherwise.
|
2. |
Go to the Device Detail page for the scanned object: |
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
Click SNMP Data in the Inventory section to display the results of the full walk. |
Map the OIDs to fields in the appliance inventory table so that their information can be integrated into inventory. See Map Object Identifiers to fields in the inventory table.
You can map SNMP (Simple Network Management Protocol) OIDs (Object Identifiers) to particular fields that you have created as Asset Subtypes. You can use the resulting SNMP Inventory Configurations to expand your inventory information to include data from non-computer devices.
The SNMP Inventory Configurations list page provides you with the tool to create new mappings or manage existing ones.
After you have determined the OID data you want to collect, you select a subtype for the device from categories that are the same as those on the Device Detail page. You then select a property of that category, the result of which maps the OID to a field in the inventory table. The SNMP object appears in the device inventory after the next scan.
For example, if you had a printer in inventory, added manually or through a discovery schedule, you could use an SNMP Inventory Configuration to have the printer report cartridge ink levels to the appliance. In this case, you would use an Asset Subtype of Printer that you have created as a subtype of device, with a field named Toner Level.
|
1. |
Go to the SNMP Inventory Configurations list page: |
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
e. |
Click Save at the end of the row. |
Apply the configuration to an object. See Apply an SNMP Inventory Configuration to a device.
You can apply an SNMP Inventory Configuration to a device so that the additional data can be collected during the next scan for that device.
You have created the configuration. See Map Object Identifiers to fields in the inventory table.
|
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
|
3. |
Select Choose Action > Apply SNMP Configurations to display the Apply SNMP Configurations dialog. |
|
5. |
Click Apply SNMP Configurations. |
The Devices list page reappears after the configuration is applied.
The information appears for the device after the next regularly scheduled reporting time or forced inventory update.
The appliance also comes with a set of printer templates for typical SNMP (Simple Network Management Protocol) printer models. You can apply these SNMP configurations to printer devices, as needed.
The SNMP Inventory Configurations list page displays the available printer templates. When you apply a printer template to a device, the data defined in the template, such as toner levels or descriptions, is collected for the printer in the next inventory cycle.
A default installation includes a set of templates for the following laser printers, with two variation for each brand to accommodate monochrome and color printers: Brother, Canon, HP, Lexmark, and Xerox.
You can edit or create these templates, as needed. To create or edit a printer template, you must have the relevant SNMP OIDs (Object Identifiers) for the fields that exist as the associated Asset Subtypes. The appliance comes with two Asset Subtypes that capture printer-specific fields such as toner levels: Laser Printer: Color and Laser Printer: Monochrome. For more information about mapping OIDs, see Map Object Identifiers to fields in the inventory table. For details about Asset Subtypes and to find out how they relate to SNMP configurations, see About Asset Subtypes, custom fields, and device detail preferences.
.