Dell OpenManage Essentials Version 1.0 White Paper
Contents
1. Specific Trap OID Message 9 Generic Trap OID Date cn Alert Category Name t Time sn Alert Source Name sev Severity pkn Package Name st ServiceTag at Asset Tag Email Settings Test Ac Cancel Back Note The address in the To field will be the e mail address of the service queue in the K1000 Appliance where the service desk tickets will be logged Dell KACE and OpenManage Essentials Figure 29 Email settings Email Settings z SMTP Server Name or IP Address 10 0 0 99 Z Use Credentials Domain Username domain administrator Password Port V Use Default O use sst Logging Disabled Errors Only Everything Note The SMTP server setting applies to all alert email actions and can also be modified from the main Preferences page Figure 30 Test email confirmation dialog box Complete g Test action initiated Check your E mail inbox to verify if the test e mail was received Note It may take several minutes for your e mail system to deliver the test e mail notification Lox 28 Dell KACE and OpenManage Essentials 11 In Severity Association assign the alert severity to which you want to associate this e mail alert and then click Next Figure 31 Select sevierty association in e mail alert action wizard Severity Association 3 of 7 Alert Email Acti Select the severity to associate with this action The2. New Ticket Far Submitter Ticket Actions Trie Device blob 10 159 22 170 Severity Warning Impact Many people can t work Category Storage Peripheral Status New Priority Warning Owner bryan_brooks dell com gt Filter 2 Machine E blob Asset oe ae ee Service Tag 9209131 Working together OME and the K1000 provide an end to end solution for proactively identifying and resolving issues within the environment Reporting on data center assets and activities Delivering effective reporting to the IT team and to management communicate issues that may impact priorities and illustrates successful and timely execution of processes Both OME and the K1000 provide out of the box reports that describe the inventory under management The K1000 extends this to provide reporting on activities being conducted within the environment including service desk ticket resolution patching status across multiple machines top vulnerabilities that need to be addressed software compliance issues and so on Custom reports may also be configured to address processes that are specific to the environment Additionally the K1000 will collect the warranty information for machines in inventory and provide reporting and alerting for warranty expirations that are coming due This provides the peace of mind that the servers under management have up to date service contracts 7 Dell KACE and OpenManage Essentials Figure 18 K1000 se
3. address these concerns quickly and proactively Most importantly the organization as a whole will harvest the benefits of reliable IT services to achieve overall business objectives 36 Dell KACE and OpenManage Essentials Additional resources Dell OpenManage Essentials For more information on Dell OpenMange Essentials visit www dell com ome or www delltechcenter com ome Dell OpenManage Administrator Dell OpenManage is a collection of software tools developed by Dell that helps you discover monitor manage and update Dell servers Documentation and downloads for OpenManage Server Administrator may be found at http en community dell com techcenter systems management w wiki 1760 aspx Helpful Links KACE Systems Management Appliances KACE Systems Deployment Appliances 37
4. alert action will take place when the criteria specified in the following pages matches an incoming alert Severity C all C Unknown C Normal Warning i critical Help Cancel Back Next 29 Dell KACE and OpenManage Essentials 12 In Categories and Sources Association assign the alert categories source to which you want to associate this e mail alert and then click Next Figure 32 Select alert categories in e mail alert action wizard 40f7 Alert Email Action Categor Select one or more alert categories or sources to associate with this action E Alert Categories gt Z Brocade Switch Environmental EqualLogic Storage FC Switch General Redundancy Hyperv Server iDRAC Server Traps Juniper Switch Keyboard Video Mouse KVM Memory Network Other PDU Performance Monitoring IZ Physical Disk E Power Help Cancel Back Next 30 Dell KACE and OpenManage Essentials 13 In Device Association assign the device or device groups to which you want to associate this e mail alert and then click Next Figure 33 Select devices in e mail alert action wizard 5 of 7 Alert Email Action Device Select the device s or device group s to associate with this action D Select a query New Edit Select the devices groups from the tree below E All Devices E HA Clusters M Microsoft Virtualization Servers Modular Systems Network D
5. and demands represents a daunting challenge for every IT organization Change is also introduced by external influences frequently unplanned in the form of component faults and remediation required driver and firmware updates and software patches and configuration modifications necessary to thwart security threats IT staff can be diligent in planning for change and schedule system updates accordingly but even effective planning gets sidetracked by surprises in system downtime or the discovery of critical issues that alter priorities To ensure project planning stays on track and system health is maintained IT staff must proactively control the discovery testing and implementation of system changes This is especially true of managing change within a server environment Servers are typically housed in secured air conditioned environments and thus are not constantly monitored yet they are responsible for tasks critical to the day to day operations of the enterprise and therefore warrant additional scrutiny If our approach to identifying and addressing issues with these systems is to react when a problem arises we risk significant disruption to IT services to the organizations that rely on those services and to the staff responsible for managing them To begin proactively managing our servers the following questions need to be answered What models of devices do we have in our data center What components are installed on them Are the dri
6. be recognized within the K1000 Appliance as the queue to receive email tickets from OME If you wish to use a different email address that is first externally defined in your email environment and then forwarded to this address you may specify that in the Alt Email Address field Here though we ll assume that the queues Email Address is being used When you configure the email alert in OME this email address will be the TO address in the OME Email alert action Also note that there is no specification for Ticket Owners by Label This is simply because user labels and the assigned users will be specific to your environment and cannot be assumed for the imported queue Everything within the imported queue may be customized to meet your requirements From the Ticket Layout section of the Service Desk Customization page you can customize the way tickets are displayed in the Tickets tab for each queue For example you e can create different ticket views and set read write access for users ticket owners and administrators e Refer to KACE K1000 Service Desk Administrator Guide for more information on customizing service desk tickets Customizing service desk ticket related parameters 1 Select Service Desk gt Configuration gt Queues gt lt Queue name gt gt Customize Fields and Layout tink 2 Select the Name you want to customize and set the label and permissions from the dropdown list Example Name CUSTOM_2 Label Servi
7. choices that best meet your environments needs e Assessing and Resolving Security Vulnerabilities The Dell KACE K1000 Systems Management Appliance provides vulnerability assessment tools based on industry standards and fully integrated patch management configuration management and distribution capabilities to resolve identified threats Dell KACE and OpenManage Essentials System Monitoring and Fault Resolution The Dell OpenManage Essentials toolset provides active system monitoring via SNMP and IPMI and delivers issues that have been identified for remediation to the Dell KACE service desk for ownership assignment and resolution e Reporting on Data Center Assets and Activities Extensive reporting capabilities are provided to track progress and validate processes Inventorying and managing data center assets The automation of inventory data collection is an essential first step in proactively managing data center assets Since change is constant this task must be performed consistently and on a regular basis to reflect an accurate baseline of the systems under management While both OpenManage Essentials and the Dell KACE K1000 Appliance can discover devices on the network using ICMP and SNMP far richer capabilities for servers are enabled by deploying agent software to the operating systems running on Dell PowerEdge Servers For OpenManage Essentials this agent is the OpenManage Server Administrator OMSA software OMSA may
8. used for client systems providing a consistent approach to all systems management Extensive reporting is also provided including driver Dell KACE and OpenManage Essentials and firmware comparison reporting by each individual machine or across a range of machines in the environment While a choice will typically be made to use the Dell Update Center processes exclusively from either OME or the K1000 that choice can be driven by the needs of the environment rather than any incremental costs to the solution since both offerings provide Dell Update Center integration as part of their core functionality Figure 11 K1000 Dell update comparison per machine Dall update Catalog Comparison Report Comparison Report sere Catalog Package name pevce aane eevee eaor Fos urecvcie commu v 1 50073 0 ag prvi 1505014 i ican SOKO g rosoe eann 6209 E esana Pi Pace io Je jos 136 faoa eonmedel 5 MATON Grew VOEO CONTROLER WLI AIO atex co0new ome 041 0 4459 Oriel a aa eee ____ twvaton Engish A ie mT 7 RADEON NETH FOUL OF ADAPTER EREET oroade omer ES E gy eCard a a ee ete Lane pee fem Assessing and resolving security vulnerabilities Because the K1000 Appliance extends systems management to include the operating system and software applications it is able to assess and address vulnerabilities across a full range of configurations Assessment
9. Dell KACE and OpenManage Essentials Managing and Monitoring Data Center Assets with Dell KACE and OpenManage Essentials This Dell Technical White Paper addresses integration of Dell KACE K1000 appliance with OpenManage Essentials OME and how Dell KACE and OME can play an important role of managing and monitoring data center assets in a simple cost effective solution to bring fault resolution in a quick and proactive manner Dell KACE Bryan Brooks Dell Open Manage Essentials Rajaneesh Shresta Sean Kim Dell KACE and OpenManage Essentials This document is for informational purposes only and may contain typographical errors and technical inaccuracies The content is provided as is without express or implied warranties of any kind 2012 Dell inc All rights reserved Dell and its affiliates cannot be responsible for errors or omissions in typography or photography Dell the Dell logo and PowerEdge are trademarks of Dell Inc Intel and Xeon are registered trademarks of Intel Corporation in the U S and other countries Microsoft Windows Windows Server and SQL Server are either trademarks or registered trademarks of Microsoft Corporation in the United States and or other countries Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products Dell disclaims proprietary interest in the marks and names of others November 2012 Version 1 0
10. Dell KACE and OpenManage Essentials Contents Executive summary Introduction Inventorying and managing data center assets Managing system updates Assessing and resolving security vulnerabilities 12 Integrating Dell K1000 with OME 19 Configuring OME and K1000 19 Customizing service desk ticket related parameters 2 Sample workflow of OME KACE integration 34 Conclusion Additional resources Executive summary Customers already using Dell KACE K1000 Systems Management Appliance to manage their client environment workstations desktops laptops etc can leverage OpenManage Essentials OME a free Dell application to manage their server environment Integrating KACE and OME allows customers to extend KACE service desk for server fault management without adding cost to their balance sheet Dell KACE and OpenManage Essentials As part of OME and KACE K1000 Service Desk integration users need to e Configure e mail alert action in OME that gets triggered when an alert is received based on filters set including Alert Severity Alert Category Device Device group Configure Service Desk in the KACE K1000 appliance to parse the e mail received from OME and create a trouble ticket e Validate the configuration by sending a test e mail from OME Introduction Constant change in computing environments often driven by new requirements meant to meet business goals
11. ET Framework 2 0 i Sine 328 microsoft Visual Studo NET 2005 fe nrad Dine 415 Merosott XML Core Serves 3 i nstaled Zine 5210 A version of Merasof Intemet Explorer installed The K1000 provides an extensive patch management system as part of its feature set that includes a constantly updated patch repository and scheduling system for deploying different sets of patches to different machines based on the attributes of the patches and machines in question The flexibility of this approach allows differing policies to be applied to different servers in the environment while providing a single unifying view of vulnerability assessment and remediation across all systems in the environment Extensive reporting delivers the assurance that systems are up to date including detailed reporting of each individual system and any operating system or applications patches that have been identified as needed for that system Figure 14 Patching status for a machine in inventory rulVUpgrade At Languages See 4 4747 08 00 00 00 00 00 00 00 Notes 07 00 es Fjnmco 3 5 Ea at ar NOTPATEHED 2011 06 o000 00 0 9000 00 0 Snatages Seo Notes 1417 00 00 0 00 00 0000 00 ler 24435865 Undatefor Wedows Sewer PATCHED 2011 06 0000 00 0 co00 00 0 ona na ws xazaaseas ara7 05 00 20 00 00 0000 00 eo 7 Unis Tor Wodons Serer PATCHED 2011 06 o000 00 0 000 00 0 2008 Ra wo Eton eave Tari 08 00 oo 00 00 b
12. be deployed to Windows Linux and ESX ESXi platforms and provides a consistent interface across all of these The data collected into OpenManage Essentials inventory by OMSA details the various hardware components and associated firmware and driver packages in the PowerEdge chassis including model and manufacturer information relevant interface capabilities and form factor data Any changes that occur due to field servicing would be reflected when new data is collected Additionally OME will collect ICMP and SNMP data on other devices such as storage arrays network devices printers and virtualization platforms for VMware and Microsoft Figure 2 OpenManage Essentials inventory For the Dell KACE K1000 Appliance the KAgent manages the required data collection for inventory and extends this collection into the software applications that are running on the platform It is also responsible for managing vulnerability assessment patching configuration and deployment tasks for the managed systems and their software The Dell KACE K1000 Appliance can also leverage the OMSA agent provided by OpenManage to collect additional data and manage configurations for Dell servers running Windows Server 2000 2003 and 2008 as well as Red Hat Linux 4 and 5 Information for other 6 Dell KACE and OpenManage Essentials assets such as printers network devices and virtualization hosts can be loaded into the K1000 Asset Management module Fig
13. ce Tag Required Not Required Permissions User Create 3 You can also define the Name type assign default value to a Name and etc under the Custom Fields section Example Name CUSTOM_2 Type Text Default Unknown 2 Dell KACE and OpenManage Essentials Figure 23 Define custom fields and parameters on the service desk configuration page D You can configure a new Alert Category in K1000 to match alert categories supported by OME Alert category identifies the type of device component or application that generated the alert For example temperature related alerts will be under the Environmental alert category To configure the Alert Category select Service Desk gt Configuration gt Queues gt lt Queue name gt gt Ticket Defaults Customize These Values link To add a new alert category select the icon on the top right under the Category Values section then provide the Name and Label properties and set the Default Owner User Settable properties Example Name Environmental Label Environmental Default Owner OMEAdmin User Settable True 2B Dell KACE and OpenManage Essentials Create an e mail alert action in OME 1 Launch the OME console and select Manage gt Alerts then in the left pane select Alert Actions gt Email 2 Right click on Email and select New Email Alert Action OR right click a pre canned sample alert action and select Clone then p
14. commontarke Cloned Email Critical Server Alerts to Admin Name Value Nome Cloned Email Critical Server Alerts te action Enabled Disabled type email Description This sample shows how to send an ema To vyour_edmin yourdemain com clone Emad Critical Sarva kin 2yourdomain com Ignore 3 In Name and Description provide e mail alert action name and description 4 Check Enabled checkbox and Click Next Figure 27 Name and description in e mail alert action wizard Alert Email Action Name and Description 1 7 Enter the name description and enabled state for this alert action Name Email Alert Action for kace Description This email alert action will send an alert email to KACE when a Critical alert is received from a managed node A Enabled 25 Dell KACE and OpenManage Essentials 10 In the e mail configuration screen provide the recipients of this e mail and sender in To and From address fields NOTE Make sure the To e mail address in OME matches the e mail address in KACE Service Desk configuration NOTE Verify that the e mail address in the From field in OME user sending the ticket into the K1000 service queue matches exactly the e mail address defined for that user in the KACE appliance NOTE Separate each recipient or distribution list with a semi colon Provide a Subject In the Message field create a map of the KACE service desk and OME pre
15. defined alert substitution parameters For each of the supported parameters the e mail alert action fetches alert data and assigns it to the corresponding parameters on the KACE service desk trouble ticket Refer to the KACE K1000 Service Desk Administrator Guide for more information on customizing service desk tickets Example NOTE Parameters prefixed with are defined in the KACE service desk NOTE Parameters prefixed with must be defined first in the message section of the Alert Email Action wizard and each parameter has to be in a new line NOTE Parameters prefixed with are defined in OME and are substituted with actual value when E mail alert action is triggered Click Email Settings and provide an SMTP server name or IP Address NOTE Make sure KBOX and OME are using the same SMTP server name address Validate the configuration using the Test Action button This should send a sample e mail to the all the recipients Click Next 26 Dell KACE and OpenManage Essentials Figure 28 E mail configuration in e mail alert action wizard Alert Email Action 2of7 Configure the e mail parameters for this alert action From ome banderadev4qa05 kace com Subject Device n ip Severity sev Message machini custom_1 n custom_2 st create_date d t priority sev cateaorv cn You may use the following parameters for substitution Device e Enterprise OID Device1P sp_
16. dentified by OME filters may be applied to determine if it is a fault that requires administrative intervention If so the alert information is transmitted as an email via SMTP to the K1000 service desk for ownership assignment and remediation within the IT team Information contained within the alert is assigned into the appropriate fields within the email that will generate the ticket so that the necessary reference information is available to the assigned administrator In this fashion complete control can be maintained for those faults that require intervention and remediation 14 Dell KACE and OpenManage Essentials Figure 16 Delivering alerts to the K1000 appliance D ALL oPenmanace essentaLs ES ce MSEE Devices Device Search Discovery and Inventory Alerts System Update Custom Tasks K1000 Service Desk Name Value Alert Actions x E Alert Actions P Name K1000 Service Desk Application Launc Los Action Enabled Enabled 7 Description Tonore ji Trap Forwarding Te ite k1000demo7 kace com From bryan_brooks dell com Subject Device n ip Severity ssev date gd st priority Message m t ita k1000demo7 kace com f bryan Arguments associated Severity Warning Critical Associated Alert Categories All When configuring the Alert Action in OME the administrator has options for filtering the alerts to only those that require action and defining w
17. e created aouiytyoe 1202 20 Noid aoiyayos 12 02 20 siemicor 2 omegoarasracersasos xace com See eo Erone fears Rasoluton tone Sossen Tine 89 minutar TAE S RRR eal TW NENT ere seein NATO TED Dell KACE and OpenManage Essentials Conclusion Users can have both OME and the KACE K1000 Appliance running on the same physical machine This can be achieved by having multiple virtual machines VMs on the same physical hypervisor system where one of the VMs will have OME installed and the other VM houses the K1000 virtual appliance By adding OME a simple free solution to your environment you can provide hardware monitoring within your KACE environment without impacting your budget The Dell KACE K1000 System Management Appliance combined with OpenManage Essentials and OpenManage Server Administrator provide a simple cost effective solution for managing your data center assets Deployment can be completed quickly and with existing staff so the return on investment is quickly realized With the combined solution in place your staff will be able to review all aspects of the hardware and software you have deployed in your data center and their update status They will be able to track changes that have taken place over time and by whom they have been implemented When vulnerabilities are identified service contracts are nearing expiration or components fail your staff will be in a position to
18. e been installed including their version number location within the file system online links for additional information about each software title and metadata for categorizing the inventory entry Multiple software packages may be rolled up into a software title for management including metering and license management Dell KACE and OpenManage Essentials Using the Managed Installation functionality of the K1000 the OMSA agent may be installed on multiple machines greatly simplifying the deployment of the overall solution The managed installation will transfer the installation package for OMSA to the target servers and execute the installation using the supplied installation parameters as shown below Figure 5 K1000 managed installations Se t somna Piante Ma seaoea Managed Software Installation Edit Detail TRAM dec S 0 3347 na 30 86 mabe Ai myene Han oe ostat cl opetoae Saroe Adm maori mses ne ong ean Se yn ect Nan Far open ve Managing system configurations When OMSA is deployed to a server version of the Windows operating system of a Dell PowerEdge Server it introduces Dell CIM instrumentation providers that deliver a WMI namespace coot CrMv2 De12 with several new classes and extensions to existing classes for managing devices within the Dell PowerEdge chassis and their associated applications and events OpenManage Essentials leverages these CIM providers in its data collection for
19. emails from OME We ll set this up before configuring the email alert in OME since we need the email address for the service desk queue to complete the OME configuration To simplify this task you can download a sample queue as a kpkg here and upload it to your K1000 Appliance as follows 1 Connect to the clientdrop network share on your K1000 and navigate to lt your_K1000_host gt clientdrop and log into the share using the credentials configured in the K1000 Appliance for the network share 2 Copy the downloaded Queue 110 kpkg file to the clientdrop share 3 Log into your K1000 Appliance and go to Settings gt Resources gt Import K1000 Resources 4 From the dropdown field on the left select Choose Action gt Import Resources s from SAMBA Share 7 If the sample queue package becomes unavailable for download Google search for Queue 110 kpks 20 Dell KACE and OpenManage Essentials Figure 21 Import resources from SAMBA share directory Import Resources From SAMBA Directory Select Piets for npr 1 Select Queue 110 kpkg from the list of files and then select Import Resources You ll now see a queue resource listed called OME that is imported into your K1000 Appliance 2 Navigate to Service Desk gt Configuration gt Queues Click on the OME queue Figure 22 Service desk configuration a Dell KACE and OpenManage Essentials Note the email address of the queue This is the email address that will
20. en shaw neton ime changes Wie ponar onora Tor Ncrsoh Viedows KEZS39E3A m mwena for Nctsah Windows haassess2 n uenta for Mcrvot Winde we KB2559049 m mero for Mctosoft Windows 82560636 h venio Found srerae em Sac Update fr Merasa t windows KB23B2937 minventany Found software tam Securty Update for merosot vindos 82563694 n inventa Found sfenare nem Seat Update fr Meret Windows 82567660 n inventa ter Upda ar Merona Windows 3563327 mime Egy 20 17 50200 AOD ta 2011 08 11 04 18 43 0707 sre pa ass ND ea a 00 A The K1000 scripting module may be used to configure various system attributes on the managed services by leveraging the OMCONFIG command line interface of the OMSA agent In this fashion multiple Red Hat Linux and Windows servers in the managed environment may be consistently configured even at the BIOS level The OMCONFIG CLI provides extensive options for managing SNMP configurations and alert actions log settings for system event logs alert command and ESM system 10 Dell KACE and OpenManage Essentials shutdown and recovery options chassis configurations asset management and power management and monitoring For example SNMP events may be enabled or disabled for specific event types e g power supplies redundancy temperature fans voltage system power memory chassis intrusion battery and logs and severity levels The OMCONFIG command for enabling all event ty
21. essage of the alert identifying details of the identified issue These attributes are assigned to fields in the K1000 service desk ticket by mapping them to the appropriate receiving field in the K1000 service desk The receiving field is identified by using a sign and the name or label of the field in the service desk ticket configuration For example to map the Asset Tag to a custom field in the service desk ticket the mapping may appear as at where n is the tag eld in the t e asset_tag at where as _tag is the label ass field used for asset tag When the ticket is created within the K1000 service desk the category of the alert is available to manage routing of the ticket to the right team for resolution and all of the controls necessary for managing ownership assignment approvals and other tracking are available When the Kagent is present on the machine its entry in the K1000 inventory is directly accessible from the ticket by clicking on the Machine link in the ticket If the device in the ticket does not have the Kagent installed on it it may still be referenced using the Asset link provided the asset information has been loaded into the K1000 16 Dell KACE and OpenManage Essentials Figure 17 Ticket for an alert in the K1000 service desk er A seie oek Software Ubrary Knowledge Base Configuration Ticket TICK 0218 Printer Friendly Find Related Articles Emai Ticket
22. evices 008 Unclassified Devices E Printers RAC Servers Sa E 10 35 0 220 A msoso4 waks A PE1950w2K8 SK1 Z PE1950 DAVID El Storage Devices F inkanwn Help Cancel Back Next 3 Dell KACE and OpenManage Essentials 14 In Date Time Association enter the date or time range on when this e mail alert action is active and then click Next By default the e mail alert action created is active at all times Figure 34 Date time association in e mail alert action wizard Alert Email Action Date Select the date range time range and or day s of week to associate with this action C Limit Date Range From 2011 m To 1374 2011 C Limit Time Range From 4 26 Ph a To a C timit Days Help Cancel Back Next Dell KACE and OpenManage Essentials 15 In the Summary window review inputs and click Finish Figure 35 Review configuration in e mail alert action summary Review your inputs and click Finish to continue or click Back to change your inputs vale action Enabled Enabled Description This ema alert ection il seed on ema ta KACE When Chal nierk ia rammi rom a manage nade te emaBlbochacecem rom eme bardaradevtga05 100 0 subject Deven ip Seventy fae Devinn ip Service Tape asst Tag fa Date 4 Tine t Savery fay Messages Alert Se fon t Yometkbes Aace cam 7 ameabandaradevagaos kac com lt Devcstn Si Sever
23. he email that will generate the ticket so that the necessary reference information is available to the assigned administrator In this fashion complete control can be maintained for those faults that require intervention and remediation Configuring OME and K1000 Dell OpenManage Essentials is a Windows based systems management console that replaces Dell IT Assistant A physical or virtual server running Windows Server 2008 will be required to run OME This installation is quite simple and largely self contained OME includes Microsoft SQL Server Express for small deployments If you plan to manage a large environment however OME supports use of Microsoft SQL Server Enterprise 1 Install OME 2 Launch the OME console and select Manage gt Discovery and Inventory 3 Inthe left pane select Discovery Ranges gt Add Discovery Ranges to define an IP range for discovering your servers 4 Enter the IP address range or a list of DNS hostnames for the machines you want to monitor and select an applicable protocol provide credentials then click Finish 1 Supported only if the corresponding MIB is imported into OME 19 Dell KACE and OpenManage Essentials Figure 20 OpenManage Essentials discovery range configuration wizard Spec IP agross range or host name cae er tsas0 100 255 lasama Configure service desk and service queue in KACE The next step is to create your K1000 service desk queue so it can receive
24. hich attributes of the alert need to be transferred to the service desk in the K1000 so the assigned administrator may resolve the issue Alerts may be filtered based on the severity of the event user defined alert category device type and time of the event When configuring the email that will be sent to the K1000 service desk for a filtered alert the following attributes may be communicated as part of the event Device n The fully qualified domain name of the device as returned from DNS Device IP Sip The assigned IP address for the device Service Tag st The Dell Service Tag assigned to the device e Asset Tag Sat The asset tag assigned by the customer to the device within BIOS 15 Dell KACE and OpenManage Essentials Date and Time d and t The date and time of the alert event e Severity sev The severity of the event Normal Warning Critical Unknown e Alert Category Name Sct The category of the alert Several default values are preconfigured and more may be configured within OME e Alert Source Name Sst The source of the alert e Package Name Spkn The package associated with the alert event e Enterprise OID e The object identifier for the type of managed object that generated the trap e Specific Trap OID sp The specific trap code identifier for the generated trap e Generic Trap OID g One of a number of generic trap types as generated from SNMP Message Sm The m
25. o ao 00 The ability to detect system vulnerabilities using industry standard protocols and resolve those vulnerabilities by applying needed system firmware and driver updates as well as operating system and application software patches all within a single system management platform means greater productivity for your IT staff System administrators will spend less time identifying and researching issues and applying appropriate remedies to resolve vulnerabilities And management will have the assurance and proof that system weaknesses have been addressed via the compliance reports 13 Dell KACE and OpenManage Essentials System monitoring and fault resolution Possibly the most important task to be automated is proactive identification of faults within the systems being monitored and tracking of the fault remediation to its conclusion OME provides active monitoring of Dell and non Dell computer systems and other devices via industry standard SNMP and IPMI protocols Specific faults to be monitored may be configured within the OpenManage Server Administrator or OME may capture any SNMP trap information that has been issued on a monitored system Because the K1000 can control configurations across a range of machines by accessing the OMSA OMCONFIG command line interface SNMP and IPMI settings can be consistently applied for multiple systems Figure 15 Monitoring and filtering alerts in OME Once a fault has been i
26. oach to systems management The Dell KACE K1000 Systems Management Appliance combined with Dell OpenManage Essentials provides a simple cost effective and comprehensive approach that meets the needs of most enterprises The following diagram illustrates how these products interact to provide a solution for proactive systems management Figure 1 Solution overview of Dell OpenManage Essentials and Dell KACE Sa TP ae l Dall Servers Cem ane e Inventorying and Managing Data Center Assets Computer environment inventory requires that the data collected be comprehensive for virtualization platforms network devices printers computer hardware and software This data collection must be kept up to date in a way that does not distract from other day to day tasks Both OME and the K1000 leverage industry standard SNMP IPMI CIM WMI and other protocols to fully automate this task e Managing System Configurations Managing consistent system configurations across multiple systems is essential to maintaining overall compute environment health The combination of OpenManage and KACE allow this capability to be centrally controlled across a heterogeneous environment e Managing Dell System Updates Keeping driver and firmware updates in control is essential as you work to protect your Dell computing investment Both OME and the K1000 offer fully integrated Dell system update capabilities to provide you with
27. pes would look like Detailed documentation for the OMCONFIG command set can be found in the OMSA manual http support dell com support edocs software svradmin Managing system updates Both OME and the K1000 integrate with the Dell Update Center to provide the latest firmware and drivers updates for the components installed in your Dell equipment purchases Updates are identified as critical recommended or optional in accordance with the Dell Update Center and contain all pertinent details such as the version number and date of release OME introduces an optional component for loading driver and firmware updates into a local repository to manage reporting of available packages and scheduling deployment of the packages to systems This functionality relies on the OMSA agent and allows updates to be deployed to Windows Linux and ESX ESXi host computers within the environment Figure 10 OME Dell update repository DELL MANAGER pe F Som Pem 0a Emere Repository ftp dell com catalog Catalog cab ftp dell com e Tm swe PT es Sas aa aaa The K1000 integrates Dell updates as well allowing the administrator to leverage a consistent set of functionality to schedule a set of driver and firmware updates to be applied to the machines that need them in the same fashion that they schedule OS and application patching Unlike OME these same processes for Dell updates and software patching may also be
28. rovide a new name and select Edit from the right click menu of the cloned alert action Figure 24 Launching an e mail alert action wizard OPENMANAGE ESSENTIALS A NE ice Search Discovery and Inventory Alerts System Update Remote Tasks Action Enabled Name Descriptio E Alert Actions Sample Email Alerts to Service Desk This samp Application Launch Sample Email Cat server Alerts to Admin This samo 1 New lert Email Action E Sampie Eman alerts t New Alert Email Acti Sample Emaii Critcal Serv E Ignore Figure 25 Clone a pre canned sample e mail alert action DOAL OPENMANAGE ESSENTIALS Devices Device Search Discovery and Inventory Alerts System Update Remote Tasks Sample Email Critical Server Alerts to Admin eno Alert Actions Name Value E Alert Actions Name Sample Email Critical Server Alerts to 4 Aepiention iamh Action Enabled Disabled amp Emai Type Email _ ED Sampie emait Ales to Ser EI aces 5 serpie emai crtica Sen your_admin yourdomain com Ignore gae your_ome_edmin yourdomain com 24 Dell KACE and OpenManage Essentials Figure 26 Enter and edit a new name for the cloned e mail alert action Clone Alert Action z Enter a new name for the Alert Action Sample Email Critical Server Alerts to Admin Ok Cancei_ A ono EE Devices Device Search Discovery and Inventory Alerts System Update Remote Tacks
29. rs OVAL and SCAP vulnerability assessment scripted configuration management and reporting also work well for managing servers A key feature that s often a requirement for server management that you may also need is active system monitoring based on protocols like SNMP or IPMI While the K1000 can perform SNMP scans to assist in device discovery it doesn t receive SNMP traps to assist in identifying issues with those servers In any IT environment 24 7 accessibility to the data center is essential in order to proactively monitor system health identify faults and automatically notify IT administrators for immediate resolution of these faults Dell OpenManage Essentials OME allows IT organizations to actively monitor Dell servers non Dell Servers and other devices via industry standard SNMP and IPMI protocols By configuring devices to send SNMP traps alerts and IPMI Platform Event Traps PET to an OME management station OME acts as a centralized monitoring application Many IT organizations have implemented a centralized mechanism for tracking and handling these server faults such as hard drive failure loss of network connection etc These server faults are typically managed through a service desk or a help desk KACE 1000 Service Desk can receive alerts information from OME then open a trouble ticket and assign it to an IT administrator for remediation Information contained within the alert is assigned into the appropriate fields within t
30. rvice desk reports Boriome BB inventory BD asset Distribution BE scipting AY sec Reports CiassicReports Schedule Reports Alerts Email Alerts K1000 Reports Choose Action Found 22 reports L Report E hosed Satisfaction Survey last 31 days by Owner E Closed Ticket Resolutions last 7 days by Owner Cosed Ticket Resolutions last 31 days by Owner EI Closed Tickets last 7 days by Owner E Closed Tickets last 31 days by Category O losed Tickets last 31 days by Owner E _ Escalated Open Tickets by Owner E Open Tickets by Category E Open Tickets by Owner EL Open tickets last 7 days by Owner Figure 19 Dell warranty information in K1000 inventory Service Tag H192BK1 T System Type PE R610 Thdwick OEM Ship Dates 2009 06 22 Country United States Description Provider StartDate fd Date pays tet Next Busness Day Support uw potorosas__ 2o12 e0 20 380 2 Next Busness Day Support uny 20097085 22 2010 06 22 o Refresh 18 Dell KACE and OpenManage Essentials Integrating Dell K1000 with OME The features of the Dell KACE K1000 Systems Management Appliance are exceptionally well suited to manage a distributed desktop environment But what about managing the servers in your environment Obviously most of the K1000 features such as automated inventory and machine labeling server operating system patching Dell driver and firmware updates for serve
31. s are performed using industry standard approaches such as the Open Vulnerability Assessment Language OVAL and the Security Content Automation Protocol SCAP Use of OVAL and SCAP ensures a reliable and reproducible set of metrics that are constantly updated as new threats are identified Figure 12 OVAL vulnerability assessment tests a 12 Dell KACE and OpenManage Essentials Assessments may be applied across multiple machines using the same dynamic grouping mechanism available to all features of the 1000 allowing scanning schedules to account more frequently for those systems that are of highest concern When vulnerabilities are identified patching and system configuration changes for the affected system may be addressed directly within the appliance Figure 13 OVAL test as applied to a machine in inventory Security Patching Detect Deploy Status Treat Level 5 List 0 Oval Vulnerabilities 2 OVAL Test Runner ew Logs SWuherabie 3556 The Microsoft NET forms authentention capabity for ASP NET lows remote att A vuherabie 1099 Bufer overflow n a component of SQL DMO for Microsoft Data Access Components Sine 454 Merasa XML Core Serve 6 1s nstled Tue 4870 The operating system nstaled on the system ts Microsoft Windows Server 2008 3 Sine 5525 Test dhs OS shouid support WNI service Note diferent Objects ae Dine 1934 Mierasoft_NET Framework 2 0 Ongnal TM or ater is nstaled tne 310 Merosoft N
32. storage pdisk controller 0 ETE iian E ae ea IN aan 2 System Physical Disks Uist 6F Physical Disks on Controller PERC 6 i M greted Embedded Controller PERC 6 i Integrated Embedded 1D 0 0 0 Status Ok Name physical Disk 0 0 0 State Onine Power Status Not Applicable Bus Protocol SAS Media HOD Revision 522C Failure Predicted No Certified Not Applicable Encryption Capable No Encrypted Not Applicable Progress Not Appicable Mirror Set ID Not Applicable Capacity 136 13 GB 146163105792 bytes Used RAID Disk Space 136 13 GB 146163105792 bytes Available RAID Disk Space 0 00 GB 0 bytes Hot Spare No Vendor ID DELL tm Product ID ST914680255 PON RNR pel ERE Na SUS A aN FN Neer Actions may be enabled within the K1000 inventory that direct the administrator to the OMSA and DRAC web interfaces conveniently placing remote control access to the server directly within the system management interface Dell KACE and OpenManage Essentials Figure 8 Attaching a machine action to enable OMSA or DRAC Computer Inventory BIOS Setup SATA Opteam As changes occur to the system over time these changes are recorded in the asset history of the system within the K1000 inventory providing a single location to review what s been altered when and by whom Figure9 Tracking change history with the K1000 asset history Saree c
33. these devices as part of its core functionality The Dell KACE K1000 appliance can also collect this information as part of its inventory by defining custom inventory fields against the provided namespace Dell KACE and OpenManage Essentials Figure 6 Custom inventory with Dell CIM Custom Inventory Rule 2 ShelCommandTextReturn WMIC NAMESPACE root CIMV2 Dell PATH Dell_RemoteAccassServicePart GET VALUE ERO EY RMN nr ON el NS 1 Dell Remote Access Port Accessinfo 10 159 19 55 AccessinfoIPv4 htips 10 159 19 56 443 AccessIifolPve Caption CreationClassName Desertion EnabiedDefa Enabiedstate 5 D AA a LAN rene In the above example the Dell WMI namespace is accessed to retrieve information about the out of band management facilities of the Dell Remote Access Controller DRAC allowing the administrator to quickly identify and access a remote console for the server and control power management BIOS settings and other options even if the operating system on the server is not available However this approach is limited to Windows platforms For cross platform support the oo1z OR and oMCONF TG command line interfaces of the OMSA agent may also be leveraged within the K1000 inventory for consistent data collection and operational control across both Windows and Linux operating systems Figure 7 Custom inventory with OMSA OMREPORT Custom Inventory Rule E ShelCommandTextRetum omreport
34. ty eco b Bmacinendn Geiser ouster tat command une Doreste Jate sd st aenant Associated Severty cr st Tag fat Data Timest Savary asv Messegersm Ale Sen an Associated alert Sources Al lassociated Device Groups servers Associated Date Range a Associated rime Range Help ones Back Finish Dell KACE and OpenManage Essentials Sample workflow of OME KACE integration 1 OME receives a critical alert from a monitored server and triggers the E mail alert action which in turn collects alert data and sends an e mail to KACE service desk Figure 36 Alerts received in OME Home Portal dashboard Ta x 2 The E mail received is parsed by KACE Service Desk It then creates a Service Desk ticket under OME service queue based on the criteria set Figure 37 List of service desk tickets in K1000 Appliance saaana 34 Dell KACE and OpenManage Essentials 3 Click on the service desk ticket to view the details Figure 38 Details of a service desk ticket in K1000 Appliance i Fermentor 9 Ticket TICK 0466 st Foon nd aid a ot Tal Bae Tt Doves ee rosoware se1 10 any posi cart work J category sane ew a Pret Owner unassigned F rte ff Machine unassigned F rine ae amet imassignes F rte i Deve tiame oe Service Tag mm mense nona Nor 04 2013 couse Hon
35. ure 3 _Dell KACE K1000 system inventory fiia E ay ae a Computers Software Processes staruo Service mia Computers Detail Item blob expand al Pater Friendly version Summary Name tios Moost Bowertige n610 Chassis Type Server za address 10 159 22 170 BE mac 00 22 19 5414F 88 RAN Total 1210098 ira chu Core Count 8 rua intel Xeon R CPU E5520 2 27GH2 4 cores EPUI IntellR Xeon R CPU E5520 2 27GHe cores 05 Nome Microsoft Windows Server 2008 R2 Stendo xA pom Since tast Rabo 5 days 12 hours 57 nutes Agent Verso 5 3 43742 Aant Tenezone depencalLos_Pogeles icine at 2011 09 07 06 01 00 Record Created 2011 05 17 16 05 58 Oak et Dave C Physica Oa FieSystem NTFS Used 77 4468 Total 408 2868 18 97 ventory Update Figure 4 K1000 software inventory installed Programs 32 7 Zip 4 65 4 65 00 0 Dell KACE Agent 5 3 43742 Dell OpenManage Server Administrator 6 5 0 Dell Remote Access Port EZ GPO Power Management Config Tool 2 2 3 Intel R Network Connections Drivers 14 2 Matrox Graphics Software remove only Microsoft NET Framework 1 1 1 1 4322 Microsoft Application Error Reporting 12 0 6015 5000 Microsoft Security Compliance Manager 1 1 3 0 Microsoft SQL Server 2008 64 bit Microsoft SQL Server 2008 Browser 10 1 2531 0 The K1000 Appliance agent leverages the relevant registry information on the operating system to identify the software packages that hav
36. vers and firmware for those components up to date What software is installed on those systems Have we applied all necessary patches from our software vendors e Are our system configurations consistent across servers How do we manage server boot options and BIOS settings across those servers without having to visit each server and attach a console e Are our service contracts up to date on our servers When will our warranties expire How can we be notified of this event before it occurs e Are our systems vulnerable to security threats How are we identifying our vulnerabilities What are we doing to remediate these threats and how do we track that the remediation has been performed successfully How do we know when a component has failed How quickly are we able to react How do we track the resolution of a component failure and record what we ve learned To answer these questions effectively we need a comprehensive view of the systems under management and the necessary tools to assess and update these systems before issues arise Of course this needs to be accomplished with minimal impact on the IT budget So the tools need to be easy to Dell KACE and OpenManage Essentials acquire and easily adopted by existing staff Deployment of these management tools should minimize investment in time and resources and quantitatively return that investment quickly In this whitepaper we will address these questions with Dell s innovative appr
Download Pdf Manuals
Related Search