Download Print this page

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SYSTEM ADMINISTRATION REFERENCE 10.3 16-04-2010 System Administration Manual

Hide thumbs Also See for ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SYSTEM ADMINISTRATION REFERENCE 10.3 16-04-2010:

User manual (272 pages)

,

Deployment manual (34 pages)

Table Of Contents

Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual

AUTHORIZED DOCUMENTATION

System Administration Reference

Novell

®

ZENworks

10 Configuration Management SP3

®

10.3

April 16, 2010

www.novell.com

ZENworks 10 Configuration Management System Administration Reference

Table of Contents

Advertisement

Table of Contents

Troubleshooting

Need help?

Need help?

Do you have a question about the ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SYSTEM ADMINISTRATION REFERENCE 10.3 16-04-2010 and is the answer not in the manual?

Questions and answers

Summary of Contents for Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SYSTEM ADMINISTRATION REFERENCE 10.3 16-04-2010

Page 1 AUTHORIZED DOCUMENTATION System Administration Reference Novell ® ZENworks 10 Configuration Management SP3 ® 10.3 April 16, 2010 www.novell.com ZENworks 10 Configuration Management System Administration Reference...
Page 2 Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
Page 3 Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/ trademarks/tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners.
Page 4 ZENworks 10 Configuration Management System Administration Reference...
Page 5: Table Of Contents
Accessing ZENworks Control Center ..........19 Accessing ZENworks Control Center through Novell iManager......20 Navigating ZENworks Control Center .
Page 6 2.4.3 Assigning Roles ........... . . 47 2.4.4 Editing a Role .
Page 7 ZENworks Server Reports ........... . 77 7 Satellites Understanding the Satellite Roles .
Page 8 11 Disaster Recovery 11.1 Replacing the First Primary Server with the Second Primary Server....123 11.2 Replacing an Existing Primary Server with a New Primary Server ....126 11.3 Re-Creating Certificates .
Page 9 20.1.6 Stage Timeout Settings ..........180 20.1.7 Reboot Behavior .
Page 10 25 Update Statuses 26 Configuring the System Update Behavior of the ZENworks Adaptive Agent Part V Zone Administration 27 Management Zone Configuration Settings 27.1 Accessing Configuration Settings ..........225 27.1.1 Modifying Configuration Settings at the Zone .
Page 11 Part VII Users 31 User Sources 31.1 Prerequisites ............. 257 31.2 Managing User Sources.
Page 12 34.2 Changing the Ports Used by the Embedded Sybase SQL Anywhere Database ..293 34.3 Backing Up the Embedded Sybase SQL Anywhere Database ..... . . 295 34.3.1 Backing Up the Embedded Sybase SQL Anywhere Database on a Windows or Linux Server .
Page 13 36.2.2 Changing the Backup Schedule and Location of the External Sybase Database Subsequent to the Initial Backup ........335 Part X Message Logging 37 Overview 37.1...
Page 14 C Customizing the Look and Feel of the ZENworks Icon Replacing the Default ZENworks Icons with the New Customized Icons....369 Replacing the Customized Icons with the Default ZENworks Icons....370 D Documentation Updates April 16, 2010 .
Page 15: About This Guide
HTML formats) that you can use to learn about and implement the product. For additional documentation, see the ZENworks 10 Configuration Management documentation (http:// www.novell.com/documentation/zcm10/index.html). Documentation Conventions In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path. About This Guide...
Page 16 ® A trademark symbol ( , etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. When a single pathname can be written with a backslash for some platforms or a forward slash for other platforms, the pathname is presented with a backslash. Users of platforms that require a forward slash, such as Linux*, should use forward slashes as required by your software.
Page 17: Part I Zenworks Control Center
ZENworks Control Center ® This section contains information about using ZENworks Control Center (ZCC) to configure system settings and perform management tasks in your Management Zone. Chapter 1, “ZENworks Control Center,” on page 19 Chapter 2, “Administrators,” on page 27 Chapter 3, “ZENworks News,”...
Page 18 ZENworks 10 Configuration Management System Administration Reference...
Page 19: Zenworks Control Center
ZENworks Server. Section 1.1, “Accessing ZENworks Control Center,” on page 19 Section 1.2, “Accessing ZENworks Control Center through Novell iManager,” on page 20 Section 1.3, “Navigating ZENworks Control Center,” on page 21 Section 1.4, “Changing the Default Login Disable Values,” on page 22 Section 1.5, “Changing the Timeout Value for ZENworks Control Center,”...
Page 20: Accessing Zenworks Control Center Through Novell Imanager
( ) that you can .npm use to access ZENworks Control Center from Novell iManager, which is a management console used by many Novell products. The ZENworks Control Center plug-in supports iManager 2.7 only. It does not support iManager 2.6 or 2.5;...
Page 21: Navigating Zenworks Control Center
1.3 Navigating ZENworks Control Center The following Servers page represents a standard view in ZENworks Control Center: ZENworks Control Center Figure 1-1 Navigation Tabs Work Panel Help Information Frequently Used Task List Objects Navigation Tabs: The tabs in the left pane let you navigate among the functional areas of ZENworks.
Page 22: Changing The Default Login Disable Values
Primary Servers in the zone. The lockout period is determined by the configuration on the server where the login attempts failed. To modify the login tries and timeout values: 1 In a text editor, open the following file: Windows: installation_location\novell\zenworks\conf\datamodel\zdm.xml Linux: /etc/opt/novell/zenworks/datamodel/zdm.xml 2 Add the following lines to the file: <entry key="allowedLoginAttempts">5</entry>...
Page 23: Using The Config.xml File To Modify Zenworks Control Center Settings
You can make the ZENworks Control Center timeout value different on each ZENworks Server in the Management Zone. To change the ZENworks Control Center timeout value on a ZENworks Server: 1 On the ZENworks Server, open the file in a text editor. config.xml Windows: \Novell\ZENworks\share\tomcat\webapps\zenworks\WEB- INF\config.xml Linux: /opt/novell/zenworks/share/tomcat/webapps/zenworks/WEB-INF/ config.xml 2 Locate the entry.
Page 24: Bookmarking Zenworks Control Center Locations
Started page, then select Do not show me this again. noQuickTaskAutoRefresh: This setting disables automatic refreshing of the QuickTask status dialog box. It is used to discover issues with QuickTask status updates. You should not change this setting unless instructed by Novell Support. 3 Save the file.
Page 25: Troubleshooting Zenworks Control Center
If you are logged in to ZENworks Control Center when you click a bookmark, the location is immediately displayed. If you are not logged in to ZCC when you click a bookmark, the Login dialog box is displayed. After you enter valid credentials, the location is immediately displayed. To create bookmarks: 1 In ZENworks Control Center, navigate to a location where you want to create a bookmark.
Page 26 ZENworks 10 Configuration Management System Administration Reference...
Page 27: Administrators
Section 2.2.1, “Assigning Super Administrator Rights,” on page 30. If ® you need any further help, contact Novell Support (http://www.novell.com/support). In some cases, you might have multiple administrator accounts that require the same administrative rights. Rather than assign rights to each account individually, you can create an administrator role, assign the administrative rights to the role, and then add the accounts to the role.
Page 28: Creating Administrators
2.1.1 Creating Administrators To create an administrator account: 1 In ZENworks Control Center, click the Configuration tab. 2 In the Administrators panel, click New to display the Add New Administrator dialog box. The Add New Administrator dialog box lets you create a new administrator account by providing a name and password, or you can create a new administrator based on an existing user in the user source.
Page 29: Deleting Administrators
Administrator login names with Unicode* characters are case-sensitive. Make sure that you use the correct case for each character in the login name when it contains Unicode characters. The new administrator can change the password the first time he or she logs in by clicking the key icon located next to the Logout link in the upper right corner of ZENworks Control Center.
Page 30: Managing Administrator Rights
To change the password for the currently logged-in administrator: 1 In ZENworks Control Center, click the icon located next to the Logout Administrator option in the top right corner. The Change Administrator Password dialog box is displayed. 2 Fill in the fields, then click OK. To change the password for the default Administrator account: 1 Log in using the Administrator account.
Page 31: Modifying Assigned Rights
2.2.3 Modifying Assigned Rights 1 In ZENworks Control Center, click the Configuration tab. 2 Click the administrator in the Name column of the Administrators panel. 3 In the Assigned Rights panel, select the check box next to the assigned right. 4 Click Edit, then modify the settings.
Page 32: Administrator Rights
Section 2.3.2, “Bundle Rights,” on page 32 Section 2.3.3, “Contract Management Rights,” on page 33 Section 2.3.4, “Credential Rights,” on page 34 Section 2.3.5, “Deployment Rights,” on page 34 Section 2.3.6, “Device Rights,” on page 34 Section 2.3.7, “Discovery Rights,” on page 35 Section 2.3.8, “Document Rights,”...
Page 33: Contract Management Rights
Privileges The Privileges section lets you grant the selected administrator rights to create or modify bundles, groups, and folders listed in the Contexts section. The following rights are available: Modify: Allow or deny the administrator the rights necessary to modify bundles. Create/Delete: Allow or deny the administrator the rights necessary to create or delete bundles.
Page 34: Credential Rights
2.3.4 Credential Rights The Credential Rights dialog box lets you select folders containing credentials, then modify the rights associated with those folders. “Contexts” on page 34 “Privileges” on page 34 Contexts Click Add to select the folder that contains the credentials for which you want to assign rights. Privileges The Privileges section lets you grant the selected administrator rights to create or modify credentials, groups, and folders listed in the...
Page 35: Discovery Rights
Contexts To select the folder that contains the devices for which you want to assign rights, click Add to display the Contexts dialog box, then browse for and select the folders for which you want to assign rights. Privileges The Privileges section lets you grant the selected administrator rights to work with devices, including device groups and folders listed in the Contexts section.
Page 36: Inventoried Device Rights
Contexts To select the folder that contains the documents for which you want to assign rights, click Add to display the Contexts dialog box, then browse for and select the folders for which you want to assign rights. Privileges The Privileges section lets you grant the selected administrator rights to create or modify documents and their folders listed in the Contexts section.
Page 37: Ldap Import Rights
Create/Delete Folders: Allow or deny the administrator the rights necessary to create or delete folders. Modify Settings: Allow or deny the administrator the rights necessary to modify inventoried device settings. 2.3.10 LDAP Import Rights The LDAP Import Rights dialog box lets you allow or deny importing of LDAP information. 2.3.11 License Management Rights The License Management Rights dialog box lets you select folders containing licenses, then modify the rights associated with licenses and folders.
Page 38: Policy Rights
Remove from Baseline: Allow or deny the administrator the rights necessary to remove a patch that was assigned to the baseline. View Patch Details: Allow or deny the administrator the rights necessary to view patch details. Export Patch: Allow or deny the administrator the rights necessary to export patches. Scan Now: Allow or deny the administrator the rights necessary to start a scan.
Page 39: Quick Task Rights
2.3.14 Quick Task Rights The Quick Tasks Rights dialog box lets you select folders containing devices, then modify the Quick Task rights associated with those folders. Quick Tasks are tasks that appear in ZENworks Control Center task lists (for example, Server Tasks, Workstation Tasks, Bundles Tasks, and so forth).
Page 40: Reporting Rights
Contexts To select the folder that contains the devices and users for which you want to assign rights, click Add to display the Contexts dialog box, then browse for and select the folders for which you want to assign rights. Privileges The Privileges section lets you grant the administrator rights to modify the Remote Management rights associated with the contexts (folders) you selected in the...
Page 41: Zenworks User Group Rights
The following rights are available: Modify ZENworks Group Membership: Allow or deny the rights necessary to modify ZENworks group membership. If you select this option, you must also grant rights to Modify ZENworks Group Membership under ZENworks User Group Rights. Assign Policies: Allow or deny the administrator the rights necessary to assign policies to users.
Page 42: Managing Administrator Roles
The Management Zone settings let you manage the global configuration settings for your Management Zone. These global configuration settings are inherited by other objects (devices, users, and folders) within your Management Zone and remain in effect unless they are overridden on those objects. Modify Zone Infrastructure: Allow or deny the administrator the rights necessary to modify Zone infrastructure.
Page 43: Understanding Administrator Roles
2.4.1 Understanding Administrator Roles The roles feature allows you to specify rights that can be assigned as roles for ZENworks administrators. You can create a specialized role, then assign administrators to that role to allow or deny them the ZENworks Control Center rights that you specify for that role. For example, you could create a Help Desk role with the ZENworks Control Center rights that you want help desk operators to have.
Page 44 Role Settings Page If you click a role in the Name column on the Roles panel, the Role Settings page is displayed with the following information: Role Settings Page Figure 2-2 General panel: Displays the ZENworks Control Center object type (Role), its GUID, and a description that you can edit here.
Page 45: Creating A Role
Administrator Settings Page If you click an administrator in the Administrator column on the Roles Settings page, the Administrator Settings page is displayed with the following information: Administrator Settings Page Figure 2-3 General panel: Displays the administrator’s full name and provides the option to specify the administrator as a Super Administrator, which grants all ZENworks Control Center rights to that administrator, regardless of what is configured for the role.
Page 46 2 Specify a name and description for the role. 3 To configure the rights for the role, click Add and select a rights type from the drop-down list: 4 In the following dialog box, select whether each privilege should be allowed, denied, or left unset.
Page 47: Assigning Roles
The most restrictive right set in ZENworks prevails. If you select the Deny option, the right is denied for any administrator assigned to that role, even if the administrator is granted that right elsewhere in ZENworks. If you select the Allow option and the right has not been denied elsewhere in ZENworks, the administrator has that right for the role.
Page 48 2 In the Assigned Roles panel, click Add to display the Select Role dialog box. ZENworks 10 Configuration Management System Administration Reference...
Page 49 3 Browse for and select the roles for the administrator, then click OK to display the Add Role Assignment dialog box: The Add Role Assignment dialog box is displayed so that you can define the contexts for the role types included in the role. A context allows you to limit where granted rights can be used. For example, you can specify that the administrator’s Quick Task Rights role is limited to the Devices folder in ZENworks Control Center.
Page 50 2 In the Assigned Administrators panel, click Add to display the Select Administrator dialog box: ZENworks 10 Configuration Management System Administration Reference...
Page 51: Editing A Role
3 Browse for and select the administrators for the role, then click OK to display the Add Role Assignment dialog box: The Add Role Assignment dialog box is displayed so that you can define the contexts for the role types included in the role. A context allows you to limit where granted rights can be used. For example, you can specify that the administrator’s Quick Task Rights role is limited to the Devices folder in ZENworks Control Center.
Page 52 2 To edit the description, make the changes directly in the Description field. 3 To edit existing rights, do the following: 3a In the Rights panel, select the check box for a rights type, then click Edit to open the following dialog box: 3b For each privilege, select whether it should be allowed, denied, or left unset.
Page 53 3c Click OK to continue. 3d To edit another existing role, repeat Step 3a through Step 4 (Optional) To add new rights: 4a In the Rights panel, click Add, then select one of the rights types from the drop-down list: 4b In the Rights dialog box, select whether each privilege should be allowed, denied, or left unset.
Page 54: Renaming A Role
2.4.5 Renaming a Role Role names can be changed at any time. The changed role name is automatically replicated wherever it is displayed in ZENworks Control Center. 1 In ZENworks Control Center, click Configuration in the left pane, click the Configuration tab, then in the Roles panel, select the check box for the role to be renamed.
Page 55: Zenworks News
® Novell ZENworks 10 Configuration Management displays information from Novell about current top issues, news updates, promotions, and so forth on the home page of ZENworks Control Center. The following sections provide information on deleting, updating, and sorting the news alerts, and on viewing the news.
Page 56: Updating The News Alerts
2 In ZENworks News Alerts panel, select the check box next to the news alerts you want to delete. 3 Click Delete. 3.1.2 Updating the News Alerts 1 In ZENworks Control Center, click Home. 2 In ZENworks News Alerts panel, click Update Now. The latest ZENworks news updates downloaded by the Primary Server are displayed in the ZENworks News Alerts panel.
Page 57: Dedicated News Server
News Download Schedule Figure 3-2 Review the following sections to configure the settings to download the news: Section 3.2.1, “Dedicated News Server,” on page 57 Section 3.2.2, “Schedule Type,” on page 58 3.2.1 Dedicated News Server By default, any available server in the Management Zone can be used to download the news updates.
Page 58: Schedule Type
Clearing a Dedicated News Server Clearing a dedicated update server causes the news updates to be retrieved randomly from any server in the Management Zone. 1 In ZENworks Control Center, click Configuration in the left pane. 2 On the Configuration tab, expand the Management Zone Settings section (if necessary), click Infrastructure Management, then click ZENworks News Settings to display the News Download Schedule panel.
Page 59 5d (Conditional) If you need to revert to the last saved schedule, click Reset at the bottom of the page. This resets all data to the last saved state, such as when you last clicked Apply or OK. 5e When you have finished configuring the recurring schedule, click Apply to save the schedule change.
Page 60 ZENworks 10 Configuration Management System Administration Reference...
Page 61: System Variables
System Variables System variables let you define variables that can be used to replace paths, names, and so forth as ® you enter information in ZENworks Control Center. You can define system variables at three levels: Management Zone: The system variables are inherited by all device folders, devices, and bundles.
Page 62: Adding System Variables
Overriding Inherited Settings: When configuring system variables for a folder, device, or bundle, you can override an inherited variable by defining a new variable with the same name but a different value. For example, if is defined at the Management Zone, ProgramFiles=C:\ you can override it by defining at the device folder level or at the device...
Page 63: Removing System Variables
Variable values cannot include the characters & and <. 5 Click Apply. 4.3 Removing System Variables 1 In ZENworks Control Center, click the Configuration tab. 2 In the Management Zone Settings list, click Device Management. 3 Click System Variables. 4 Select the check box next to the variable (or variables). 5 Click Remove.
Page 64 ZENworks 10 Configuration Management System Administration Reference...
Page 65: Credential Vault
Credential Vault ® ® The Credential Vault stores the credentials used by Novell ZENworks 10 Configuration Management actions and tasks that require authentication to access a particular resource. For example, if you want to create a third-party Imaging bundle by using the image files stored in a shared-network image repository that requires authentication, you can add a credential that includes the login name and password for the repository in the credential vault.
Page 66: Creating A Folder For Credentials
2 In the Credential Vault panel, click New > Credential to display the Add Credential dialog box. 3 Fill in the fields. If you need help, click the Help button. 5.2 Creating a Folder for Credentials 1 In ZENworks Control Center, click the Configuration tab. 2 In the Credential Vault panel, click New >...
Page 67: Assigning Credential Rights
3 In the Name field, specify a unique name for the folder. The folder cannot have the same name as any folders or credentials that already exist in the folder where you are creating it. 4 In the Folder field, click to browse for and select the folder where you want the new folder created.
Page 68: Editing A Credential
4 Click Add to select folders containing credentials, then modify the rights associated with those folders. If you need help, click the Help button. 5.4 Editing a Credential 1 In ZENworks Control Center, click the Configuration tab. 2 In the Credential Vault panel, select the check box next to the credential. 3 Click Edit.
Page 69: Part Ii Zenworks Servers And Satellite Devices
ZENworks Servers and Satellite Devices ® This section contains information about configuring the ZENworks Servers and Satellite devices. Chapter 6, “ZENworks Server,” on page 71 Chapter 7, “Satellites,” on page 79 Chapter 8, “Server Hierarchy,” on page 95 Chapter 9, “Closest Server Rules,” on page 99 Chapter 10, “Backing Up and Restoring the ZENworks Server and Certificate Authority,”...
Page 70 ZENworks 10 Configuration Management System Administration Reference...
Page 71: Zenworks Server
Embedded database used for storing ZENworks objects and resources. ZENworks Loader zenloader Used for loading and controlling the Java* services that perform ZENworks Server tasks. ZENworks Preboot Policy Service novell-zmgprebootpolicy Used by PXE-enabled devices to check for assigned preboot policies and work. ZENworks Server...
Page 72: Checking The Status Of A Zenworks Service
Service Service Name Description ZENworks Preboot Service novell-pbserv Used to provide imaging services to a device. This includes sending and receiving image files, discovering assigned Preboot bundles, acting as session master for multicast imaging, and so forth. ZENworks Remote Management...
Page 73: Zenworks Services On A Linux Server
Description Proxy DHCP Service novell-proxydhcp Used with a standard DHCP server to inform PXE-enabled devices of the IP address of the Novell TFTP server. TFTP Service novell-tftp Used by PXE-enabled devices to request files that are needed to perform imaging tasks.
Page 74: Checking The Status Of A Zenworks Service
Replace servicename with the name of the service as listed in Table 6-2 on page To start all the ZENworks services: 1. Execute the following command at the server prompt: /opt/novell/zenworks/bin/novell-zenworks-configure -c Start By default the option is selected. Start 2.
Page 75: Restarting The Zenworks Services
Replace servicename with the name of the service as listed in Table 6-2 on page To restart all the ZENworks services: 1. Execute the following command at the server prompt: /opt/novell/zenworks/bin/novell-zenworks-configure -c Start 2. Enter the number next to the action. Restart 6.3 Configuring Additional Access to a...
Page 76: Determining The Zenworks Software Version Installed On Servers
To add a DNS name: 1 In ZENworks Control Center, click Devices in the left pane, select Servers in the Devices panel, select a server object, click the Settings tab, click Infrastructure Management, then select Additional DNS Names. 2 In the List of Server DNS Names field, specify the DNS name for the IP address of the server (such as a proxy server) that the devices can access.
Page 77: Zenworks Server Reports
2 In the ZENworks Reporting Server panel, click ZENworks Reporting Server InfoView to launch the ZENworks Reporting Server InfoView. 3 Navigate to the Novell ZENworks Reports folder > Predefined Reports > ZENworks System folder. The following predefined report is included for the ZENworks Server:...
Page 78 ZENworks 10 Configuration Management System Administration Reference...
Page 79: Satellites
NOTE: For information about Satellites from the perspective of an end user using the ZENworks Adaptive Agent, see “Satellite Roles” in the Novell ZENworks Adaptive Agent Help. The following sections contain more information: Section 7.1, “Understanding the Satellite Roles,” on page 80 Section 7.2, “Adding and Configuring Satellite Devices,”...
Page 80: Understanding The Satellite Roles
7.1 Understanding the Satellite Roles A Satellite is a device that can perform some of the roles that a ZENworks Primary Server normally performs, including authentication, information collection, content distribution, and imaging. The following sections contain more information about each role: Section 7.1.1, “Understanding the Authentication Role,”...
Page 81: Understanding The Content Role
When you enable a Collection role on a device, you can assign any ZENworks Primary Server as its parent server. The Collection role device uploads information only to its parent Primary Server. If the parent Primary Server is not a child of another Primary Server, it writes the information directly to the database.
Page 82: Adding And Configuring Satellite Devices
7.2 Adding and Configuring Satellite Devices You can create a new Satellite device or configure an existing Satellite with the Authentication, Content, Imaging, and Collection roles, change its default port, and adjust the schedules for the roles. You can also remove roles from an existing Satellite. IMPORTANT: Before promoting a managed device as Satellite, ensure that the ZENworks 10 Configuration Management version installed on the managed device is same as that of the Primary Server.
Page 83: Authentication Role
3 (Conditional) To add a role to a Satellite, select the desired role in the Satellite Server Roles section. If the Configure link is disabled for any role, that role is disabled for this device. For example, if the Satellite’s parent Primary Server does not have the Collection role, the Satellite’s Collection role is disabled and cannot be configured.
Page 84: Collection Role
Connection Address: (Optional) Specify part of the IP address or DNS hostname of the connection to the LDAP directory, then click Filter to display all connections with that IP address. If you have many connections in your ZENworks Management Zone, you can use the Connection Address field to display only those connections that match the criteria.
Page 85 To specify the devices that need content from this Satellite, configure the Closest Server Rules setting in the Management Zone settings on the Configuration page. 1 Select the check box next to Content, click Configure, then click Add. Fill in the fields: Content Type: Select a Content Type (for example, Policy, Non-Patch Bundles, or System Update Server).
Page 86: Imaging Role
4 (Optional) Specify the content to host on the Content Server. For more information, see Section 29.4, “Including or Excluding Content,” on page 246. If you want to specify the content that the Satellite hosts, you can include or exclude content from being replicated to it.
Page 87 Refresh. On the Linux unmanaged device, open a terminal, change your current working directory , and execute /opt/novell/zenworks/bin/ ./zac ref To check whether the Proxy DHCP service has been started on the device, review the message log of the device (Devices tab > Workstations folder > click the workstation > Summary >...
Page 88: Removing The Roles From A Satellite
The messages are logged in the Message Log panel only if the severity level of the local file and the system log is set to Information and Above on the Local Device Logging page. (Configuration tab > Device Management > Local Device Logging). 8 (Conditional) If the Linux Satellite has the Imaging role configured, turn off the firewall on the device before performing imaging operations.
Page 89: Specifying Content To Be Hosted
Refresh. On the Linux unmanaged device, open a terminal, change your current working directory , and execute /opt/novell/zenworks/bin/ ./zac ref 7.5 Specifying Content to Be Hosted Because Content role devices retrieve their content from their parent Primary Servers, any content that you want hosted on a Satellite must also be hosted on its parent Primary Server.
Page 90: Manually Replicating Content From A Primary Server To Satellite Devices
3 In the Available Content list, select the desired content. You can use Shift+click and Ctrl+click to select multiple bundles or policies. 4 Click to move the selected content to the Selected Content list. 5 Click Next. 6 Click Finish to create the relationships between the content and the content servers. Depending on the relationships created, the content is replicated to or removed from content servers during the next scheduled replication.
Page 91: Specifying A Different Repository For The Content Role Satellite (Windows Only)
2 In the Server Hierarchy panel, select the check box next to the Satellite that you want to move, then click Move. 3 Select the Primary Server you want to be the Satellite’s new parent, then click OK. Any content (bundles, policies, and patches) you want hosted on a Satellite with the Content role must also be hosted on its parent Primary Server.
Page 92: Removing A Satellite Device
9 If necessary (see Step 2), move the files from the old renamed directory to the content-repo directory. content-repo This copies the files to the hard drive that you have selected for your new content repository. 7.9 Removing a Satellite Device You can remove any Satellite from the Management Zone that is listed in the Server Hierarchy panel.
Page 93 Explanation: When you promote a Windows Vista SP2 managed device to be a Satellite with the Imaging role, any updated Imaging statistics are not displayed on the icon (Show Properties > Satellite > Imaging) Action: To view the latest Imaging statistics on the Satellite: 1 At the console prompt, go to ZENworks_installation_directory\novell\zenworks\bin\prebo Satellites...
Page 94 2 Run the following command: zmgmcast -status -i Satellite_IP_address Editing the Content Replication schedule that is set to “No Schedule” results in Null Pointer Exception if the ZENworks database is running on Oracle Source: ZENworks 10 Configuration Management; Satellite. Explanation: If ZENworks database is running on Oracle, and the Content Replication schedule for a satellite is set to No Schedule, you would encounter the Null Pointer Exception when you edit the schedule by using ZENworks Control Center.
Page 95: Server Hierarchy
Server Hierarchy ® Your Management Zone’s server hierarchy determines the relationships among the ZENworks Primary Servers and Satellites. These relationships control the flow of content and information within the zone. Proper configuration can help you to minimize network traffic between network segments connected by slow links.
Page 96: Authentication Role Sever Relationships
The following sections contain more information: Section 8.2.1, “Authentication Role Sever Relationships,” on page 96 Section 8.2.2, “Content Role Server Relationships,” on page 96 Section 8.2.3, “Collection Role Server Relationships,” on page 96 Section 8.2.4, “Imaging Role Server Relationships,” on page 96 8.2.1 Authentication Role Sever Relationships An Authentication role identifies a managed device that is able to authenticate devices to the ZENworks Management Zone.
Page 97: Making A Primary Server A Peer
To make a Primary Server a child of another server: 1 In ZENworks Control Center, click the Configuration tab. 2 In the Server Hierarchy panel, select the check box next to the Primary Server you want to make a child. 3 Click Move to display the Move Device dialog box.
Page 98 ZENworks 10 Configuration Management System Administration Reference...
Page 99: Closest Server Rules
Closest Server Rules When you have multiple ZENworks Servers (Primary Servers and Satellites) in your environment, you can use Closest Server rules to determine which ZENworks Server a managed device contacts to perform the following functions: Collection Content Configuration Authentication Closest Server rules help you improve load balancing between ZENworks Servers, perform failover, and improve performance when there is a slow link between the managed devices and Servers.
Page 100: Zenworks Server Functions
9.1.1 ZENworks Server Functions There following are basic functions for which devices contact a server: Collection: Inventory and message log information is collected from each device, to be viewed in ZENworks Control Center and output to reports. Each ZENworks Primary Server and any Satellite can act as a collection server.
Page 101: Configuring The Closest Server Default Rule
Device: The rules apply only to the device for which they are configured. They override the settings set at the Management Zone and folder levels. Each device can have only one Closest Server rule applied to it. A device’s effective rule is determined as follows: 1.
Page 102 To configure a Closest Server Default rule: 1 In ZENworks Control Center, click the Configuration tab, click Infrastructure Management (in the Management Zone Settings panel), then click Closest Server Default Rule. 2 To configure the servers listed in the any section, do any of the following: 2a (Conditional) You can perform the following tasks to manage individual servers in any of the server lists (Collection, Content, Configuration, and Authentication): 102 ZENworks 10 Configuration Management System Administration Reference...
Page 103 Task Steps Additional Details Reorder the list 1. In the desired server list, Placement in the list determines the select the check box for the order in which servers are server, group, or L4 switch you contacted. The first list item (server, want to move.
Page 104 Task Steps Additional Details Create a server 1. In the desired server list, group select the check boxes for the servers you want to include in the group, then click Groups > Create Group from Selection. If you want to create an empty group, click Groups >...
Page 105 Task Steps Additional Details Reorder the list 1. In the server list, select the Placement in the list determines the check box for the server, order in which servers are group, or L4 switch you want contacted. The first list item (server, to move.
Page 106 Task Steps Additional Details Remove a group 1. In the server list, select the The group’s servers are not check box for the group you removed, only the group. want to remove. 2. Click Groups > Remove Group, then click OK. 3.
Page 107 2c (Conditional) If you have ZENworks Servers or Satellites that are clustered behind an L4 switch, you can define the L4 switch and add the servers to the definition. This enables the L4 switch to continue to balance the traffic among those servers. Task Steps Additional Details...
Page 108: Creating Closest Server Rules
Task Steps Additional Details Reorder the list 1. In the desired server list, Placement in the list determines the select the check box for the order in which servers are server, group, or L4 switch you contacted. The first list item (server, want to move.
Page 109 To create a Closest Server rule for a device folder, open the folder’s details page, then click Settings > Infrastructure Management (in the Settings panel) > Closest Server Rules. To create a Closest Server rule for a device, open the device’s details page, then click Settings >...
Page 110 In the above example, the Closest Server rule is applied only to devices whose DNS name does not end with .novell.com You can use more than one expression for the rule. For example: DNS Name Filter equal to provo.novell.com or IP Address equal to 123.45.678.12/24 You can use the following criteria: Option...
Page 111 Option Explanation IP Address /n Matches IP addresses that fall within the specified CIDR (Classless Inter- Domain Routing) block. With CIDR, the dotted decimal portion of the IP address is interpreted as a 32-bit binary number that has been broken into four 8-bit bytes.
Page 112 Task Steps Additional Details Reorder the list 1. In the desired server list, Placement in the list determines the select the check box for the order in which servers are server, group, or L4 switch you contacted. The first list item (server, want to move.
Page 113 Task Steps Additional Details Create a server 1. In the desired server list, group select the check boxes for the servers you want to include in the group, then click Groups > Create Group from Selection. If you want to create an empty group, click Groups >...
Page 114 Task Steps Additional Details Reorder the list 1. In the server list, select the Placement in the list determines the check box for the server, order in which servers are group, or L4 switch you want contacted. The first list item (server, to move.
Page 115 Task Steps Additional Details Remove a group 1. In the server list, select the The group’s servers are not check box for the group you removed, only the group. want to remove. 2. Click Groups > Remove Group, then click OK. 3.
Page 116 Task Steps Additional Details Add servers to an 1. In the server list, select the L4 switch check boxes for the servers definition you want to add to the L4 switch definition. 2. Click L4 Switch > Add to L4 Switch Definition.
Page 117: Backing Up Closest Server Rules
Task Steps Additional Details Remove servers 1. In the server list, expand the The servers are not removed from from an L4 switch L4 switch definition to display the server list, only from the L4 definition its servers. switch definition. 2.
Page 118 118 ZENworks 10 Configuration Management System Administration Reference...
Page 119: Backing Up And Restoring The Zenworks Server And Certificate Authority
Section 10.4, “Restoring the Certificate Authority,” on page 121 10.1 Backing Up a ZENworks Server ® ® Novell ZENworks 10 Configuration Management allows you to back up and restore the configuration files for a ZENworks Primary Server. This enables you to maintain a ZENworks Server’s identity and configuration if a server fails or if you need to upgrade to new server hardware.
Page 120: Restoring A Zenworks Server
zman zenserver-backup /root/zcm_backups/zone_backup.bak 3 When prompted, enter a ZENworks administrator name and password. 4 When prompted, enter a passphrase (at least 10 characters) to be used for encrypting the backup file. Make sure you remember this passphrase. You must enter it if you ever need to restore the server.
Page 121: Backing Up The Certificate Authority
2 Ensure that you have read/write rights to the directory on a Windows Novell\ZENworks\conf server or the directory on a Linux server. etc/opt/novell/zenworks 3 At a command prompt on the ZENworks Server, enter the following command: zman zenserver-restore path_to_backup_file_to_restore For example: zman zenserver-restore c:\zcm_backups\zone_backup.bak...
Page 122 Step 4, you zenca.keystore CaConfig.xml must restart the Novell ZENworks Server service: On Windows: Do the following: 1. From the Windows desktop Start menu, click Settings > Control Panel. 2. Double-click Administrative Tools > Services. 3. Restart Novell ZENworks Server.
Page 123: Disaster Recovery
Disaster Recovery ® ® The following sections explain the disaster recovery mechanisms available in Novell ZENworks 10 Configuration Management that help you protect the first Primary Server of a Management Zone if an organizational risk assessment identifies a need for such steps: Section 11.1, “Replacing the First Primary Server with the Second Primary Server,”...
Page 124 2d Click Add. 2e Click next to the Servers folder to navigate through the folders until you find the second Primary Server. 2f Select the second Primary Server to display its name in the Selected list, then click OK. 2g Click Finish. The add-on image is associated with the second Primary Server, and the add-on image content is created on the second Primary Server.
Page 125 5d In the Content Servers list, select the check box next to the first Primary Server, then click Move Down until the server is the last entry in the list. 5e In the Configuration Servers list, select the check box next to the first Primary Server, then click Move Down until the server is the last entry in the list.
Page 126: Replacing An Existing Primary Server With A New Primary Server
8c3 In the SQL editor, execute the following SQL command: commit; 8d If the database is installed on the same device as that of the first Primary Server, move the database. Internal Sybase: For detailed information on how to move the data from an internal Sybase database to an external Sybase database, see Section 34.5, “Moving the Data from an Embedded Sybase Database to an External Sybase Database,”...
Page 127 ZENworks_installation_directory\work\ directory on Windows and in the directory on Linux. /var/opt/novell/zenworks/ 6 Disconnect the device from the network. 7 Ensure that the hostname and the IP address of the new server are same as those of the old Primary Server.
Page 128: Re-Creating Certificates
Windows or to the ZENworks_installation_directory\work\ /var/ directory on Linux. opt/novell/zenworks/ 10 Ensure that the new server is running correctly. Subsequently, uninstall ZENworks Configuration Management from the old device. For detailed information on how to uninstall ZENworks 10 Configuration Management see “Uninstalling ZENworks...
Page 129 1 Reconfigure the certificates on the Primary Server whose IP address and DNS name you changed in Step 2 by entering the following command at the server’s command prompt: novell-zenworks-configure -c SSL -Z Follow the prompts. 2 Restart all the ZENworks services by running the following command: novell-zenworks-configure -c Start By default, all the services are selected.
Page 130 Custom Deployment Packages: At the server’s command prompt, enter the following command: novell-zenworks- configure -c RebuildCustomPacks -Z Replacing the Existing Certificate with the New External Certificate on the Satellites Perform the following tasks at the command prompt of each Satellite registered to the Primary...
Page 131 ZENworks_installation_directory\Novell\ZENworks\cache\zmd entering the following commands at each managed device’s prompt. zac cc delete ZENworks_installation_directory>\Novell\ZENworks\cache\zmd\ /s 3 Restart the ZENworks Adaptive Agent Service. 4 Run the following command to register the device in the Management Zone: Disaster Recovery 131...
Page 132: Changing The Ip Address Of The Primary Server After Installing Zenworks 10 Configuration Management
Default Deployment Packages: At the server’s command prompt, enter the following command: novell-zenworks-configure -c CreateExtractorPacks -Z Custom Deployment Packages: At the server’s command prompt, enter the following command: novell-zenworks- configure -c RebuildCustomPacks -Z 132 ZENworks 10 Configuration Management System Administration Reference...
Page 133: Changing The Dns Name Or The Ip Address And Dns Name Of The Primary Server After Installing Zenworks 10 Configuration Management
Primary Servers. On all the second Primary Servers, change the value of database server address in the ZENworks_Installation_Directory\Novell\ZENworks\conf\datamodel\zdm.xml point to the new IP address of the first Primary Server. 7 Restart the ZENworks Adaptive Agent.
Page 134 6b Restart the following services: Novell ZENworks Server Novell ZENworks Loader Novell ZENworks Agent Service 7 Replace the existing certificate with the newly created external certificate on all the devices in the Management Zone in the order listed below: “Replacing the Existing Certificate with the New External Certificate on the Primary Servers”...
Page 135 Custom Deployment Packages: At the server’s command prompt, enter the following command: novell-zenworks- configure -c RebuildCustomPacks -Z Replacing the Existing Certificate with the New External Certificate on the Satellites Perform the following tasks at the command prompt of each Satellite registered to the Primary...
Page 136 4 Restart the Proxy DHCP services on all the Satellites. 5 Run the following command to register the device in the Management Zone: zac reg https://ZENworks_Server_DNS_name:port_number For more information about zac, view the zac man page ( ) on the device or see man zac “zac(1)”...
Page 137 ZENworks_installation_directory\Novell\ZENworks\cache\zmd entering the following commands at each managed device’s prompt. zac cc delete ZENworks_installation_directory>\Novell\ZENworks\cache\zmd\ /s 3 Restart the ZENworks Adaptive Agent Service. 4 Run the following command to register the device in the Management Zone: zac reg https://ZENworks_Server_DNS_name:port_number...
Page 138 138 ZENworks 10 Configuration Management System Administration Reference...
Page 139: Part Iii Zenworks Adaptive Agent
® ® The ZENworks Adaptive Agent is part of the Novell ZENworks 10 Configuration Management software that lets you manage devices over the network. The ZENworks Adaptive Agent, commonly referred to as the Adaptive Agent, provides services that do the following without requiring you to visit individual devices: Deliver software, patches, and system updates to devices.
Page 140 140 ZENworks 10 Configuration Management System Administration Reference...
Page 141: Viewing The Version Of The Adaptive Agent Software And Modules On A Device141
Viewing the Version of the Adaptive Agent Software and Modules on a Device 1 In ZENworks Control Center, click the Devices tab. 2 Click Servers to view the Adaptive Agent software version on a server. Click Workstations to view the Adaptive Agent software version on a workstation. 3 Click the underlined link for the desired device.
Page 142 142 ZENworks 10 Configuration Management System Administration Reference...
Page 143: Searching For Devices That Have A Specified Version Of The Adaptive Agent
Searching for Devices that Have a Specified Version of the Adaptive Agent For upgrading or troubleshooting purposes, you can use the Advanced Search feature to display a list of devices in your ZENworks Management Zone that have a specified version of the Adaptive Agent software installed.
Page 144 144 ZENworks 10 Configuration Management System Administration Reference...
Page 145: Configuring Adaptive Agent Settings After Deployment
Configuring Adaptive Agent Settings after Deployment By default, the ZENworks Adaptive Agent is deployed with the features selected at the Management Zone level in the Agent Features panel of ZENworks Control Center. For more information on how to customize the agent features during deployment, see “Customizing Features before Deployment”.
Page 146 3 Click ZENworks Agent. 4 Fill in the fields. For more information, see Section 14.4, “ZENworks Agent Settings,” on page 148. 5 Click OK to apply the changes. 146 ZENworks 10 Configuration Management System Administration Reference...
Page 147: Configuring Agent Settings On The Device Folder Level
14.2 Configuring Agent Settings on the Device Folder Level 1 In ZENworks Control Center, click the Devices tab. 2 Click the Servers or Workstations folder. 3 Click Details next to the folder for which you want to configure settings. 4 Click the Settings tab, click Device Management, then click ZENworks Agent. 5 Fill in the fields.
Page 148: Zenworks Agent Settings
5 Fill in the fields. For more information, see Section 14.4, “ZENworks Agent Settings,” on page 148. 6 Click OK to apply the changes. 14.4 ZENworks Agent Settings Section 14.4.1, “General,” on page 148 Section 14.4.2, “Agent Features,” on page 150 14.4.1 General You can configure the ZENworks Adaptive Agent’s cache, whether or not users can uninstall the Adaptive Agent, and set retry settings.
Page 149 (by default, 336 hours or 14 days). For example, suppose that a cache entry is added on June 10 at 3:00 p.m. With the default Cache Life setting, the expiration time is set to June 24 at 3:00 p.m. The agent does not attempt to update a cache entry until after the entry’s expiration time. At that point, the agent updates the cache entry the next time it contacts the ZENworks Server to refresh its information.
Page 150: Agent Features
14.4.2 Agent Features The ZENworks Adaptive Agent uses modules to perform the following functions on managed devices: Asset Management Bundle Management Image Management Patch Management Policy Management Remote Management User Management If you are viewing the properties of a Windows 2000 device, the User Management options are disabled because user management cannot be disabled or uninstalled from Windows 2000 devices.
Page 151 By default, the Installed check boxes for all modules are selected, meaning that all modules are installed on devices when they register to your ZENworks Management Zone. If you deselect a module’s Installed check box, that module is uninstalled from the device the next time it refreshes.
Page 152 Bundle Management Table 14-1 Installed and Enabled Installed and Disabled Uninstalled Additional Details The Bundle The Bundle The Bundle If the ZENworks Management Management Management service license expires, you service is service is stopped is uninstalled from cannot create, edit, running on the and disabled on the the device.
Page 153 Image Management Table 14-2 Installed and Enabled Installed and Disabled Uninstalled Additional Details novell-ziswin is novell-ziswin is novell-ziswin is When the ZENworks 10 installed and only disabled but it uninstalled on all the Configuration enabled on is not uninstalled Windows XP and...
Page 154 Patch Management Table 14-3 Installed and Enabled Installed and Disabled Uninstalled Additional Details The Patch The Patch The Patch If the ZENworks Management Management Management service license is service is service is stopped is uninstalled from deactivated, you running on the and disabled on the the device.
Page 155 Policy Management Table 14-4 Installed and Enabled Installed and Disabled Uninstalled Additional Details The Policy The Policy The Policy If the ZENworks Management Management Management service license expires, you service is service is stopped is uninstalled from cannot create, edit, running on the and disabled on the device.
Page 156 Remote Management Table 14-5 Installed and Enabled Installed and Disabled Uninstalled Additional Details The Remote The Remote The Remote If the ZENworks license Management Management Management service expires, the Remote service is service is stopped is uninstalled from the Management service running on the and disabled on the device.
Page 157: Configuring Zenworks Explorer
Configuring ZENworks Explorer You can configure common settings at three levels for the ZENworks Explorer component of the ZENworks Adaptive Agent: Management Zone: The settings are inherited by all device folders and devices. Device Folder: The bundle settings are inherited by all devices contained within the folder or its subfolders.
Page 158: Configuring Zenworks Explorer Settings On The Device Folder Level
4 Fill in the fields. For more information, see Section 15.4, “ZENworks Explorer General Settings,” on page 160. 5 Click OK to apply the changes. 15.2 Configuring ZENworks Explorer Settings on the Device Folder Level 1 In ZENworks Control Center, click the Devices tab. 2 Click the Servers or Workstations folder.
Page 159: Configuring Zenworks Explorer Settings On The Device Level
6 Fill in the fields. For more information, see Section 15.4, “ZENworks Explorer General Settings,” on page 160. 7 Click OK to apply the changes. 15.3 Configuring ZENworks Explorer Settings on the Device Level 1 In ZENworks Control Center, click the Devices tab. 2 Click the Servers or Workstations folder.
Page 160: Zenworks Explorer General Settings
15.4 ZENworks Explorer General Settings You can use the ZENworks Explorer General panel to configure ZENworks Explorer to uninstall a bundle that is no longer assigned to the device, specify the number of days to wait before uninstalling the bundle, and specify the default folder that ZENworks Explorer uses: Unassigned Bundles: Select whether or not you want a bundle to be uninstalled after it is no longer assigned to a device or the device’s user.
Page 161: Removing The Zenworks Pre-Agent From A Device
For example, if the operating system is installed in On a Windows XP device: Remove directory. C:\Windows\Novell\zenworks On a Windows 2000 device: Remove directory. C:\WINNT\Novell\zenworks Removing the ZENworks Pre-Agent from a Device...
Page 162 162 ZENworks 10 Configuration Management System Administration Reference...
Page 163: Configuring The System Update Behavior Of The Zenworks Adaptive Agent
Configuring the System Update Behavior of the ZENworks Adaptive Agent You can configure System Update behavior on the ZENworks Adaptive Agent that resides on managed devices, including whether a dialog box displays on managed devices prompting users to allow the system update or a required boot after a system update is applied, and whether users can postpone the update or reboot.
Page 164 164 ZENworks 10 Configuration Management System Administration Reference...
Page 165: Troubleshooting The Adaptive Agent
Rights Authentication failed. An internal error occurred while communicating to ZENworks Management Daemon. Contact Novell Technical Services. Possible Cause: ZENworks Adaptive Agent is not installed on the device. Only Remote Management service is installed on the device.
Page 166 CtxGinaDLL NWGina.dll 3. Reboot the server. Install Novell Client. NOTE: This needs to be done only once. The ZENworks Adaptive Agent Policies page does not display the correct status for the DLU policy Source: ZENworks 10 Configuration Management; ZENworks Adaptive Agent.
Page 167 Action: Perform the following steps to refresh the user sessions in batches: 1 Open the Registry Editor. 2 Go to HKLM\Software\Novell\ZENworks\ 3 To enable batch refreshes, create a DWORD called EnableBatchRefresh and set the value to 1. By default, there are 5 sessions in a batch.
Page 168 168 ZENworks 10 Configuration Management System Administration Reference...
Page 169: Part Iv Zenworks System Updates
ZENworks System Updates ® ® The System Updates feature allows you to obtain updates to the Novell ZENworks Configuration Management software on a timely basis, and also allows you to schedule automatic downloads of the updates. Chapter 19, “Introduction to ZENworks System Updates,” on page 171 Chapter 20, “Configuring Updates,”...
Page 170 170 ZENworks 10 Configuration Management System Administration Reference...
Page 171: Introduction To Zenworks System Updates
Introduction to ZENworks System Updates ® ® The System Updates feature allows you to obtain updates to the Novell ZENworks Configuration Management software on a timely basis, and also allows you to schedule automatic downloads of the updates. Software updates are provided periodically and you can choose whether to deploy each update after viewing its content.
Page 172 Chapter 24, “Reviewing the Content of an Update,” on page 215 Chapter 25, “Update Statuses,” on page 219 172 ZENworks 10 Configuration Management System Administration Reference...
Page 173: Configuring Updates
You can specify how often you want to check for updates. When you do this, information on ® available updates is automatically downloaded from Novell to the Available System Updates panel on the System Updates tab when the schedule fires. This does not download the update content itself.
Page 174 Recurring: Lets you specify how often you want to check for updates. When you set this option, information on available updates is automatically downloaded from Novell to the Available System Updates panel on the System Updates tab when the schedule fires. This does not download the update content itself.
Page 175: Download Schedule
173). After an update has been checked for and its information displayed in the Available System Updates panel on the System Updates tab, you can schedule the download from Novell to automatically occur when the schedule fires. To schedule ZENworks software updates: 1 In ZENworks Control Center, click Configuration in the left pane, then click the Configuration tab.
Page 176 5 Fill in the fields: 5a Select one or more check boxes for the days of the week. 5b To set the time of day for downloading to occur, use the Start Time field to specify the time. 5c (Optional) For additional scheduling options, click More Options, then select the following options as necessary: Process Immediately if Device Unable to Execute on Schedule: Causes checking for updates to occur as soon as possible if the checking cannot be done according to...
Page 177: E-Mail Notification
20.1.3 E-Mail Notification In conjunction with using stages, you can set up e-mail notifications to indicate when each stage has completed. When you deploy an update, you can specify to use the e-mail notifications. 1 In ZENworks Control Center, click Configuration in the left pane, then click the Configuration tab.
Page 178: Proxy Server Settings
3d Click Management Zone Settings to expand its options, click Infrastructure Management, then select System Update Settings to display the E-mail Notification panel: 4 Fill in the fields: From: Either specify your administrator e-mail address, or type something descriptive, such as .
Page 179: Dedicated Server Settings
3 Fill in the fields: Proxy Server Address: Specify the DNS name or IP address of the proxy server. Proxy Server Port: Specify the proxy server’s communication port. Proxy Server Requires Authentication: When you select this check box, the User and Password fields become editable.
Page 180: Stage Timeout Settings
Clearing a Dedicated Update Server Clearing a dedicated update server causes your updates to be retrieved randomly from any Primary Server in the Management Zone. 1 In ZENworks Control Center, click Configuration in the left pane. 2 On the Configuration tab, expand the Management Zone Settings section (if necessary), click Infrastructure Management, then click System Update Settings to display the Dedicated Server Settings panel: 3 Click Clear to remove the dedicated server from the Dedicated System Update Server field.
Page 181: Reboot Behavior
3 Select the Stage Timeout check box, then specify the days, hours, and minutes desired. 4 Click Apply to make the changes effective. 5 Either click OK to close the page, or continue with another configuration task. If you did not click Apply to make your changes effective, clicking OK does so. Clicking Cancel also closes the page, but loses your unapplied changes.
Page 182: Creating Deployment Stages
20.2 Creating Deployment Stages Deployment stages are optional; however, stages allow you to deploy an update one step at a time, such as to a test group first, then to your managed devices. If a failure occurs during the update process, the process is halted.
Page 183 Grouping your servers in several stages so that the update process isn’t too intensive for the Primary Server being used to perform the updates. Grouping the workstations in several stages so that the update process isn’t too intensive for the Primary Server being used to perform the updates.
Page 184: Creating And Populating A Deployment Stage
Column Heading Explanation Reboot Behavior Displays the reboot behavior of devices after the update is deployed. Some updates do not require a device to be rebooted after they have been deployed to a device. However, if a reboot is required to complete the update process, the deployment is not completed until the device is rebooted.
Page 185: Modifying The Stage Timeout
For information about naming in ZENworks Control Center, see Appendix A, “Naming Conventions in ZENworks Control Center,” on page 361. A newly created stage does not have any members. You must modify the stage’s membership to add them. 4 Add devices to a deployment stage: 4a In the Stage Members column, click View/Modify Members for the stage for which you want to add members.
Page 186: Modifying Staging Behavior
3 Specify the timeout value. This change in timeout value only applies to the selected stage. If you specify a timeout value for this stage, set its value to be long enough to accommodate updating all of the devices in the stage.
Page 187: Modifying Reboot Behavior
Advance to Next Stage Manually and Notify When Complete: Use this method for user action between the stages, such as reviewing the results of an update to a test group. This option automatically starts the first stage. After any stage has completed, e-mail notification is sent, then the system waits for you to manually start the next stage.
Page 188: Renaming A Deployment Stage
2b Click Add, browse for and select the devices, then click OK. You can add individual devices or device groups, or any combination of them. You can have both managed servers and workstations in the same deployment stage or in different stages, or you can split your servers and workstations into separate deployment stages.
Page 189: Deleting A Deployment Stage
20.2.8 Deleting a Deployment Stage 1 In ZENworks Control Center, click Configuration in the left pane, then click the System Updates tab. 2 In the Deployment Stages panel, click the check box for one or more of the deployment stages to be deleted.
Page 190 190 ZENworks 10 Configuration Management System Administration Reference...
Page 191: Managing Update Downloads
Column Heading or Explanation List Update Name Displays the name of the update, which is created by Novell. Click the name to access the Release Details page. For more information, see Chapter 24, “Reviewing the Content of an Update,” on page 215.
Page 192: Downloading Updates
Column Heading or Explanation List Download Date Displays the date that you downloaded the update. Applied Date Displays the date that you applied the update. Status Displays the current status of the update, which is automatically updated every 15 seconds. For more information on the individual statuses, see Chapter 25, “Update Statuses,”...
Page 193: Manually Checking For Updates
21.2.2 Manually Checking for Updates If the most recent updates are not being displayed in the Available System Updates panel on the System Updates page, you can manually refresh the display. 1 In ZENworks Control Center, click Configuration in the left pane, then click the System Updates tab.
Page 194: Manually Importing Updates To Servers Without Internet Connectivity
Product Recognition Update (PRU) files from the Novell Downloads page (http:// download.novell.com), copy the files onto a CD or other media, and then use the CD to import the files to a ZENworks Primary Server by using the command. For...
Page 195: Canceling Or Deleting A System Update
2 If a PRU is not displayed in the Available System Updates panel, click Action > Check for Updates. Information for the latest PRU is displayed, if it is available. 3 To download a listed PRU, go to the Available System Updates panel, select the check box for a listed PRU, then click Action >...
Page 196 2 Select the check box for a system update that is being downloaded, then click Action > Cancel Download. Cancelling an update cancels the downloading of an update. Already downloaded files are not automatically removed, but if you delete the update, any downloaded files are removed. If a server’s connection to the ZENworks database is lost while downloading an update, the download does not resume after reconnecting.
Page 197: Deploying Updates
Deploying Updates Section 22.1, “Understanding Deploying Updates,” on page 197 Section 22.2, “Deploying Updates,” on page 199 Section 22.3, “Starting a Pending Stage,” on page 206 Section 22.4, “Rescheduling a Deployment,” on page 206 Section 22.5, “Bypassing Staging,” on page 207 Section 22.6, “Canceling a Deployment,”...
Page 198 Explanation Update Name Displays the name of the update, which is created by Novell. Click the name to access the Status by Device page. You can also click the underlined number in the Pending, Successful, or Failed columns to view the appropriate Status by Device page, filtered to display devices with that status.
Page 199: Deploying Updates
Column Heading Explanation Status Indicates the status of the update being deployed (for the current stage, if stages are being used). For information on the possible statuses, see Chapter 25, “Update Statuses,” on page 219. Click an item in the Status column to view a message explaining the current status.
Page 200 4 (Conditional) If new updates are not being displayed, click Action > Check for Updates. The following illustrates available updates: 5 (Optional) To view the content of an available update, click the name of the update (in the Update Name column) to display the Release Details page: For more information, see Chapter 24, “Reviewing the Content of an Update,”...
Page 201 After an update has completed downloading, its status is automatically changed to . The length of time to download an update depends on its size and your hardware Downloaded configuration. You can download multiple updates at a time, but you can only deploy one at a time. Because these steps are repeated for each update, you only need to download the update you plan to deploy at this time.
Page 202 9 In the Deployment Wizard, complete the following steps: 9a On the Choose the System Update and Deployment Option page, select a deployment option (all of them can be scheduled in a subsequent wizard page). NOTE: Depending on the size of your ZENworks system, we recommend as a best practice to deploy the selected update to one ZENworks Primary Server before deploying the update to other Primary Servers and to the managed devices that contact those servers.
Page 203 9c Select one of the following options: Prompt User to Reboot When Update Finishes Applying: After the update has been applied, a request to reboot is immediately displayed. If the user initially rejects rebooting, the user is periodically requested to reboot the device, until the device is rebooted.
Page 204 Date Specific: Deploys the update according to the schedule that you set. The following options are displayed for the Date Specific option: Fill in the fields: Start Date: Select the deployment date from the calendar. Run Event Every Year: Select this option to deploy the update every year on the start date.
Page 205 Refresh. On the Linux unmanaged device, open a terminal, change your current working directory , and execute /opt/novell/zenworks/bin/ ./zac ref 12 To observe the progress of the update deployment, do any of the following: In ZENworks Control Center, observe the panels on the System Updates page:...
Page 206: Starting A Pending Stage
On a Linux device, review the following file: /etc/opt/novell/zenworks/version.txt 13d Repeat Step 13a through Step 13c for each test device. 14 (Conditional) If you are receiving e-mail notifications at the completion of the deployment stages and are ready to begin the next stage, go to the Deployed System Updates panel, then click Action >...
Page 207: Bypassing Staging
5 Click Reschedule Devices to open the Redeployment Schedule dialog box. 6 Either click OK to accept the default schedule of Now, or select Date Specific in the Schedule Type field and specify the new date, then click OK. 22.5 Bypassing Staging You can bypass the stages at any time and immediately deploy the update to all managed devices in the Management Zone.
Page 208: Understanding Device Statuses
Section 22.8.4, “Toggling Ignored Devices,” on page 209 Section 22.8.5, “Redeploying Updates to Devices,” on page 210 Section 22.8.6, “Rescheduling Updates to Devices,” on page 210 Section 22.8.7, “Refreshing Devices,” on page 211 22.8.1 Understanding Device Statuses The following graphic illustrates the Deploying System Updates panel on the System Updates page: Deploying System Updates Panel Figure 22-2 You can click any of the underlined links to display the corresponding status of devices.
Page 209: Viewing A Device's Properties
Column Heading Explanation Device Type Whether the device is a server or workstation. In Folder Displays the ZENworks Control Center folder where the device’s ZENworks object resides. 22.8.2 Viewing a Device’s Properties 1 In ZENworks Control Center, click Configuration in the left pane, then click the System Updates tab.
Page 210: Redeploying Updates To Devices
For example, if you click the link in the Pending column, you see the status of devices on which the deployment is pending, as in the following figure: 3 Click the check box next to one or more devices. 4 Click Action > Toggle Ignored Devices. The options available from the Action menu vary, depending on whether you are viewing the All Assigned Devices Status panel, the Devices with Pending Status panel, or the Devices with Failed Status panel.
Page 211: Refreshing Devices
For example, if you click the link in the Pending column, you see the status of devices on which the deployment is pending, as in the following figure: 3 Select the check box next to one or more devices. 4 Click Action > Reschedule Devices. The options available from the Action menu vary, depending on whether you are viewing the All Assigned Devices Status panel, the Devices with Pending Status panel, or the Devices with Failed Status panel.
Page 212 212 ZENworks 10 Configuration Management System Administration Reference...
Page 213: Deleting Updates
Deleting Updates You can clear an update that fails to download, or an update that you do not want to deploy. 1 In ZENworks Control Center, click Configuration in the left pane, then click the System Updates tab. 2 In the Available System Updates panel, select the check boxes for one or more updates. 3 Click Action >...
Page 214 214 ZENworks 10 Configuration Management System Administration Reference...
Page 215: Reviewing The Content Of An Update
Release Details page: 24.2 Update Release Details Information from the System Update Release Details Panel Table 24-1 Column Heading Explanation ® Update Name The name of the update, which is created by Novell Reviewing the Content of an Update...
Page 216: Deployment History
Column Heading Explanation Update GUID The update’s GUID. Release Date The date the update was released by Novell. Download Date The date you downloaded the content of the update, including all files necessary to install the update. Priority Level The relative importance of the update’s content to your ZENworks installation.
Page 217: Understanding Deployment History Details
24.3.1 Understanding Deployment History Details Columns for the Deployment History Details Panel Table 24-2 Column Heading Explanation Stage Indicates the deployment method used. The possible entries are: stage_name: The update was deployed to the managed devices that are members of the stage that is listed. Selected Devices Stage: The update was deployed to selected managed devices in the Management Zone that are not members of a stage.
Page 218: Performing Deployment History Tasks
24.3.2 Performing Deployment History Tasks Tasks for Evaluating an Update’s Deployment History Table 24-3 Task Steps Additional Details View which devices 1. In the Deployment Stages panel, Displays devices where the deployment have their click the number in the Pending of the update is pending.
Page 219: Update Statuses
Update Statuses The following update statuses can be displayed in the Status column of several System Update ® panels in ZENworks Control Center: Aborted: The deployment of the update was stopped, such as by selecting Action > Cancel Deployment. Applied: The update was successfully applied to the managed devices. Available: Updates with this status have downloaded the information about the update, which you can view by clicking the update name in the Update ID column.
Page 220 Reboot Process Canceled: Rebooting the device after the update was applied was canceled. Scheduled: The update has a schedule defined for it. See Chapter 22, “Deploying Updates,” on page 197 when creating the deployment in the Create System Update Deployment Wizard. You can alter the update’s schedule by using the Action >...
Page 221: Configuring The System Update Behavior Of The Zenworks Adaptive Agent
You can remedy this limitation by setting the PERMISSION_MSG_POSTPONES_REMAINING string in the registry under HKEY_LOCAL_MACHINE\Software\Novell\ZCM\SystemUpdate using {0} to indicate the number of postpones remaining. Permission Prompt Timeout When the user is prompted for permission to apply the update, you can specify how long you want to wait for an answer before the update begins.
Page 222 You can remedy this limitation by setting the REBOOT_MSG_POSTPONES_REMAINING string in the registry under HKEY_LOCAL_MACHINE\Software\Novell\ZCM\SystemUpdate using {0} to indicate the number of postpones remaining. Reboot Prompt Timeout When an update is assigned with the Prompt User for Reboot option, the default behavior is to wait five minutes for a response from the user and, in the absence of a response, automatically initiate the reboot.
Page 223: Part V Zone Administration
Zone Administration This section contains information about Management Zone configuration settings that let you control a wide range of functionality for your Zone. Chapter 27, “Management Zone Configuration Settings,” on page 225 Zone Administration...
Page 224 224 ZENworks 10 Configuration Management System Administration Reference...
Page 225: Management Zone Configuration Settings
Management Zone Configuration Settings The Management Zone configuration settings enable you to control a wide range of functionality for your Zone. There are Content settings that let you control when content can be distributed to devices ® and how often content is replicated between ZENworks Servers (if you have multiple servers).
Page 226: Modifying Configuration Settings On A Folder
2 In the Management Zone Settings panel, click the settings category (Content, Device Management, Discovery and Deployment, Event and Messaging, and so forth) whose settings you want to modify. 3 Click the setting to display its details page. 4 Modify the setting as desired. For information about the settings, click the Help button in ZENworks Control Center or see the following sections: “Content Settings”...
Page 227: Modifying Configuration Settings On A Device
5 In the Settings panel, click the settings category (Content, Device Management, Infrastructure Management, and so forth) whose settings you want to modify. 6 Click the setting to display its details page. 7 Modify the setting as desired. For information about the setting, click the Help button in ZENworks Control Center or see the following sections: “Content Settings”...
Page 228: Content Settings
4 Click the Settings tab. 5 In the Settings panel, click the settings category (Content, Device Management, Infrastructure Management, and so forth) whose settings you want to modify. 6 Click the setting to display its details page. 7 Modify the setting as desired. For information about the setting, click the Help button in ZENworks Control Center or see the following sections: “Content Settings”...
Page 229: Device Management Settings
Content Replication: Determine how often content (bundle and policy files) is updated on the ZENworks Primary Servers and Satellites. For more information, see Content Replication (../../ resources/help/settings_contentreplication.html). 27.3 Device Management Settings The Device Management section contains the following settings: Local Device Logging: Configure logging of messages to a managed device’s local drive. You can determine what severity level messages are logged and when the log file is backed up.
Page 230: Discovery And Deployment Settings
group; you cannot manually add devices to a dynamic group or remove them from a dynamic group. For more information, see Dynamic Group Refresh Schedule (../../resources/help/ settings_dynamicgroupschedule.html). Wake-on-LAN: Configure the number of retry attempts to wake up a device and the time interval between the retry attempts.
Page 231: Inventory Settings
Closest Server Default Rule: Define the rule that is used by a device to determine the closest collection, content, and configuration servers when no Closest Server rules have been defined or when none apply. This rule is simply a listing of the servers in the order you want devices to contact them.
Page 232: Reporting Services Settings
Inventory Only Schedule: Configure when to run an Inventory Only scan. For more information, Inventory Only Schedule (../../resources/help/settings_sysumischedule.html). Inventory Only Reconciliation: Control whether and how new workstations are reconciled to avoid the possibility of duplicates in the database. When a scan is made of a workstation that is new to the Management Zone, it is assigned an identifier.
Page 233: Patch Management Services Settings
27.10 Patch Management Services Settings The Patch Management Services section contains the following settings: Subscription Service Information: Display information about your subscription, including the status. You can also update your subscription settings. For more information, see Subscription Service Information (../../resources/help/b9f6zcf.html). Configure HTTP Proxy: Configure an HTTP proxy for access to Internet patch subscription.
Page 234 234 ZENworks 10 Configuration Management System Administration Reference...
Page 235: Part Vi Content
Content ® ZENworks replicates and distributes content among Primary Servers, Satellites, and managed devices. This includes the following content: Bundles: The files, configuration settings, installation instructions, and so forth required to deploy and manage an application or files on a device. Used in ZENworks Configuration Management and ZENworks Patch Management.
Page 236 236 ZENworks 10 Configuration Management System Administration Reference...
Page 237: Content Repository
Content Repository ® Each ZENworks Server contains a content repository. The content repository stores all bundle and policy content that has been replicated to the server and any images that have been captured and stored to the server. ZENworks 10 Configuration Management supports any filesystem to host the content repository, although each filesystem has advantages and limitations.
Page 238 2 Because an empty directory must exist in the default location content-repo ) to be the pointer to the new content installation_path\zenworks\work\content-repo repository location, do one of the following to make sure that there is no content in the default location: If you need to save the content that is now in this directory, rename the existing directory and create a new directory named...
Page 239: Changing The Location Of The Content Repository On A Linux Server
3 Run the following command to create the symbolic link to the new directory where you want to store the data: ln -s another-local-directory-on-device /var/opt/novell/zenworks/content- repo See the ln(1) man page for more information about how to symbolically link directories.
Page 240: Unmounting A Share
To ensure that the mount occurs each time the Linux server starts, you must add the following entry to your configuration file: /etc/fstab //example.machine.com/share_name /var/opt/novell/zenworks/content-repo cifs credentials=path_to_credentials_file 0 0 The credentials file listed in the command contains a username and password. For more information, see the man page.
Page 241 Windows device by providing the Samba user credentials root 8 Run the following command to mount the share: zenshare mount //localhost/zenshare /var/opt/novell/zenworks/content-repo -t cifs - o username=root 9 Restore the backed-up content to the directory. /var/opt/novell/zenworks/content-repo The content is now stored on the NSS volume.
Page 242 242 ZENworks 10 Configuration Management System Administration Reference...
Page 243: Content Replication
Content Replication When you add a bundle or policy that contains files, the files are uploaded to the content repository ® on the ZENworks Server. In addition, the ZENworks database is updated to reflect the addition of the bundle or policy and its content. ZENworks Servers and Satellite devices, collectively referred to as content servers, periodically read the ZENworks database to discover new bundles and policies.
Page 244: Configuring Content Replication At The Management Zone Level
Section 29.3, “Manually Replicating Content from a Primary Server to Satellite Devices,” on page 246 Section 29.4, “Including or Excluding Content,” on page 246 29.1 Configuring Content Replication at the Management Zone Level 1 In ZENworks Control Center, click the Configuration tab. 2 In the Management Zone Settings panel, click Content >...
Page 245: Manually Configuring The Web Service Timeout Advanced Content Replication Setting
To modify the Web Service Timeout on a Satellite device: For Windows, create the following string value in the registry on the Satellite device: and set the HKEY-LOCAL-MACHINE\SOFTWARE\Novell\Zenworks\CDPWebCallWaitTimeout value to the desired number of milliseconds. For Linux, in the file on the Satellite /etc/opt/novell/zenworks/conf/xplatzmd.properties...
Page 246: Manually Replicating Content From A Primary Server To Satellite Devices
4 (Optional) If you are configuring settings on a bundle folder or policy folder, click Force Inheritance in the Folder Task list in the left navigation pane to ensure that all children (all subfolders as well as individual bundles and policies) inherit the settings. Be aware that settings configured on children are lost and that this action cannot be undone.
Page 247: Managing A Single Piece Of Content On Multiple Content Servers
29.4.1 Managing a Single Piece of Content on Multiple Content Servers This section provides instructions for managing the replication of a single bundle’s or policy’s content to multiple content servers. 1 In ZENworks Control Center, go to the details page for the bundle or policy whose content replication you want to manage.
Page 248: Managing Multiple Pieces Of Content On A Single Content Server
If you have only one ZENworks Server in your Management Zone, you can’t exclude the content from it. You can’t include a Satellite devices without first including the Satellite devices’s parent ZENworks Server. 5 (Optional) Click Force Inheritance in the Folder Task list in the left navigation pane to ensure that all children (all subfolders as well as individual bundles and policies) inherit the settings.
Page 249 If you need more information about a wizard page, click the Help button or refer to the following table: Wizard Page Details Include or Exclude Content Move the content servers on which you want to include the content Servers/Satellite devices to the Included list.
Page 250 250 ZENworks 10 Configuration Management System Administration Reference...
Page 251: Content Delivery
Content Delivery Content delivery, or distribution, refers to the process of transferring bundle and policy content from ® a content server (ZENworks Primary Server or Satellite with the Content role) to a managed device. There are a variety of settings you can use to determine how content is delivered to managed devices, such as setting up Closest Server rules, setting delivery blackout dates for when content can’t be downloaded, and setting how often you want managed devices to look for new content to download.
Page 252: Setting The Device Refresh Schedule
To create a content blackout schedule for a device folder, open the folder’s details page, then click Settings > Content (in the Settings panel) > Content Blackout Schedule. To create a content blackout schedule for a device, open the device’s details page, click Settings >...
Page 253 To create a device refresh schedule: 1 Launch ZENworks Control Center. 2 Do one of the following: To create a device refresh schedule for your Management Zone, click the Configuration tab, then click Device Management (in the Management Zone Settings panel) > Device Refresh Schedule.
Page 254 ZENworks Server. By selecting this option, the device waits a randomly generated amount of time before initiating its refresh. Use the Minimum and Maximum fields to specify the range (in seconds) for the randomly generated time. Partial Refresh Schedule: Defines how often you want a device to update its policy, configuration setting, and registration information from the ZENworks Server.
Page 255: Part Vii Users
® The following sections provide information about connecting your ZENworks Management Zone ® to an authoritative user source (Microsoft Active Directory* or Novell eDirectory ) and managing how users log in to the ZENworks Management Zone: Chapter 31, “User Sources,” on page 257 Chapter 32, “User Authentication,”...
Page 256 256 ZENworks 10 Configuration Management System Administration Reference...
Page 257: User Sources
Section 31.5, “Managing Authentication Server Connections for User Sources,” on page 267 Section 31.6, “Providing LDAP Load Balancing and Fault Tolerance,” on page 268 31.1 Prerequisites Minimum directory version: Novell eDirectory 8.7.3 or Microsoft Active Directory on Windows 2000 SP4.
Page 258: Managing User Sources
31.2 Managing User Sources The following sections contain more information: Section 31.2.1, “Adding User Sources,” on page 258 Section 31.2.2, “Deleting User Sources,” on page 262 Section 31.2.3, “Editing User Sources,” on page 262 Section 31.2.4, “Adding a Container from a User Source,” on page 263 31.2.1 Adding User Sources 1 In ZENworks Control Center, click the Configuration tab.
Page 259 The user can have more than read-only access, but read-only access is all that is required and recommended. For Novell eDirectory access, use standard LDAP notation. For example: cn=admin_read_only,ou=users,o=mycompany For Microsoft Active Directory, use standard domain notation.
Page 260 After the user specifies the eDirectory username and password, that password is stored in Novell SecretStore. The next time the user uses a smart card to log in to eDirectory, the password is retrieved from SecretStore and the user is logged in to the ZENworks without having to specify the password.
Page 261 Wizard Page Details User Containers page After you connect to an LDAP directory as a user source, you can define the containers within the directory that you want exposed. The number of user containers you define is determined by how much of the directory you want to expose.
Page 262: Deleting User Sources
You can specify a username that provides more than read-only access, but read-only access is all that is required and recommended. For Novell eDirectory access, use standard LDAP notation when specifying the username. For example: cn=admin_read_only,ou=users,o=mycompany For Microsoft Active Directory, use standard domain notation.
Page 263: Managing User Source Connections
ZENworks Management Zone. To improve performance, you can create multiple connections to local replicas of Novell eDirectory or Active Directory trees so that Satellites do not have to authenticate users over a WAN or slow link. Creating connections to local LDAP user sources also provides fault tolerance by providing failover to other user source connection in the event that one connection does not work.
Page 264: Creating User Source Connections
If a user source connection cannot connect, there is more than a one-minute delay for each subsequent user source connection that is tried. This results from CASA having an internal delay that is not currently configurable. The following sections contain more information. Section 31.3.1, “Creating User Source Connections,”...
Page 265: Removing User Source Connections
Address: Specify the IP address or DNS hostname of the server where the LDAP directory resides. Use SSL: Displays Yes or No, depending on whether the user source uses SSL. You cannot edit this field. Port: This field defaults to the standard SSL port (636) or non-SSL port (389) depending on whether the user source uses SSL.
Page 266: Managing Primary Server Connections For User Sources
4 Click Update. 31.4 Managing Primary Server Connections for User Sources 1 In ZENworks Control Center, click the Configuration tab. 2 In the Server Hierarchy panel, select the check box next to the Primary Server for which you want to configure authentication connections. 3 Click Action >...
Page 267: Managing Authentication Server Connections For User Sources
31.5 Managing Authentication Server Connections for User Sources The Authentication Servers panel on a user source’s details page lets you edit authentication server connections, including adding, removing or reordering connections. The Authentication Servers panel displays information about the user source’s ZENworks Primary Servers and Satellite devices that have been configured with the Authentication role.
Page 268: Providing Ldap Load Balancing And Fault Tolerance
If you have many connections in your ZENworks Management Zone, you can use the Connection Address field to display only those connections that match the criteria. For example, to search for and display all connections that have an IP address starting with 172, type 172 in the Connection Address field, then click Filter.
Page 269: Using Zenworks Control Center To Define Additional Ldap Servers For A Zenworks Server
However, in ZENworks 10 Configuration Management SP3 (10.3), you can specify additional LDAP servers by using ZENworks Control Center or the zman command line utility. If you upgrade from Novell ZENworks 10 Configuration Management 10.2.x to ZENworks 10 Configuration Management SP3 (10.3), you need to manually redefine the existing additional LDAP servers specified in the file.
Page 270: Using The Zman Command Line Utility To Define Additional Ldap Servers For A Zenworks Server
31.6.2 Using the zman Command Line Utility to Define Additional LDAP Servers for a ZENworks Server To define additional LDAP servers for a ZENworks Server, run the user-source-add- command on the server. For more information on using the zman command, connection (usac) “User Commands”...
Page 271: User Authentication
When users enter their eDirectory or Active Directory credentials in the Windows or Novell client, they are logged in to the Management Zone if the credentials match the ones in a ZENworks user source. Otherwise, a separate ZENworks login screen prompts the user for the correct credentials.
Page 272: Authentication Mechanisms
Distribution Center (KDC). The keytab file is an encrypted, local, on-disk copy of the host's key. When using Kerberos authentication, the Active Directory server generates a Kerberos ticket that Novell Common Authentication Services Adapter (CASA) uses to authenticate the user, rather than using a username and password for authentication.
Page 273 For more information, see the Microsoft TechNet Web site (http://technet.microsoft.com/en-us/ library/cc753771(WS.10).aspx). For example, if you created a user called atsserver in your domain, you would run the following command from the command prompt: ktpass /princ host/atsserver.users.myserver.com@MYSERVER.COM -pass atsserver_password -mapuser atsserver -out atsserver.keytab -mapOp set - ptype KRB5_NT_PRINCIPAL This command creates a keytab file and modifies the user atsserver to be a Kerberos principal.
Page 274: Shared Secret
After the user specifies the eDirectory username and password, that password is stored in Novell SecretStore. The next time the user uses a smart card to log in to eDirectory, the password is retrieved from SecretStore and the user is logged in to the ZENworks without having to specify the password.
Page 275 By default, 1 is selected. Press Enter. 3 Enter the DNS name or IP address of the Novell eDirectory server to extend the schema. 4 You are prompted to select Secure Socket Layer (SSL) or Clear Text communication for communicating with the eDirectory server.
Page 276: Username/Password (Edirectory And Active Directory)
32.2.3 Username/Password (eDirectory and Active Directory) When using Username/Password authentication with a Novell eDirectory or Microsoft Active Directory user source, if the credentials the user specifies to log in to the workstation or to the domain match the ZENworks login credentials, the ZENworks login dialog box does not display and the user is authenticated to the ZENworks Management Zone.
Page 277: Credential Storage
GTK# Library. If you choose to install the library (which is necessary to run the CASA Manager), you are directed to a Novell Web site from which you can install it. Do not remove CASA from the managed device. If you do not want the CASA Manager displayed to users, you can remove the Novell CASA folder from the Start >...
Page 278: Troubleshooting User Authentication
“The settings assigned to an eDirectory user are not applied on the device where the user has logged in” on page 281 “ZENworks login screen is displayed on a device if Novell Client has been uninstalled from the device” on page 281 “Using a Smart Card to authenticate in to a device prompts the user to specify the eDirectory...
Page 279 Action: To log in to a non-OES 2.0 ZENworks Server, the user must be a Linux User Management (LUM) user. For more information on LUM users, see the Novell Linux User Management Technology Guide (http://www.novell.com/ documentation/oes2/acc_linux_svcs_lx/index.html?page=/documentation/ oes2/acc_linux_svcs_lx/data/fbdecbed.html) Large number of concurrent client logins might result in login failures...
Page 280 Unable to log into the ZENworks Server when logging in to a Windows Vista device Explanation: If you log into a Windows Vista* device that has Novell SecureLogin installed and Active Directory configured as the user source, you are not automatically logged in to the ZENworks server.
Page 281 Action: No two eDirectory users should have the same username and password. Even if the usernames are same, ensure that the passwords are different. ZENworks login screen is displayed on a device if Novell Client has been uninstalled from the device...
Page 282 282 ZENworks 10 Configuration Management System Administration Reference...
Page 283: Part Viii Zenworks 10 Product Licensing
VIII ZENworks 10 Product Licensing V I I I ® This section contains information about evaluating, activating, and deactivating ZENworks products. Chapter 33, “ZENworks 10 Product Licensing,” on page 285 ZENworks 10 Product Licensing...
Page 284 284 ZENworks 10 Configuration Management System Administration Reference...
Page 285: Evaluating A Product
ZENworks 10 Product Licensing ® The ZENworks 10 family of products include the following: ZENworks 10 Configuration Management ZENworks 10 Asset Management ZENworks 10 Patch Management Asset Inventory for UNIX/Linux All of the products are installed by default. This enables you to activate products by providing a license key or evaluate products for which you have not purchased a license.
Page 286: Extending The Evaluation Period Of A Product
For more information on license state changes, see Section 33.5, “Possible License State Changes,” on page 287. 33.2 Extending the Evaluation Period of a Product 1 Log in to the ZENworks Control Center. 2 Click the Configuration tab. 3 In the Product Licensing panel, click the product you want to evaluate. 4 In the Product Activation panel, select the Evaluate/Activate product option.
Page 287: Possible License State Changes
4 In the Product Activation panel, select the Deactivate product option. 5 Click Apply. 6 Click OK. For more information on possible license state changes, see Section 33.5, “Possible License State Changes,” on page 287. 33.5 Possible License State Changes The transition of a product to a new licence state depends on the current license state of the product and the license state of the product prior to the current license state.
Page 288: Using Zenworks 10 Asset Management With Zenworks 7 Desktop Management
Previous License State Current License State New License State Additional Information Evaluation Deactivated Evaluation You get the remaining evaluation days. For example, if you use the product for 10 days of the evaluation period and deactivate it, then if you choose to evaluate the product again, you get 50 days of evaluation.
Page 289 3 Navigate to Novell ZENworks Reports > Predefined Reports > ZENworks System. 4 The following predefined report is included for Licensing: ZENworks License Information: Displays the licensing details for the Asset Inventory for UNIX/Linux, ZENworks Configuration Management, and ZENworks Asset Management products installed on all the devices in your Management Zone.
Page 290 290 ZENworks 10 Configuration Management System Administration Reference...
Page 291: Part Ix Database Management
Database Management ® ® Novell ZENworks 10 Configuration Management allows you to back up and restore the embedded Sybase SQL Anywhere database by using the zman command line utility. To back up and restore Oracle* or Microsoft SQL Server* databases, refer to their documentation.
Page 292 292 ZENworks 10 Configuration Management System Administration Reference...
Page 293: Retrieving And Storing The Credentials Of The Embedded Sybase Sql Anywhere Database
Sybase SQL Anywhere uses port 2638 by default. You can change the port on which the database runs. 1 In the file, specify the new port number on which the server zenworks_database.conf listens to. file is located in on Windows and zenworks_database.conf %ZENWORKS_HOME%\conf on Linux. /etc/opt/novell/zenworks Embedded Database Maintenance...
Page 294 1. From the Windows desktop Start menu, click Settings > Control Panel. 2. Double-click Administrative Tools > Services. 3. Restart the following services: Novell ZENworks Embedded Datastore, Novell ZENworks Loader Service, and Novell ZENworks Server. On Linux: At the console prompt, enter the following commands in the order given: /etc/init.d/novell-zenmntr stop...
Page 295: Backing Up The Embedded Sybase Sql Anywhere Database
34.3 Backing Up the Embedded Sybase SQL Anywhere Database The embedded Sybase SQL Anywhere database can be backed up to a directory on the local machine or to a network location. Section 34.3.1, “Backing Up the Embedded Sybase SQL Anywhere Database on a Windows or Linux Server,”...
Page 296 CREATE EVENT ZENDBBackup1 SCHEDULE START TIME '1:00 AM' ON (1,2,3,4) Sample schedule files are available in the ZENworks_Installation_directory:\Novell\Zenworks\share\zman\samples\d directory on a Windows server, and in the atabase /opt/novell/zenworks/share/ directory on a Linux server. zman/samples/database...
Page 297: Backing Up The Embedded Sybase Sql Anywhere Database Running On A Windows Server To A Network Location On A Remote Windows Machine
1b From the desktop Start menu, click Settings, click Control Panel, double-click Administrative Tools, then double-click Services. 1c Right-click the Novell ZENworks Datastore service, then click Properties. 1d Click the Log On tab. 1e Select This account, then specify the name and the password of the administrative user...
Page 298 CREATE EVENT ZENDBBackup1 SCHEDULE START TIME '1:00 AM' ON (1,2,3,4) Sample schedule files are available in the ZENworks_Installation_directory\Novell\Zenworks\ directory. share\zman\samples\database 4b Execute the following command at the command prompt: zman database-backup \\IP_address_of_the_remote_machine\backup_directory\custom_directory c:\backUpSchedule.sql -d SQL_function_call...
Page 299: Backing Up The Embedded Sybase Sql Anywhere Database Running On A Linux Server To A Network Location On A Remote Linux Machine
34.3.3 Backing up the Embedded Sybase SQL Anywhere Database Running on a Linux Server to a Network Location on a Remote Linux Machine To back up the embedded Sybase SQL Anywhere database that is installed and running on a Linux server to a network location on a Linux machine, you need a local machine and a remote machine.
Page 300 CREATE EVENT ZENDBBackup1 SCHEDULE START TIME '1:00 AM' ON (1,2,3,4) Sample schedule files are available in the ZENworks_Installation_directory:\Novell\Zenworks\ directory. share\zman\samples\database 5b Enter the following command at the command prompt: zman database-backup database_backup_directory c:\backUpSchedule.sql - d SQL_function_call For example: zman database-backup /root/zenworks_dbbackup c:\backUpSchedule.sql -d...
Page 301: Restoring The Embedded Sybase Sql Anywhere Database
Stopping the Novell ZENworks Datastore service will also stop these services: Novell ZENworks Loader, Novell ZENworks Agent Service, Novell ZENworks Server. Do you want to continue this operation? (Y/N) [N]: 4 Press any key when the following message is displayed: The Novell ZENworks Datastore service was stopped successfully.
Page 302: Restoring The Embedded Sybase Sql Anywhere Database On A Linux Server
[y/n] 4 Enter when the following message is displayed: The novell-zenloader needs to be stopped for the database restore to be performed. Would you like to proceed [y/n]? The backup file is copied to , and the restore log file /var/opt/novell/zenworks/database .
Page 303: Preparing To Move The Data
Guide. 34.5.2 Moving the Data from the Internal Sybase to the External Sybase 1 On the device that has the external Sybase database installed, stop the Novell ZENworks Embedded Datastore service. On Windows: Do the following: 1. From the Windows desktop Start menu, click Settings > Control Panel.
Page 304: Migrating The Data From An Embedded Sybase Sql Anywhere To An External Oracle Database
2. Double-click Administrative Tools > Services. 3. Right-click the Novell ZENworks Embedded Datastore service, then click Start, or select the Novell ZENworks Embedded Datastore service, then click on the toolbar. On Linux: At the console prompt, enter /etc/init.d/./sybase-asa start 6 On the device that has the internal Sybase database installed, restart the ZENworks services: On Windows: Do the following: 1.
Page 305: Preparing To Move The Data
34.6.1 Preparing to Move the Data Before migrating the data from the Sybase database to Oracle database, do the following: Make sure that the license state of ZENworks 10 Configuration Management is Active. The product must be installed and running either in the licensed version or the evaluation version. Save all the reports, by using the rights.xml,...
Page 306: Migrating The Data From The Sybase Sql Anywhere Database To An Oracle Database
On Linux: At the console prompt, enter the following commands: /etc/init.d/./novell-zenmntr stop /etc/init.d/./novell-zenserver stop /etc/init.d/./novell-zenloader stop Make sure that the Novell ZENworks Embedded Datastore service on the Primary Server is running. On Windows: Do the following: 1. From the Windows desktop Start menu, click Settings > Control Panel.
Page 307 2 Run the database migration utility. On Windows: At the command prompt, go to file and ZENworks_installation_path\bin\novell-zenworks-configure.bat enter the following command: novell-zenworks-configure.bat -c DBMigrateConfigureAction On Linux: At the console prompt, go to and enter the /opt/novell/zenworks/bin following command: novell-zenworks-configure -c DBMigrateConfigureAction 3 Enter the target database type as Oracle.
Page 308: Post-Migration Tasks
1. From the Windows desktop Start menu, click Settings > Control Panel. 2. Double-click Administrative Tools > Services. 3. Start the following services: Novell ZENworks Server, Novell ZENworks Services Monitor, and Novell ZENworks Agent Service. On Linux: At the console prompt, enter the following commands: /etc/init.d/./novell-zenmntr restart...
Page 309: Troubleshooting Database Migration
RAM of the device where the migration utility is running: "%JAVA_HOME%\bin\java" -Djava.library.path=%ZENLIB% -cp "%MYCP%" %DEBUG_OPTS% %JAVA_OPTS% -Xmx128m com.novell.zenworks.configure.ConfigureLoader %CONFIG_OPTS% The heap space value is represented in megabytes (MB) within . By default, it is -Xmx128m 128.
Page 310 "%JAVA_HOME%\bin\java" -Djava.library.path=%ZENLIB% -cp "%MYCP%" %DEBUG_OPTS% %JAVA_OPTS% -Xmx512m com.novell.zenworks.configure.ConfigureLoader %CONFIG_OPTS% IMPORTANT: The heap space value must be either equivalent to or less than the RAM of the device. 2 At the console prompt, run the ZENworks_installation_path\bin\novell-zenworks- file on Windows or configure.bat /opt/novell/zenworks/bin/novell-zenworks- on Linux.
Page 311: Reverting To The Sybase Database
The files are located in the directory on ZENworks_installation_path\conf\datamodel Windows and in the directory on Linux. /etc/opt/novell/zenworks/datamodel 2 Restart all the ZENworks Services: On Windows: Do the following: 1. From the Windows desktop Start menu, click Settings > Control Panel. Embedded Database Maintenance 311...
Page 312 2. Double-click Administrative Tools > Services. 3. Start the following services: Novell ZENworks Server, Novell ZENworks Services Monitor, and Novell ZENworks Agent Service. On Linux: At the console prompt, enter the following commands: /etc/init.d/./novell-zenmntr restart /etc/init.d/./novell-zenserver restart /etc/init.d/./novell-zenloader restart 312 ZENworks 10 Configuration Management System Administration Reference...
Page 313: External Database Maintenance
1 Launch the DBISQL utility: 1a At the command prompt, go to the directory on %ZENWORKS_HOME%\sybase\ASA\win32 Windows or to the directory on /opt/novell/zenworks/share/sybase/bin32s Linux. 1b Enter the command. dbisql 1c In the Identification tab, specify the database credentials. 1d Click the Database tab, then specify the name of database service that is currently running.
Page 314 2 Decide whether you want to immediately back up the external Sybase database or to schedule the backup to run at a specific time. To immediately back up the database, continue with Step 2a. To schedule the backup to run at a specific time, skip to Step 2a To immediately back up the embedded Sybase SQL Anywhere database to a directory on the database server, specify the following query in the SQL Statements section:...
Page 315 Examples: To back up the database at a 1:00 a.m. every day to the directory on Linux, execute /var/ the following query: CREATE EVENT ZENDBbackup SCHEDULE START TIME '1:00 AM' EVERY 24 HOURS HANDLER BEGIN BACKUP DATABASE DIRECTORY ‘/var/’ TRANSACTION LOG TRUNCATE END;...
Page 316: Backing Up The External Sybase Database Running On A Windows Server To A Network Location On A Remote Windows Machine
1b From the desktop Start menu, click Settings, click Control Panel, double-click Administrative Tools, then double-click Services. 1c Right-click the Novell ZENworks Datastore service, then click Properties. 1d Click the Log On tab. 1e Select This account, then specify the name and the password of the administrative user...
Page 317 BACKUP DATABASE DIRECTORY ‘\\\\IP_address_of_remote_machine\\backup_directory\\custom_directory ’ TRANSACTION LOG TRUNCATE In the query, \\ is \\\\IP_address_of_the_remote_machine\\backup_directory the shared network location on the remote machine and is a custom_directory_name name that you specify for a directory to be newly created and into which the database files are to be backed up.
Page 318 HANDLER BEGIN BACKUP DATABASE DIRECTORY ‘\\\\shared_network_location_on_remote_machine\\dbbackup’ TRANSACTION LOG TRUNCATE END; To back up the database at a 1:00 a.m. on the first, second, third, and fourth day of the month to the directory on a Windows server, execute the following query: dbbackup CREATE EVENT ZENDBbackup SCHEDULE...
Page 319: Backing Up The External Sybase Database Running On A Linux Server To A Network Location On A Remote Linux Machine
35.1.3 Backing up the External Sybase Database Running on a Linux Server to a Network Location on a Remote Linux Machine To back up the external Sybase database that is installed and running on a Linux server to a network location on a Linux machine, you need a local machine and a remote machine.
Page 320 4 Launch the DBISQL utility on the local machine: 4a At the command prompt, go to the directory on %ZENWORKS_HOME%\sybase\ASA\win32 Windows or to the directory on /opt/novell/zenworks/share/sybase/bin32s Linux. 4b Enter the command. dbisql 4c In the Identification tab, specify the database credentials.
Page 321 Examples: To back up the database at a 1:00 a.m. every day to the /root/zenworks_dbbackup directory on Linux, execute the following query: CREATE EVENT ZENDBbackup SCHEDULE START TIME '1:00 AM' EVERY 24 HOURS HANDLER BEGIN BACKUP DATABASE DIRECTORY ‘/root/zenworks_dbbackup/’ TRANSACTION LOG TRUNCATE END;...
Page 322: Restoring The External Sybase Database
To restore the backed-up external Sybase database: 1 Stop the Novell ZENworks Embedded Datastore service on the database server on which you want to restore the backed-up database. If you choose to restore the backed-up database on a different device, you must stop the service on that device as well as on the database server.
Page 323: Moving The Data From One External Sybase Database To Another External Sybase Database
4 Start the Novell ZENworks Embedded Datastore service on the database server on which you restored the backed-up database. If you have restored the backed-up database to a different device, you must start the service on that device as well as on the database server.
Page 324: Moving The Data From One External Sybase To Another External Sybase
In the following procedure, assume that the device you are moving the data from is EDB1 and the device you are moving the data to is EDB2. 1 On the EDB1 device from which you want to move the data, stop the Novell ZENworks Embedded Datastore service.
Page 325: Moving The Data From An External Oem Sybase Database To An Embedded Sybase Database
Embedded Sybase 1 On the ZENworks Server that has the embedded Sybase database installed, do the following: 1a Stop the Novell ZENworks Embedded Datastore service. On Windows: Do the following: 1. From the Windows desktop Start menu, click Settings > Control Panel.
Page 326 Linux. /opt/novell/zenworks/ 2 On the device that has the external Sybase database installed, stop the Novell ZENworks Embedded Datastore service. On Windows: Do the following: 1. From the Windows desktop Start menu, click Settings > Control Panel.
Page 327: Configuring The Zenworks Server To Point To The New Ms Sql Database Containing Data Moved From Another Ms Sql Database
2. Double-click Administrative Tools > Services. 3. Start the following services: Novell ZENworks Server, Novell ZENworks Services Monitor, Novell ZENworks Embedded Datastore, and Novell ZENworks Agent Service. On Linux: At the console prompt, enter the following commands: /etc/init.d/./novell-zenmntr restart /etc/init.d/./novell-zenserver restart /etc/init.d/./novell-zenloader restart...
Page 328: Configuring The Zenworks Server To Point To The New Ms Sql Database
1. From the Windows desktop Start menu, click Settings > Control Panel. 2. Double-click Administrative Tools > Services. 3. Start the following services: Novell ZENworks Server, Novell ZENworks Services Monitor, and Novell ZENworks Agent Service. On Linux: At the console prompt, enter the following commands: /etc/init.d/./novell-zenmntr restart...
Page 329: Configuring The Zenworks Server To Point To The New Oracle Database
1. From the Windows desktop Start menu, click Settings > Control Panel. 2. Double-click Administrative Tools > Services. 3. Start the following services: Novell ZENworks Server, Novell ZENworks Services Monitor, and Novell ZENworks Agent Service. On Linux: At the console prompt, enter the following commands: /etc/init.d/./novell-zenmntr restart...
Page 330 330 ZENworks 10 Configuration Management System Administration Reference...
Page 331: Database Best Practices And Tips
To archive the credentials of an embedded or external OEM Sybase database, perform the following tasks on the database server: 1a Make sure the database service is running. On Windows: In the Windows Services, make sure that the status of Novell ZENworks Embedded Datastore is Started. On Linux: At the console prompt, enter to verify /etc/init.d/sybase-asa status...
Page 332 1. From the Windows desktop Start menu, click Settings > Control Panel. 2. Double-click Administrative Tools > Services. 3. Right-click the Novell ZENworks Embedded Datastore service, then click Start, or select the Novell ZENworks Embedded Datastore service, then click on the toolbar.
Page 333 If you encounter any issues during the rebuild process, contact Novell Support (http:// www.novell.com/support). 13 Stop the Novell ZENworks Embedded Datastore service by using the dbeng10 command: On Windows: Right-click the Rebuild icon located in Windows taskbar, then click Shutdown.
Page 334: Database Tips
1 Delete the existing database backup schedule by executing the following command at the Primary Server command prompt: zman db current_database_backup_location DropSchedule.sql is located by default in the Dropschedule.sql ZENworks_Installation_directory:\Novell\Zenworks\share\zman\samples\datab directory on a Windows server, and in the /opt/novell/zenworks/share/zman/ directory on a Linux server. samples/database...
Page 335: Changing The Backup Schedule And Location Of The External Sybase Database Subsequent To The Initial Backup
START TIME '11:00 PM' ON ('Monday', 'Tuesday', 'Wednesday') A sample file is available in the Alterschedule.sql ZENworks_Installation_directory:\Novell\Zenworks\share\zman\samples\datab directory on a Windows server, and in the /opt/novell/zenworks/share/zman/ directory on a Linux server. samples/database 2 Enter the following command to back up the database according to the new schedule:...
Page 336 1d Click the Database tab, then specify the name of database service that is currently running. 1e Click OK. 2 Change the database backup schedule and the backup location as desired. You can use the same SQL query to change the database backup schedule and the backup location.
Page 337 TRANSACTION LOG TRUNCATE END; If you want to back up the database at 2:00 a.m. on the first, second, and third day on the month to a new location, , change the database backup schedule and e:\zendb\dbbackup location in the event by executing the following query in the DBISQL zendbbackup utility:...
Page 338 338 ZENworks 10 Configuration Management System Administration Reference...
Page 339: Part X Message Logging
Message Logging This section includes information about Message Logger features and procedures to help you ® ® configure and maintain your Novell ZENworks system. Chapter 37, “Overview,” on page 341 Chapter 38, “Configuring Message Logger Settings,” on page 343 Chapter 39, “Managing Messages,” on page 349...
Page 340 340 ZENworks 10 Configuration Management System Administration Reference...
Page 341: Overview
Overview ® ® The Message Logger component of Novell ZENworks 10 Configuration Management lets the other ZENworks components such as zenloader, webservices, ZENworks Management Daemon (ZMD), Remote Management, and Policy Enforcers log messages to different output targets. The output targets includes the system log, local log, database, SMTP, SNMP trap, and UDP.
Page 342: Message Format
37.3 Message Format Messages are logged in different formats depending on the output targets. For more information on message formats see, Section 39.1, “Understanding Message Formats,” on page 349. 342 ZENworks 10 Configuration Management System Administration Reference...
Page 343: Configuring Message Logger Settings
Settings The following sections provide information on configuring the settings of the Message Logger ® ® component of Novell ZENworks 10 Configuration Management. Section 38.1, “Configuring the Message Logger Settings at the Zone Level,” on page 343 Section 38.2, “Configuring the Message Logger Settings at the Folder Level,” on page 347 Section 38.3, “Configuring the Message Logger Settings at the Device Level,”...
Page 344: Centralized Message Logging
Rolling Based on Date: Closes the current log file and starts a new file based on the following schedules: Daily Pattern: Starts a new file daily. Monthly Pattern: Starts a new file monthly. On a Windows managed device, the local files include the following: located in zmd-messages.log \novell\zenworks\logs\localstore located in loader-messages.log \novell\zenworks\logs located in services-messages.log \novell\zenworks\logs...
Page 345 Information: Allows you to configure the following settings for the informational messages: Auto acknowledge when older than [ ] days: Allows you to automatically acknowledge the logged informational messages that are older than the number of days you specify. For example, if you specify 30 days, then all the informational messages logged before 30 days from the current date are acknowledged when the Message Cleanup activity is scheduled to run.
Page 346 Select the Days of the Week and the Time to Perform the Message Cleanup: Allows you to specify the time and the days of the week to run the Message Cleanup action. The administrator can set a daily schedule for Message Cleanup action. Use Coordinated Universal Time: Allows you to convert the specified time to UTC (GMT) time.
Page 347: Configuring The Message Logger Settings At The Folder Level
38.2 Configuring the Message Logger Settings at the Folder Level By default, the Message Logger settings configured at the zone level are applied to all the managed devices. However, you can modify the Local Device Logging settings for all the devices within a folder: 1 In ZENworks Control Center, click Devices.
Page 348 348 ZENworks 10 Configuration Management System Administration Reference...
Page 349: Managing Messages
Managing Messages The Message Logger component lets you manage the messages logged by the other components of ® ® Novell ZENworks 10 Configuration Management. Section 39.1, “Understanding Message Formats,” on page 349 Section 39.2, “Viewing the Message Status,” on page 352 Section 39.3, “Viewing the Messages,”...
Page 350: E-Mail Format
[severity] [loggingTime] [userGUID] [componentName] [MessageID] [MessageString] [additionalInfo] [RelatedGUID]. For example, [DEBUG] [1/22/2007 12:09:15 PM] [] [ZMD] [] [refreshing QuickTaskRefresh(GeneralRefresh)] [] []. 39.1.2 E-Mail Format An e-mail message consists of the message header and the message body: “Message Header” on page 350 “Message Body”...
Page 351: Udp Payload Format
Version Number: Specifies the version of SNMP used. ZENworks 10 Configuration Management uses SNMPv1. Community String: Defines an access environment for a group of network-management systems (NMS). Protocol Data Unit (PDU) The following fields are contained in the PDU: Enterprise: Identifies the type of managed object generating the trap. ZENworks 10 Configuration Management uses 1.3.6.1.4.1.23.2.80.100.
Page 352: Viewing The Message Status
The sixth element is the non-localized message ID. The seventh element is the localized message string. The eighth element is the additional information. The ninth element is the probable cause URL. The tenth element is the related GUID objects separated by commas. NOTE: If the element does not have any data, it is represented as \0\0.
Page 353: Device Hot List
39.2.2 Device Hot List The Device Hot List displays a list of the devices that have a noncompliant status or have generated critical or warning messages. The device remains in the hot list until you resolve the compliancy problem and acknowledge the messages. You can use this list as a summary of problems that need attention on the device.
Page 354: System Message Log
3 Click the name of a device, then click the Summary tab to display: Status: Displays an icon indicating the type of message: Critical Message Warning Normal Message: Displays a brief description of the event that occurred. Date: Displays the date and time the event occurred. 4 To view the log messages in the advanced view, click Advanced on the right corner of the Memory Log panel.
Page 355: Acknowledging Messages
Date: Displays the date and time the event occurred. 3 To view the log messages in the advanced view, click Advanced on the right corner of the System Memory Log panel. You can acknowledge or delete messages from the system message log. For more information on acknowledging messages, see Section 39.4, “Acknowledging Messages,”...
Page 356: Acknowledging Messages Logged During A Specified Time
2 Select the messages to acknowledge, then click Acknowledge: The acknowledged messages are marked with a check mark ( 39.4.3 Acknowledging Messages Logged During a Specified Time 1 In ZENworks Control Center, click Configuration. 2 In the Configuration Tasks, click Message Cleanup to display: 3 In the Message Cleanup dialog box, select Acknowledge.
Page 357: Deleting Messages
39.5 Deleting Messages Deleting a message completely removes the message from your ZENworks system. Section 39.5.1, “Deleting a Message,” on page 357 Section 39.5.2, “Deleting Multiple Messages,” on page 357 Section 39.5.3, “Deleting Messages Logged During a Specified Time,” on page 358 39.5.1 Deleting a Message 1 In the Message Log panel or the System Message Log panel, click the message you want to delete.
Page 358: Deleting Messages Logged During A Specified Time
2 In the ZENworks Reporting Server Reporting panel, click ZENworks Reporting Server InfoView to launch the ZENworks Reporting Server InfoView. 3 Navigate to the Novell ZENworks Reports folder > Predefined Reports > ZENworks System folder. 4 The following predefined report is included for Messages:...
Page 359 ZENworks Messages: Displays message details such as the log time and description for all the ZENworks System messages. For more information on creating and managing reports, see the ZENworks 10 Configuration Management System Reporting Reference documentation. Managing Messages 359...
Page 360 360 ZENworks 10 Configuration Management System Administration Reference...
Page 361: A Naming Conventions In Zenworks Control Center
Naming Conventions in ZENworks Control Center ® When you name an object in the ZENworks Control Center (folders, bundles, policies, groups, registration keys, and so forth), ensure that the name adheres to the following conventions: The name must be unique in the folder. Depending on the database being used for the ZENworks database, uppercase and lowercase letters might not create uniqueness for the same name.
Page 362 362 ZENworks 10 Configuration Management System Administration Reference...
Page 363: B Schedule Types
Schedule Types The following schedules are available: Section B.1, “Date Specific,” on page 363 Section B.2, “Event,” on page 364 Section B.3, “Now,” on page 365 Section B.4, “Recurring,” on page 365 B.1 Date Specific The Date Specific scheduling option lets you specify one or more dates on which to run the event. Date Specific Schedule Figure B-1 Start Dates: Click...
Page 364: Event
Use Coordinated Universal Time (UTC): The Start Time is converted to Universal Coordinated Time (UTC). Select this option to indicate that the Start Time you entered is already in Coordinated Universal Time and should not be converted. For example, suppose you are in the Eastern time zone. If you enter 10:00 a.m.
Page 365: Now
changes can show up on the device, even if one of the event triggers occur. By default, devices refresh randomly between 300 and 360 seconds after device startup with a full refresh every 12 hours. For example, if you create a bundle and schedule it to launch when the device connects to the network, the device must be manually refreshed or refreshed according to schedule before the Adaptive Agent can upload or launch the bundle, even if the device connects to the network.
Page 366 When a Device Is Refreshed: This schedule causes the event to occur each time the ZENworks Adaptive Agent performs a refresh on the device. If you want to delay the event so that it does not happen immediately upon refresh, select the Delay execution after refresh option and specify the number of days, hours, or minutes you want to delay the event.
Page 367 Start at a Random Time between Start Time and End Time: Starts the event at a randomly selected time between the time you specify in the Start Time and End Time boxes. You can use this option to avoid possible network overload from concurrently scheduled events. Restrict Schedule Execution to the Following Date Range: Limits running of the event to the time period specified by the starting and ending dates.
Page 368 368 ZENworks 10 Configuration Management System Administration Reference...
Page 369: C Customizing The Look And Feel Of The Zenworks Icon
Customizing the Look and Feel of the ZENworks Icon ® The ZENworks Icon is located in the Windows notification area of the managed device. This is a default static icon. When the managed device is refreshed, the default static icon is replaced by the default animated icons.
Page 370: Replacing The Customized Icons With The Default Zenworks Icons
If you delete the custom animated icons from the %ZENWORKS_HOME%\bin\icons\ZIcon directory, the default ZENworks animated icons are displayed in the notification area of the device during the device refresh. If you choose to delete a custom animated icon file, then you rename an existing custom animated icon file with the same name as the deleted file, the icon associated with the renamed file is incorrectly displayed as the icon of the deleted file in the directory.
Page 371: D Documentation Updates
Documentation Updates This section contains information on documentation content changes that were made in this System ® ® Administration Reference for Novell ZENworks 10 Configuration Management SP3. The changes are listed according to the date they were published. The documentation for this product is provided on the Web in two formats: HTML and PDF. The HTML and PDF documentation are both kept up-to-date with the changes listed in this section.
Page 372 Location Update Section 7.6, “Manually Replicating Content from a Added entire section. Primary Server to Satellite Devices,” on page 90 Section 8.2, “Satellite Role Relationships,” on Added information about the Authentication role. page 95 Chapter 9, “Closest Server Rules,” on page 99 Added information about Authentication options.
Page 373: Part Ix, "Database Management," On
Location Update Section 31.2.3, “Editing User Sources,” on Added information about Authentication page 262 Mechanisms, Connections, and Authentication Servers. In the Use SSL option, added information on editing this option. Section 31.3, “Managing User Source Added entire section. Connections,” on page 263 Section 31.4, “Managing Primary Server Added entire section.
Page 374 374 ZENworks 10 Configuration Management System Administration Reference...

This manual is also suitable for:

Zenworks 10 configuration management sp3