KACE® Systems Management Appliance 9.0 Administrator Guide Table of Contents About the KACE Systems Management Appliance (SMA)...................................................................26 About KACE SMA components.....................................................................................................26 About the Administrator Console...................................................................................................27 Components available in Admin mode without the Organization component........................31 Components available in Admin mode with the Organization component enabled...............34 Components available in System mode with the Organization component enabled.............36 Using the Home component..................................................................................................38 About Dashboards..........................................................................................................38 View the Dashboard in Admin mode.............................................................................38 View the Dashboard in System mode...........................................................................39 Customize Dashboard pages.........................................................................................40 About Dashboard widgets..............................................................................................41 View Dashboard details.................................................................................................48 View task schedules.......................................................................................................49 View the KACE SMA version, model, and license information......................................50 View KACE SMA license information............................................................................51 About appliance software updates.................................................................................52 About labels....................................................................................................................52 Searching for information and filtering lists...........................................................................53 Search at the Admin level..............................................................................................53 Search at the page level................................................................................................54 Searching at the page level with advanced options......................................................54 Create Custom Views using Advanced Search criteria.................................................57 Access product documentation......................................................................................57 Log in to the Administrator Console: First login following initial network configuration..........59 Getting started.......................................................................................................................................61 Configuring the appliance..............................................................................................................61 Requirements and specifications...........................................................................................61 Power-on the appliance and log in to the Administrator Console..........................................61 Access the Command Line Console.....................................................................................64 Tracking configuration changes.............................................................................................64 Configuring System-level and Admin-level General Settings................................................65 Configure appliance General Settings with the Organization component enabled........65 Configure Admin-level or organization-specific General Settings..................................70 Configure appliance General Settings without the Organization component.................75 Configure appliance date and time settings..........................................................................80 KACE Systems Management Appliance 9.0 Administrator Guide 2 Enable Two-Factor Authentication for all users.....................................................................81 Verifying port settings, NTP service, and website access.....................................................81 Verify port settings.........................................................................................................81 Verifying the status of the NTP service.........................................................................83 Make necessary websites accessible to the KACE SMA..............................................83 Configuring network and security settings.............................................................................84 Change appliance network settings...............................................................................84 Configure local routing tables........................................................................................86 Configure local web server settings and whitelist hosts................................................87 Configure security settings for the appliance.................................................................88 Configure Active Directory as the single sign on method..............................................94 Generate an SSL certificate...........................................................................................96 Configuring Agent settings.....................................................................................................97 About Konea...................................................................................................................97 Configure Agent settings................................................................................................97 Configuring session timeout and auto-refresh settings.........................................................99 Set session timeout........................................................................................................99 Set auto-refresh properties..........................................................................................100 Configuring locale settings...................................................................................................100 How locale settings are applied...................................................................................100 Configure locale settings for the Administrator Console and the Command Line Console................................................................................................................................................101 Configure locale settings for the User Console...........................................................101 Configure locale settings for organizations..................................................................102 Configure locale settings for users..............................................................................103 Configuring the default theme.............................................................................................103 Configure the default theme for the appliance.............................................................103 Configure the default theme for a user........................................................................104 Configure data sharing preferences....................................................................................104 About DIACAP compliance requirements............................................................................105 Enable or disable the Acceptable Use Policy..............................................................106 Configuring Mobile Device Access......................................................................................106 Enable Mobile Device Access for the appliance..........................................................107 Enable Mobile Device Access for users......................................................................107 Download and use KACE GO.....................................................................................108 Disable Mobile Device Access on the appliance.........................................................109 Disable Mobile Device Access for users.....................................................................109 Enable fast switching for organizations and linked appliances...........................................109 Linking Quest KACE appliances..........................................................................................110 KACE Systems Management Appliance 9.0 Administrator Guide 3 Enable appliance linking..............................................................................................111 Add Names and Keys to appliances............................................................................111 Enable access to Federation API settings...................................................................112 Disable appliance linking..............................................................................................113 Configuring history settings..................................................................................................113 About history settings...................................................................................................113 Managing settings history............................................................................................114 Managing asset history................................................................................................115 Managing object history...............................................................................................116 Using change history information.................................................................................117 Setting up and using labels to manage groups of items.............................................................118 About labels.........................................................................................................................118 About Smart Labels......................................................................................................119 About LDAP Labels......................................................................................................119 About label groups.......................................................................................................120 About organization filters..............................................................................................120 Tracking changes to label settings......................................................................................120 Managing manual labels......................................................................................................120 Add or edit manual labels............................................................................................120 View manual label details............................................................................................122 Delete manual labels....................................................................................................122 Managing Smart Labels.......................................................................................................123 Add Smart Labels.........................................................................................................123 Example: Combine Smart Labels to identify devices...................................................124 Edit Smart Labels.........................................................................................................125 Setting up labels for user accounts.............................................................................126 Using Smart Labels for patching..................................................................................127 Using Smart Labels with Discovery Results................................................................129 Adding Smart Labels for devices.................................................................................130 Assign the Smart Label run order................................................................................134 Delete Smart Labels.....................................................................................................134 Managing label groups........................................................................................................135 Add, view, or edit label groups....................................................................................135 Assign labels to or remove labels from label groups...................................................136 Delete label groups......................................................................................................136 Managing LDAP Labels.......................................................................................................137 Add or edit LDAP Labels.............................................................................................137 Enable LDAP Labels....................................................................................................139 KACE Systems Management Appliance 9.0 Administrator Guide 4 Delete LDAP Labels.....................................................................................................139 Use the LDAP Browser................................................................................................140 Configuring user accounts, LDAP authentication, and SSO.......................................................141 About user accounts and user authentication.....................................................................141 About locale settings............................................................................................................141 Managing System-level user accounts................................................................................142 Add or edit System-level user accounts......................................................................142 Manage appliance administrator email notifications....................................................143 Delete System-level user accounts..............................................................................144 Managing organization user accounts.................................................................................145 Add or edit User Roles................................................................................................145 Delete User Roles........................................................................................................146 Add or edit organization user accounts.......................................................................146 Customize user details.................................................................................................148 Archive user accounts..................................................................................................149 View or edit user profiles.....................................................................................................149 Using an LDAP server for user authentication....................................................................151 About the login account on your LDAP server............................................................151 Configure and test LDAP user authentication..............................................................152 Importing users from an LDAP server.................................................................................154 Import user information manually.................................................................................154 Import user information according to a schedule.........................................................157 About single sign on (SSO).................................................................................................161 Using external LDAP or Active Directory servers for single sign on............................161 Enabling and disabling single sign on.................................................................................161 Enable single sign on...................................................................................................162 Disable single sign on..................................................................................................162 Using Active Directory for single sign on.............................................................................162 Configure Active Directory as the single sign on method............................................162 Configuring browser settings for single sign on...........................................................164 Unjoin the domain and disable Active Directory single sign on...................................165 Using Replication Shares............................................................................................................166 Create Replication Shares...................................................................................................167 View Replication Share details............................................................................................169 Managing credentials...................................................................................................................170 Tracking changes to Credentials Management settings......................................................170 Add and edit Secret Key credentials...................................................................................170 Add and edit User/Password credentials.............................................................................171 KACE Systems Management Appliance 9.0 Administrator Guide 5 Add and edit Google OAuth credentials..............................................................................172 Add and edit SNMP credentials..........................................................................................173 View credential usage..........................................................................................................175 Create reports from the Credentials Management list.........................................................175 Export credentials information.............................................................................................176 Delete credentials................................................................................................................176 Configuring assets.......................................................................................................................177 About the Asset Management component..........................................................................177 Using the Asset Management Dashboard...........................................................................177 About the Asset Management Dashboard widgets......................................................178 Customize the Asset Management Dashboard...........................................................179 About managing assets.......................................................................................................180 How asset information differs from inventory information............................................180 Identifying the assets to track......................................................................................181 View assets and search for asset information.............................................................181 Add barcodes to assets...............................................................................................182 Change device owners.................................................................................................182 View and configure asset lifecycle settings.................................................................183 Adding and customizing Asset Types and maintaining asset information...........................184 About Asset Types.......................................................................................................184 Customizing Asset Types.............................................................................................185 About Asset Subtypes, custom fields, and device detail preferences..........................190 Managing Software assets...................................................................................................197 Customize the Software Asset Type............................................................................197 Adding Software assets...............................................................................................198 Managing physical and logical assets.................................................................................200 Add physical Asset Types............................................................................................200 Archive device Assets..................................................................................................202 Maintaining and using manual asset information................................................................203 Managing locations..............................................................................................................204 Manage locations.........................................................................................................204 Add or edit locations....................................................................................................205 Customize location fields.............................................................................................205 Managing contracts..............................................................................................................207 Manage contracts.........................................................................................................207 Add or edit contracts....................................................................................................208 Managing licenses...............................................................................................................210 Manage licenses..........................................................................................................210 KACE Systems Management Appliance 9.0 Administrator Guide 6 Add or edit licenses.....................................................................................................211 Managing purchase records................................................................................................215 Manage purchase records...........................................................................................215 Add or edit purchase records......................................................................................215 Setting up License Compliance...................................................................................................218 About License Compliance for Software Catalog applications............................................218 About license upgrades................................................................................................218 About license downgrades...........................................................................................219 Customize the License Asset Type.....................................................................................219 Add License assets for Software Catalog inventory............................................................220 Add License assets for Software page inventory................................................................225 Importing license data in CSV files.....................................................................................229 How asset information is handled during import..........................................................229 Importing asset data using CSV files...........................................................................229 Managing License Compliance...................................................................................................232 View License Compliance information for Software Catalog applications...........................232 Reclaim unused software licenses......................................................................................234 Update software License Compliance information manually...............................................235 Customize license usage warning thresholds.....................................................................235 View License Compliance and Configuration information...................................................236 Setting up Service Desk..............................................................................................................237 Setting up roles for user accounts.......................................................................................237 About default roles.......................................................................................................237 Create a Service Desk staff role..................................................................................238 Assign user roles..........................................................................................................240 Apply labels and roles to Service Desk staff...............................................................240 Create the DefaultTicketOwners account....................................................................241 Configuring email settings....................................................................................................242 About email notifications..............................................................................................242 About Ticket Rules.......................................................................................................243 About POP3 email accounts........................................................................................243 Create and configure POP3 email accounts................................................................243 Configure email preferences........................................................................................244 Configuring email triggers and email templates...........................................................245 Configure CC lists for ticket categories.......................................................................253 Automatically add email addresses to ticket CC List fields.........................................254 Exclude addresses from ticket CC List fields..............................................................254 Prevent email loops......................................................................................................255 KACE Systems Management Appliance 9.0 Administrator Guide 7 Configure the Cache Lifetime for Service Desk widgets.............................................................256 Creating and managing organizations.........................................................................................256 About organizations.............................................................................................................256 About the Default organization.....................................................................................257 Tracking changes to organization settings..........................................................................257 Managing Organization Roles and User Roles...................................................................257 Available default roles..................................................................................................257 Add or edit Organization Roles....................................................................................258 Duplicate Organization Roles.......................................................................................259 Delete roles..................................................................................................................260 Adding, editing, and deleting organizations.........................................................................260 Add or edit organizations.............................................................................................260 Configure Two-Factor Authentication for organizations...............................................264 Delete organizations.....................................................................................................265 Customizing the logos used for the User Console and organization reports...............265 Managing user accounts for organizations..........................................................................266 Managing organization filters...............................................................................................266 How organization filters work.......................................................................................266 Add or edit organization Data Filters...........................................................................267 Add or edit organization LDAP Filters.........................................................................267 Test organization filters................................................................................................269 Delete organization filters.............................................................................................269 Managing devices within organizations...............................................................................270 Using Advanced Search...............................................................................................270 Filter devices................................................................................................................270 Redirect devices...........................................................................................................270 Understanding device details...............................................................................................271 Running single organization and consolidated reports........................................................271 Importing and exporting appliance resources.............................................................................271 About importing and exporting resources............................................................................271 Transferring resources among appliances using Samba share directories.........................272 Export resources from an appliance............................................................................272 Import resources to an appliance................................................................................272 Transferring resources among organizations......................................................................273 Export resources from organizations...........................................................................273 Import resources to organizations................................................................................274 Managing exported resources at the System level.............................................................274 View or delete shared resources.................................................................................274 KACE Systems Management Appliance 9.0 Administrator Guide 8 Move shared resources from the local KACE SMA to network locations....................274 View or delete the status of resource exports.............................................................275 Managing inventory.............................................................................................................................276 Using the Inventory Dashboard...................................................................................................276 About the Inventory Dashboard widgets..............................................................................276 Customize the Inventory Dashboard...................................................................................278 Using Device Discovery...............................................................................................................278 About Device Discovery and device management..............................................................278 Tracking changes to Discovery settings..............................................................................279 Discovering devices on your network..................................................................................279 Add a Discovery Schedule to perform a quick "what and where" scan of your network.................................................................................................................................................279 Add a Discovery Schedule for a thorough scan of managed Windows, Mac, Linux, and UNIX computers..................................................................................................................................287 Obtain a Client ID and Client Secret for use in discovering Chrome devices..............291 Add a Discovery Schedule for a KACE Cloud Mobile Device Manager device...........292 Add a Discovery Schedule for a G Suite device.........................................................294 Add a Discovery Schedule for an AirWatch device.....................................................297 Add a Discovery Schedule for a VMware ESXi host or a vCenter Server...................299 Add a Discovery Schedule for SNMP-enabled non-computer devices........................301 About Discovery Results..............................................................................................304 View and search Discovery Results............................................................................304 Provision the Agent using the discovered IP address or hostname............................305 Stop a running discovery scan....................................................................................305 Delete Discovery Schedules........................................................................................306 Managing device inventory..........................................................................................................306 About managing devices......................................................................................................306 Features available for each device management method...................................................307 About inventory information.................................................................................................314 Tracking changes to inventory settings...............................................................................314 Managing inventory information...........................................................................................314 Add custom data fields................................................................................................314 Schedule inventory data collection for managed devices............................................315 View device inventory and details................................................................................317 Groups and sections of items in device details...........................................................318 About Dell Data Protection | Encryption (DDP|E) and encryption information in device details...................................................................................................................................................339 Add a Dump Inventory registry key to permit inventory collection on Windows DDP|E client devices.......................................................................................................................................344 About Intel AMT information in device details.............................................................347 KACE Systems Management Appliance 9.0 Administrator Guide 9 Finding and managing devices............................................................................................348 Finding devices in inventory.........................................................................................348 Labeling devices to group them...................................................................................349 Run actions on devices................................................................................................350 View devices that have been added manually............................................................351 Delete devices from inventory......................................................................................351 Provisioning the KACE SMA Agent.....................................................................................351 Enabling file sharing.....................................................................................................352 Provisioning the KACE SMA Agent using the GPO Provisioning Tool for Windows devices.................................................................................................................................................354 Provisioning the KACE SMA Agent using onboard provisioning.................................356 Managing provisioning schedules................................................................................360 Managing Agent communications................................................................................362 Updating the KACE SMA Agent on managed devices................................................367 Manually deploying the KACE SMA Agent..........................................................................369 Obtaining Agent installation files..................................................................................370 Manually deploying the KACE SMA Agent on Windows devices................................370 Manually deploying and upgrading the KACE SMA Agent on Linux devices...............372 Performing Agent operations on Linux devices...........................................................373 Manually deploying and upgrading the KACE SMA Agent on Mac devices................374 Performing other Agent operations on Mac devices....................................................376 Viewing information collected by the Agent.................................................................377 Using Agentless management.............................................................................................377 About Agentless device management.........................................................................377 Managing Agentless devices.......................................................................................378 Using SNMP Inventory Configurations to identify specific SNMP objects and non- computer devices to add to inventory.................................................................................................385 Adding devices manually in the Administrator Console or by using the API.......................388 About managing devices..............................................................................................388 Tracking changes to inventory settings.......................................................................389 Add devices manually with the Administrator Console................................................389 Adding devices manually using the API......................................................................393 Forcing inventory updates....................................................................................................401 Force inventory updates from the appliance................................................................401 Force inventory updates from Windows devices.........................................................402 Force inventory updates from Mac OS X devices.......................................................402 Force inventory updates from Linux devices...............................................................402 Managing MIA devices.........................................................................................................403 Configure MIA settings.................................................................................................403 KACE Systems Management Appliance 9.0 Administrator Guide 10
Description: