Dell KACE™ K1000 Systems Management Appliance 6.4 Administrator Guide ©2015DellInc.ALLRIGHTSRESERVED. Thisguidecontainsproprietaryinformationprotectedbycopyright.Thesoftwaredescribedinthisguideisfurnishedundera softwarelicenseornondisclosureagreement.Thissoftwaremaybeusedorcopiedonlyinaccordancewiththetermsofthe applicableagreement.Nopartofthisguidemaybereproducedortransmittedinanyformorbyanymeans,electronicormechanical, includingphotocopyingandrecordingforanypurposeotherthanthepurchaser'spersonalusewithoutthewrittenpermissionof DellInc. TheinformationinthisdocumentisprovidedinconnectionwithDellproducts.Nolicense,expressorimplied,byestoppelor otherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnectionwiththesaleofDellproducts.EXCEPT ASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSEAGREEMENTFORTHISPRODUCT,DELLASSUMESNO LIABILITYWHATSOEVERANDDISCLAIMSANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING, BUTNOTLIMITEDTO,THEIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSE,ORNON-INFRINGEMENT. INNOEVENTSHALLDELLBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALORINCIDENTALDAMAGES (INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIONORLOSSOFINFORMATION)ARISING OUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFDELLHASBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES. Dellmakesnorepresentationsorwarrantieswithrespecttotheaccuracyorcompletenessofthecontentsofthisdocumentand reservestherighttomakechangestospecificationsandproductdescriptionsatanytimewithoutnotice.Delldoesnotmakeany commitmenttoupdatetheinformationcontainedinthisdocument. Ifyouhaveanyquestionsregardingyourpotentialuseofthismaterial,contact: DellInc. Attn:LEGALDept. 5PolarisWay AlisoViejo,CA92656 Refertoourwebsite(http://software.dell.com)forregionalandinternationalofficeinformation. Patents ThisproductisprotectedbyU.S.PatentNumber#7,814,190;7,818,427;7,890,615;8,103,751;8,301,737;and8,381,231.For moreinformation,gotohttp://software.dell.com/legal/patents.aspx. Trademarks Dell,theDelllogo,KACE,Latitude,OptiPlex,PowerEdge,PowerVault,andPrecisionaretrademarksofDellInc.Adobe,Acrobat, andReaderareregisteredtrademarksofAdobeSystemsIncorporatedintheUnitedStatesand/orothercountries.AMD-Visa trademarkofAdvancedMicroDevices,Inc.ApacheisatrademarkofTheApacheSoftwareFoundation.Apple,iPad,iPhone,iPod touch,Mac,Macintosh,MacOS,OSX,andSafariaretrademarksofAppleInc.,registeredintheU.S.andothercountries.App StoreisaservicemarkofAppleInc.UbuntuisaregisteredtrademarkofCanonicalLtd.CiscoisaregisteredtrademarkofCisco Systems,Inc.and/oritsaffiliatesintheUnitedStatesandcertainothercountries.FacebookisaregisteredtrademarkofFacebook Inc.FreeBSDisaregisteredtrademarkofTheFreeBSDFoundation.Google,Android,Chrome,Chromebook,andGooglePlayare trademarksofGoogleInc.Intel,vPro,andXeonaretrademarksofIntelCorporationintheU.S.and/orothercountries.IBMand AIXareregisteredtrademarksofInternationalBusinessMachinesCorporation.LinuxisaregisteredtrademarkofLinusTorvalds intheUnitedStates,othercountries,orboth.McAfeeandVirusScanareregisteredtrademarksofMcAfee,Inc.intheUnitedStates andothercountries.LinkedInisregisteredtrademarkofLinkedInCorporation.LumensionisaregisteredtrademarkofLumension Security,Inc.Microsoft,Access,ActiveX,ActiveDirectory,Excel,Hyper-V,InternetExplorer,VisualStudio,Windows,Windows Server,andWindowsVistaareeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/or othercountries.MozillaandFirefoxareregisteredtrademarksoftheMozillaFoundation.NETGEARisaregisteredtrademarkof NETGEAR,Inc.and/oritssubsidiariesintheUnitedStatesand/orothercountries.NovellandSUSEareregisteredtrademarksand SLESisatrademarkofNovell,Inc.intheUnitedStatesandothercountries.Oracle,Java,MySQL,andSolarisaretrademarksor registeredtrademarksofOracleand/oritsaffiliates.CentOS,Fedora,RedHat,andRedHatEnterpriseLinuxareregistered trademarksortrademarksofRedHat,Inc.intheU.S.andothercountries.DebianisaregisteredtrademarkofSoftwareinthe PublicInterest,Inc.DameWareisaregisteredtrademarkofSolarWindsWorldwide,LLC.SymantecandGhostaretrademarksof SymantecCorporationoritsaffiliatesintheU.S.andothercountries.TwitterisaregisteredtrademarkofTwitter,Inc.UNIXisa registeredtrademarkofTheOpenGroupintheUnitedStatesandothercountries.VeriSignisaregisteredtrademarkofVeriSign, Inc.anditssubsidiariesintheUnitedStatesandinforeigncountries.VMware,ESX,ESXi,Fusion,Player,vCenterConverter, vCenterLabManager,vCloud,vSphere,andWorkstationareregisteredtrademarksortrademarksofVMware,Inc.intheUnited Statesand/orotherjurisdictions.VNCisaregisteredtrademarkofRealVNCLtd.intheU.S.andinothercountries.Wi-Fiisa registeredtrademarkofWirelessEthernetCompatibilityAlliance,Inc.WinZipisaregisteredtrademarkofCorelCorporationand/or itssubsidiariesinCanada,theUnitedStatesand/orothercountries.Othertrademarksandtradenamesmaybeusedinthis documenttorefertoeithertheentitiesclaimingthemarksandnamesortheirproducts.Delldisclaimsanyproprietaryinterest inthemarksandnamesofothers. Legend CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed. WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath. IMPORTANT,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation. Contents About the K1000 Systems Management Appliance.................................11 About K1000 components......................................................11 About the Administrator Console ................................................13 Log in to the Administrator Console: First login following initial network configuration...15 Components available in Admin mode without the Organization component............17 Components available in Admin mode with the Organization component enabled........19 Components available in System mode with the Organization component enabled.......20 Using the Home component.................................................21 Searching for information and filtering lists.....................................31 Getting started..............................................................38 Configuring the appliance......................................................38 Requirements and specifications..............................................38 Power-on the appliance and log in to the Administrator Console ....................39 Access the Command Line Console............................................41 Tracking configuration changes...............................................42 Configuring System-level and Admin-level General Settings.........................42 Configure appliance date and time settings.....................................58 Verifying port settings, NTP service, and website access...........................59 Configuring network and security settings......................................61 Configuring Agent settings..................................................74 Configuring session timeout and auto-refresh settings.............................76 Configuring locale settings..................................................77 Configure data sharing preferences...........................................80 About DIACAP compliance requirements........................................81 Configuring Mobile Device Access.............................................82 Enable fast switching for organizations and linked appliances.......................85 Linking Dell KACE appliances.................................................86 Configuring history settings..................................................89 Settingup and using labelsto manage groupsof items................................95 About labels.............................................................95 Tracking changes to label settings.............................................97 Managing manual labels....................................................97 Managing Smart Labels.....................................................99 Managing label groups.....................................................113 Managing LDAP Labels.....................................................116 Configuring user accounts, LDAP authentication, and SSO............................121 About user accounts and user authentication...................................121 About locale settings......................................................121 Managing System-level user accounts.........................................121 Managing organization user accounts.........................................125 Using an LDAP server for user authentication...................................129 Importing users from an LDAP server.........................................132 About single sign on (SSO)..................................................138 Enabling and disabling single sign on..........................................139 Using Active Directory for single sign on.......................................140 Using Dell Identity Broker for single sign on....................................143 DellKACEK1000SystemsManagementAppliance6.4 3 AdministratorGuide Using Replication Shares......................................................147 Create Replication Shares..................................................149 View Replication Share details..............................................151 Managing credentials.........................................................152 Tracking changes to Credentials Management settings............................152 Add and edit User/Password credentials.......................................152 Add and edit GoogleOAuth credentials........................................153 Add and edit SNMP credentials..............................................155 View credential usage.....................................................157 Create reports from the Credentials Management list............................157 Export credentials information..............................................158 Delete credentials........................................................158 Configuring assets...........................................................159 About managing assets....................................................159 Adding and customizing Asset Types and maintaining asset information...............161 Managing Software assets..................................................176 Managing physical and logical assets..........................................178 Maintaining and using manual asset information.................................179 Setting up License Compliance.................................................180 About License Compliance for Software Catalog applications.......................180 Customize the License Asset Type............................................181 Add License assets for Software Catalog inventory...............................183 Add License assets for Software page inventory.................................185 Importing license data in CSV files...........................................188 Managing License Compliance..................................................191 View License Compliance information for Software Catalog applications..............191 Update software License Compliance information manually........................193 Customize license usage warning thresholds....................................194 View License Compliance and Configuration information..........................194 Setting up Service Desk.......................................................196 Setting up roles for user accounts............................................196 Configuring email settings..................................................201 Creating and managing organizations............................................215 About organizations.......................................................215 Tracking changes to organization settings......................................216 Managing Organization Roles and User Roles....................................216 Adding, editing, and deleting organizations....................................219 Managing user accounts for organizations......................................224 Managing organization filters...............................................224 Managing devices within organizations........................................229 Understanding device details...............................................230 Running single organizationand consolidated reports.............................230 Importing and exporting appliance resources......................................230 About importing and exporting resources......................................230 Transferring resources among appliances using Samba share directories..............231 Transferring resources among organizations....................................232 Managing exported resources at the System level................................233 Managing inventory.........................................................236 DellKACEK1000SystemsManagementAppliance6.4 4 AdministratorGuide Using device Discovery.......................................................236 About Device Discovery and device management................................236 Tracking changes to Discovery settings........................................236 Discoveringdeviceson yournetwork..........................................237 Managing device inventory....................................................253 About managing devices...................................................253 Features available for each device management method..........................254 About inventory information................................................260 Tracking changes to inventory settings........................................260 Managing inventory information.............................................261 Finding and managing devices...............................................288 Provisioning the K1000 Agent...............................................292 Manually deploying the K1000 Agent..........................................312 Using Agentless management...............................................320 Adding devices manually in the Administrator Console or by using the API............329 Forcing inventory updates..................................................343 Managing MIA devices.....................................................345 Obtaining Dell warranty information..........................................349 Managing applications on the Software page......................................350 About the Software page...................................................351 Tracking changes to inventory settings........................................351 Adding and deleting applications in Software page inventory.......................351 Creating Software assets...................................................353 Using software threat levels and categories....................................357 Finding and labeling applications............................................357 Managing the ITNinja feed .................................................360 Managing Software Catalog inventory............................................362 About the Software Catalog................................................362 Viewing Software Catalog information........................................366 Adding applications to the Software Catalog...................................372 Managing License assets for Software Catalog applications........................376 Using software metering...................................................379 Using Application Control..................................................391 Update or reinstall the Software Catalog......................................395 Managingprocess,startupprogram,and serviceinventory............................396 Managing process inventory.................................................396 Managing startup program inventory..........................................399 Managing service inventory.................................................402 Writing custom inventory rules.................................................405 About Custom Inventory rules...............................................405 Types of Custom Inventory rules.............................................405 Create Custom Inventory rules..............................................405 Checking for conditions (conditional rules).....................................408 Getting values from a device (Custom Inventory Field)...........................415 Matching filenames to regular expressions.....................................418 Defining rule arguments...................................................421 Test Custom Inventory rules................................................425 Deploying packages to managed devices........................................426 DellKACEK1000SystemsManagementAppliance6.4 5 AdministratorGuide Distributing software and using Wake-on-LAN......................................426 About software distribution.................................................426 Tracking changes to distribution settings......................................427 Types of distribution packages..............................................428 Distributing packages from the appliance......................................428 Distributing packages from alternate download locations and Replication Shares.......428 Distributing applications to Mac OS X devices...................................429 Using Managed Installations.................................................430 Create and use File Synchronizations.........................................446 Using Wake-on-LAN.......................................................449 Exporting Managed Installations.............................................451 Broadcasting alerts to managed devices..........................................451 Create alerts to be broadcast...............................................452 Running scripts on managed devices.............................................453 About scripts............................................................454 Tracking changes to scripting settings.........................................455 About default scripts......................................................455 Adding and editing scripts..................................................457 Using the Run and Run Now commands........................................468 About configuration policy templates.........................................471 Using Windows configuration policies.........................................471 Using Mac OS X configuration policies.........................................487 Edit policies and scripts....................................................489 Search the scripting logs...................................................490 Exporting scripts.........................................................491 Managing Mac profiles........................................................491 Tracking changes to Mac profile settings.......................................492 Adding, editing, and uploading Mac profiles....................................492 Installing and managing Mac profiles..........................................503 Removing and deleting Mac profiles..........................................508 Patching devices and maintaining security......................................513 About patch management.....................................................513 Patching workflow........................................................513 About patch signature files.................................................515 About patch packages.....................................................515 About patch testing and security.............................................515 Best practices for patching.................................................516 Subscribing to and downloading patches..........................................518 About patch subscription and downloads......................................518 Websites that must be accessible to the K1000 appliance.........................519 Overview of first-time patch-subscription workflow..............................520 View details about operating systems and applications...........................521 Subscribing to patches and configuring download settings.........................521 Viewing available patches and download status.................................526 Creating and managing patch schedules..........................................528 About scheduling critical OS patches for desktops and servers......................528 About scheduling critical patches for laptops...................................528 About schedulingnon-criticalpatches.........................................529 DellKACEK1000SystemsManagementAppliance6.4 6 AdministratorGuide Configuring patch schedules................................................529 Viewing patch schedules, status, and reports...................................540 Managing patch rollbacks..................................................543 Managing patch inventory.....................................................545 Prerequisites for managing patch inventory....................................545 Viewing patch information.................................................545 Viewing patch statistics and logs.............................................550 Mark patches as inactive...................................................550 Patch Mac OS X devices....................................................551 Managing Dell devices and updates..............................................551 Managing Dell devices with Dell Updates ......................................551 Differences between patching and Dell Updates.................................552 Configuring Dell Updates...................................................552 Maintaining device and appliance security........................................555 Testing device security....................................................555 Maintaining appliance security..............................................582 Using reports and scheduling notifications......................................584 About reports and notifications.................................................584 About reports...........................................................584 About notifications.......................................................584 Tracking changes to report settings...........................................585 Creating and modifying reports.................................................585 Creating reports.........................................................585 Modifying reports.........................................................591 Customizing logos used for reports...........................................592 Scheduling reports and notifications.............................................592 Running single-organization and consolidated reports............................592 Scheduling reports........................................................594 Scheduling notifications...................................................595 Monitoring servers..........................................................600 Getting started with server monitoring...........................................603 Enable monitoring for a device..............................................603 Obtain a new license key to increase server monitoring capacity....................606 Apply a new license key to increase server monitoring capacity....................606 Working with monitoring profiles...............................................606 Edit a profile............................................................608 Create a new profile using a default profile as a template.........................609 Profile log paths for MySQL and Apache.......................................611 Upload a profile that was created by another user...............................612 Download a profile so that it can be used by others..............................612 Bind an additional profile to a device.........................................613 Define nonstandard log date format..........................................613 Configuring application and threshold monitoring with Log Enablement Packages.......613 Managing monitoring for devices................................................620 Pause monitoring for a device...............................................620 Pause or resume monitoring for multiple devices................................620 Set the polling interval and any automatic dismissal or deletion of alerts.............621 DellKACEK1000SystemsManagementAppliance6.4 7 AdministratorGuide Disable ping probe........................................................621 Receive alerts when device configurations change...............................622 Schedulea MaintenanceWindowduringwhichtimealertsarenotcollectedfroma device.................................................................622 Create and assign monitoring-specific roles....................................623 Disable monitoring for a device or devices.....................................625 Working with alerts..........................................................626 Add notification schedules from the Monitoring Alerts list page.....................627 Create a Service Desk ticket from an alert.....................................628 Search for alerts using Advanced Search criteria................................630 Filtering alerts using the Include Text and Exclude Text capability..................630 Dismiss an alert..........................................................634 Retrieve and review alerts that have been dismissed from the alerts list.............635 Delete alerts............................................................635 Using the Service Desk......................................................636 Configuring Service Desk......................................................636 System requirements......................................................636 About Service Desk.......................................................637 Overview of setup tasks...................................................637 Configuring Service Desk business hours and holidays.............................638 Configuring Service Level Agreements........................................639 Configuring Service Desk ticket queues........................................640 Configuring ticket settings.................................................646 Customizing the User Console home page......................................649 Using the Satisfaction Survey...............................................663 Enable or disable security for Service Desk attachments..........................664 Managing Service Desk tickets, processes, and reports...............................665 Overview of Service Desk ticket lifecycle......................................665 Creating tickets from the Administrator Console and User Console ..................665 Creating and managing tickets by email.......................................673 Viewing tickets and managing comments, work, and attachments...................676 Using the ticket escalation process...........................................685 Using Service Desk processes................................................688 Using Ticket Rules........................................................694 Run Service Desk reports...................................................699 Archiving, restoring, and deleting tickets......................................700 Managing ticket deletion...................................................704 Managing Service Desk ticket queues............................................705 About Service Desk ticket queues............................................705 Adding and deleting queues................................................705 Viewing tickets in queues..................................................707 Setting the default queue..................................................708 Set the default fields for the All Queues ticket list...............................709 Move tickets between queues...............................................710 About User Downloads and Knowledge Base articles.................................711 Managing User Downloads..................................................711 Managing Knowledge Base articles...........................................714 Customizing Service Desk ticket settings..........................................717 DellKACEK1000SystemsManagementAppliance6.4 8 AdministratorGuide About customizing Service Desk ticket settings..................................717 Create ticket categories and subcategories....................................717 Customizing ticket values..................................................719 Customizing ticket layout..................................................723 Using parent-child ticket relationships........................................728 Using ticket approvers.....................................................733 Configuring SMTP email servers.................................................735 Connect your email server to the K1000 appliance...............................735 Using internal and external SMTP servers......................................736 Maintenance and troubleshooting.............................................739 Maintaining the appliance.....................................................739 Tracking changes to settings................................................739 About appliance backups...................................................739 Restoring the appliance....................................................743 Updating appliance software................................................747 Reboot or shut down the appliance...........................................749 Update OVAL definitions from KACE..........................................749 Understandingthe dailyrun output...........................................750 Troubleshooting the K1000....................................................752 Using Troubleshooting Tools.................................................752 Troubleshootingappliance issues.............................................754 Troubleshooting and debugging the K1000 Agent................................758 Testing and troubleshooting email communication...............................760 Database table names.......................................................764 Adding steps to task sections of scripts.........................................783 LDAP variables.............................................................792 About Dell................................................................794 Glossary..................................................................795 A........................................................................795 B........................................................................797 C........................................................................798 D........................................................................799 E........................................................................800 F........................................................................801 I.........................................................................801 K........................................................................802 L........................................................................802 M........................................................................804 N........................................................................805 O........................................................................806 P........................................................................807 R........................................................................808 S........................................................................808 T........................................................................810 U........................................................................810 DellKACEK1000SystemsManagementAppliance6.4 9 AdministratorGuide V........................................................................811 W........................................................................811 Index ....................................................................812 DellKACEK1000SystemsManagementAppliance6.4 10 AdministratorGuide