立即与支持人员聊天
与支持团队交流

KACE Systems Management Appliance 11.1 Common Documents - Administrator Guide

About the KACE Systems Management Appliance Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Registering KACE Agent with the appliance Provisioning the KACE Agent Manually deploying the KACE Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles Using Task Chains
Patching devices and maintaining security
Using the Security Dashboard About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Windows Feature Updates Managing Dell devices and updates Managing Linux package upgrades Maintaining device and appliance security
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the appliance
Appendixes Glossary About us Legal notices

Configure Linux package upgrade schedules

Configure Linux package upgrade schedules

You can create and configure Linux package upgrade schedules and set a time for them to run.

a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Linux Package Upgrades.
c.
On the Linux Package Upgrades Management panel, click Schedules.
d.
On the Linux Package Upgrade Schedules list page, do one of the following:
To edit an existing schedule, click the schedule name in the list, then on the Linux Package Upgrade Summary page that appears, click Edit.
The Schedule Detail wizard appears.
2.
In the Schedule Detail wizard, on the General Information page, configure general information about the schedule:

Option

Description

Name

A name that identifies the schedule. This name appears on the Linux Package Upgrade Schedules list page.

Description

A brief description of the Linux package upgrade schedule.

3.
On the Action page, complete the following steps:
a.
Under Action, select one of the following actions.

The results of the selected action depends on whether your managed Linux devices are associated with their applicable package repository. To select all applicable devices, ensure that each of your managed devices is using the appropriate package repository.

Action

Description

Detect All

Scans for all Linux package upgrades that include security updates.

Detect and Upgrade All

Scans for all Linux package upgrades that include security updates, downloads the applicable files, and deploys the upgrade to the selected devices.

b.
Under Detect All, select the amount of time for the detect action to complete.
c.
Detect and Upgrade All actions only. Under Upgrade All, select the amount of time for the upgrade action to complete.
4.
Click Next.
5.
On the Devices page, specify the devices you want to associate with this schedule.

Action

Description

All Devices

To apply this schedule to all managed devices, select this option. Clear the check box to limit the patch action to specific labels or devices.

Device Labels

Restrict the action to the feature updates using the associated labels that you select. This is the most commonly used option.

a.
Click Manage Associated Labels.
b.
In the Select Labels dialog box that appears, drag one or more labels (as applicable) to the Limit Run to area, then click OK.

To use this option, you must already have Smart Labels for the feature updates. See Using Smart Labels for patching.

Devices

Run patch actions on the devices that you select. The list that appears shows only applicable Linux devices.

Operating Systems

Select the operating systems of the devices that you want to upgrade. Only applicable Linux operating systems appear in the dialog box. The default is all operating systems. When this option is configured, the schedule only applies to devices with the selected operating systems.

a.
Click Manage Operating Systems.
b.
In the Operating Systems dialog box that appears, select the OS versions in the navigation tree, as applicable.

You have an option to select OS versions by their family, product, architecture, release ID, or build version. You can choose a specific build version, or a parent node, as needed. Selecting a parent node in the tree automatically selects the associated child nodes. This behavior allows you to select any future OS versions, as devices are added or upgraded in your managed environment. For example, to select all build current and future versions associated with the Linux Ubuntu x86_64 architecture, under Linux > Ubuntu, select x64.

6.
Click Next.
7.
In the Schedule section, specify the applicable options for the schedule.

Action

Description

None

Run in combination with an event rather than on a specific date or at a specific time. This option is useful if you want to patch servers manually, or perform patch actions that you do not want to run on a schedule.

Every _ hours

Run at a specified interval.

Every day/specific day at HH:MM

Run daily at a specified time, or run on a designated day of the week at a specified time.

Run on the nth of every month/specific month at HH:MM

Run on the nth day every month, (for example, the first or the second) day of every month, or a specific month, at the specified time.

Run on the nth weekday of every month/specific month at HH:MM

Run on the specific weekday of every month, or a specific month, at the specified time.

Custom

Run according to a custom schedule.

Use standard 5-field cron format (extended cron format is not supported):

Use the following when specifying values:

Spaces ( ): Separate each field with a space.
Asterisks (*): Include the entire range of values in a field with an asterisk. For example, an asterisk in the hour field indicates every hour.
Commas (,): Separate multiple values in a field with a comma. For example, 0,6 in the day of the week field indicates Sunday and Saturday.
Hyphens (-): Indicate a range of values in a field with a hyphen. For example, 1-5 in the day of the week field is equivalent to 1,2,3,4,5, which indicates Monday through Friday.
Slashes (/): Specify the intervals at which to repeat an action with a slash. For example, */3 in the hour field is equivalent to 0,3,6,9,12,15,18,21. The asterisk (*) specifies every hour, but /3 restricts this to hours divisible by 3.

Examples:

View Task Schedule

Click to view the task schedule. The Task Schedule dialog box displays a list of scheduled. Click a task to review the task details. For more information, see View task schedules.

Run on next connection if offline

Run the action the next time the managed device connects to the appliance, if the device is currently offline. This option is useful for the devices that are periodically offline. If this option is not selected, and the device is offline, the action does not run again until the next scheduled time.

8.
Click Save.
The Linux Upgrade Package Schedule Summary page appears, displaying the newly created or updated schedule. For more information about this page, see Review Linux package upgrade schedule details. If you added any devices that match the Smart Label criteria, they are automatically included in the upgrade schedule.

Review Linux package upgrade schedule details

Review Linux package upgrade schedule details

When you configure a Linux package upgrade schedule, this page displays details about the schedule configuration and its status.

1.
Go to the Linux Package Upgrade Schedule Summary page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Linux Package Upgrades.
c.
On the Linux Package Upgrades Management panel, click Schedules.
2.
Review the Devices Targeted field. This number specifies the number of Linux devices that are selected for upgrade, as specified in the schedule.
3.
Review the contents of the Configuration section.

Option

Description

Created

The date and time the schedule is created.

Modified

The date and time the schedule is last modified.

Last Run

The date and time the schedule is last run.

Name

A name that identifies the schedule. This name appears on the Linux Package Upgrade Schedules list page.

Action

The action associated with the schedule:

Detect All: Scans for all Linux package upgrades.
Detect and Upgrade All: Scans for all Linux package upgrades, downloads the applicable files, and deploys them update to the selected devices.

Description

A brief description of the Linux package upgrade schedule.

Devices

This field only appears when the schedule is configured to apply to all devices.

Device Label

One or more Smart Labels associated with the devices against which the schedule runs. For more information, see Using Smart Labels for patching. This field only appears when the schedule is configured to apply to selected devices.

Device Name

One or more selected devices against which the schedule runs. This field only appears when the schedule is configured to apply to selected devices.

Schedule

The selected update schedule. Click View Task Schedule to see a detailed task scheduler. In the dialog box that appears, click a task to review the task details. For more information, see View task schedules.

Run on Next Connection in Offline

Indicates if the schedule runs the action the next time the managed device connects to the appliance, if the device is currently offline.

Delay Run After Reconnect

If configured, this option indicates the amount of time the schedule is delayed for. The time delay period begins when the update action is scheduled to run.

End After

If configured, this option indicates the maximum amount of time the schedule can run for. When this time limit is reached, any update tasks that are in progress are suspended.

4.
In the Schedule Status section, review the overall patch schedule status on any of the following tabs:

Tab

Contents

By Machine

Devices selected for upgrading. Each entry displays the device name, its IP address, the upgrade status, upgrade results, and the date the upgrade completed, if applicable. You can expand a device node to view additional information about each package, such as the package name, version, compatible OS name, whether the package is installed on the device, and the date it is detected.

By Package

Upgrades selected for detection and installation. Each entry displays the package name, its version, compatible OS name, package ID, and indicates if the package is installed.

Needs Upgrade

Upgrades that can be installed on devices. Each entry displays the package name, version, and the compatible OS name. You can expand an update node to view the devices on which the update is to be installed.

Deploy Failures

Incomplete updates that resulted in a deployment failure. Each entry displays the update ID, associated Knowledge Base, update name, and the associated error code (see Error codes caused by patching and scripting). You can expand an update node to view the devices on which the failure is encountered.

5.
Optional. After reviewing the schedule details, you can perform any of the following actions:
To edit the schedule, click Edit. For more information, see .

Review Linux package upgrades

Review Linux package upgrades

As you run the Detect All action, the appliance generates a list of packages that are available for upgrade.

Use the Packages list page to see the latest Linux packages that are available for upgrade, and installed on managed devices. Start by selecting a specific Linux OS, and review contents of the list to get an overall estimate of the device pool that requires an update.

For each package, the list shows the numbers of devices on which the package is installed or not installed, and the percent of the devices that are running the latest version.

1.
Go to the Packages list page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Linux Package Upgrades.
c.
On the Linux Package Upgrades Management panel, click Package Upgrade History.
2.
In the Packages list page, click View By, and select a Linux OS. For example, RHEL or Ubuntu.

Column

Description

Package Name

The name of the detected package.

Version

The latest package version.

Installed

The number of managed Linux devices running the selected Linux OS on which the package is installed. Click the number in this column to display a list of these devices in the Devices list page.

Needs Upgrade

The number of managed Linux devices running the selected Linux OS that have an earlier version of this package and are candidates for an upgrade. Click the number in this column to display a list of these devices in the Devices list page.

Completion

The percentage of all devices that have this package installed.

Maintaining device and appliance security

Maintaining device and appliance security

The appliance enables you to test the security of Agent-managed devices using standard vulnerability tests and scans. To maintain appliance security, review daily security reports, and apply appliance software updates as they become available.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级