Dell Command | Integration Suite for System Center Version 5.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2017 - 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 Introduction................................................................................................................................. 5 What’s New............................................................................................................................................................................5 Key Features And Functionalities........................................................................................................................................
Policies............................................................................................................................................................................. 21 Configure Subscriptions................................................................................................................................................22 Subscription Status..........................................................................................................................................
1 Introduction This document describes the activities that you can perform with Dell Command | Integration Suite for System Center on systems running Microsoft System Center Configuration Manager.
Supported System Center Configuration Manager Versions Dell Command | Integration Suite for System Center supports the following versions of Configuration Manager: • • • • Microsoft System Center 2012 Configuration Manager Microsoft System Center 2012 SP1 Configuration Manager Microsoft System Center 2012 R2 Configuration Manager Microsoft System Center Current Branch Configuration Manager NOTE: Dell Command | Integration Suite for System Center versions 4.
Supported Server Operating Systems • • • Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Introduction 7
2 Using Dell Command | Integration Suite for System Center Before you begin using Dell Command | Integration Suite for System Center, make sure that the target Dell client systems are registered as Configure Manager clients and present under All Systems on the Configuration Manager console. For more information on configuring clients through Configuration Manager, see the Microsoft TechNet article at technet.microsoft.com/en-us/library/gg682144.
1. Launch the Configuration Manager console. 2. Click Software Library. 3. Expand Overview > Operating Systems. 4. Right-click Boot Images and click Dell Command | WinPE Driver Library Import. The WinPE Driver Library Import Wizard opens. 5. Select a driver library source: • Dell Update/Support site—Select either the Use current internet proxy settings or the Use custom proxy settings option. If you choose the custom option, also enter a proxy server URL or IP address and a proxy port number.
• Dell Update/Support site—Select either the Use current internet proxy settings or the Use custom proxy settings option. If you choose the custom option, also enter a proxy server URL or IP address and a proxy port number. If you are using proxy authentication, enter a username and, optionally, a password. The Dell Command | Deploy Driver Pack Catalog is downloaded from the Dell support site. • Or Local Driver Library—Click Browse and navigate to a locally-stored Dell Command | Deploy Driver Package.
6. Select a distribution point from the list available under Select the distribution points to manage and update to distribute the package automatically once it is created. 7. Click OK. If a package already exists in the Configuration Manager, a message is displayed asking if you want to recreate or continue. If you select No, the process does not recreate the package. Otherwise, the package is removed from Configuration Manager, and a new package is created.
NOTE: If you select the Configure BIOS check box and a Dell Command | Configure package has been previously created, then a task sequence template is created while configuring the system BIOS. The Dell Command | Configure package is selected by default and the command line to run the SCE on the target system is populated automatically. However, if a Dell Command | Configure package has not been created then a message that no Dell Command | Configure package has been detected is displayed.
Exporting Options Without Setting Values You can export certain options without specifying any values. The options are asset and propowntag. To export asset and propowntag without specifying any values, select the Apply Settings check box of the corresponding option and export. Password Protection Dialog Box If you have configured the system or setup password in the exporting file (configuration file or report), a password protection dialog box is displayed.
Apply Driver Packages To apply driver packages: 1. From the left side of the Task Sequence Editor, under Deploy Operating System, click Apply Driver Package. 2. Browse and select the Dell Client Driver Packages. The list of driver packages available in the Dell Deployment Pack is displayed. 3. Select a package for your Dell client system and click Apply. You have successfully added drivers.
3 The Dell Command | Intel vPro Out Of Band Application The Dell Command | Intel vPro Out of Band application provides an out-of-band management solution through a stand-alone application on the system running Dell Command | Integration Suite for System Center. The application allows you remotely to manage client systems regardless of the system power or operating state.
NOTE: Configure the client system’s firewall to accept WinRM commands. 1. Enter winrm quickconfig. 2. Press y to continue if prompted Do you want to configure winrm? 3. winrm set winrm/config/client @{AllowUnencrypted="true"} 4. winrm set winrm/config/client/auth @{Digest="true"} 5. winrm set winrm/config/client @{TrustedHosts="MANAGEMENT_SERVER_IP_ADDRESS"} The WinRM is configured. NOTE: When you provision a client system via Remote Provisioning, WinRm is automatically configured on the client system.
• • • KVM Task Queue Logging Account Setup You can set up and configure the account through which you want to manage your AMT enabled client systems. 1. Launch the Dell Command | Intel vPro Out of Band application. 2. Click the settings icon. 3. On the Settings screen, The Account Setup tab is displayed. 4. You can configure the following settings: • • • • Configure the Configuration Manager SQL Server information. Configure the Configuration Manager Database information.
3. On the Settings screen, click KVM. The KVM tab is displayed. 4. Specify the time for the User Consent session to time out using the User consent response timeout. 5. Specify the time for the KVM session to time out after a period of inactivity using the Session Timeout . NOTE: Setting the value to zero disables the time out session. 6. Click OK. Task Queue This feature allows you to limit the number of completed tasks and displayed in the Task Queue window. 1.
• • Intel vPro-enabled client systems are registered as Configuration Manager clients. If you plan on using an AMT provisioning certificate from a trusted third-party Certificate Authority, see the Remote Provisioning Certificate Setup section below. If you plan to use a self-signed AMT provisioning certificate, you must have created one and have it on hand for the remote provisioning configuration process and for manual insertion of the hash into each vPro-enabled client to be remotely configured.
Preparing Intel vPro Client Systems For Remote Provisioning If you specified a self-signed certificate during the Remote Provisioning configuration process, then insert the self-signed certificate hash into the MEBx of any client systems you intend to target for remote provisioning. Provisioning Remote Client Systems From the Configuration Manager Admin Console, do the following: 1. Deploy the vPro-AMT Configure Client task sequence on the vPro-AMT Capable device collection or a custom device collection.
Indications The Dell Command | Intel vPro Out Of Band application provides an indications feature that allows you remotely to monitor, diagnose, and manage clients using Distributed Management Task Force (DMTF) filters (indications) to monitor each client. NOTE: More information on DMTF filters may be found at the DMTF website,www.dmtf.org.
4. Select the filter(s) to include in your policy. You must select at least one filter to create a new policy, but no more than two filters consisting of the CorePlatform (Recommended) filter and one of the Optional filters. See Recommended And Optional Filters for more information on when to use which filters. NOTE: You can only select one Optional filter to include in any given policy. 5. Click OK. The new policy appears in the Policies table.
• • • • • • • Subscription Name Operation Modifier — Modifies the Operation. Currently Stop is the only modifier. Status — The status of the Subscription; if a single client remains in the Pending or Retry state, then the Status of the Subscription will be Complete With Errors. Policy Name Policy Filters Clients — If one client is included in the subscription, its Fully Qualified Domain Name (FQDN) will be listed in the table.
NOTE: You cannot apply a subscription that includes one of the Optional filters when an another subscription containing one of the message intensive filters is active. NOTE: If an Unsubscribe All task is in progress, you will not be able to subscribe, unsubscribe, or stop subscriptions. NOTE: If the Indications service (DellAweSvc) is not running, you will not be able to subscribe, unsubscribe, or stop subscriptions. Check the status of the service on the Services console. 1.
Events The Events screen displays a list of indications that are returned once a subscription has been applied. From this screen you can not only view the list of events, but also export the list to a *.csv file. Should you no longer need to track specific types of events, you can add the event Message ID to a Blacklist; the events will continue to occur, but they will no longer be stored until you remove them from the Blacklist. The Event list is sortable by the Date column only.
Exporting Events To export a list of events to a *.cvs file: 1. Click Indications > Events in the left pane. 2. Select the events to export by placing a check mark in the appropriate boxes. 3. Click EXPORT . . . . 4. Navigate to the location to which you want to save the event list file, and click Save. The selected events are saved to the *.cvs file. Client Configuration Allows you to configure the Power Profile, Boot Order, BIOS Settings, and BIOS Passwords on the target client systems.
• • Continue on error — If you want the task execution to continue to subsequent clients systems when an error occurs, select the Continue on error option. Otherwise, task execution stops on the first client system where an error is encountered. Reboot client after applying changes — If you want to reboot the client systems after applying changes. 5. Click Next. The Select Clients tab is opened. 6. Search for client systems to which you want to apply the Boot Order changes to. 7.
Setting BIOS Passwords The feature allows you to manage your BIOS passwords, set passwords, clear passwords, or change the length requirements for the passwords. 1. Launch the Dell Command | Intel vPro Out of Band application. 2. Click Client Configuration > BIOS Passwords. The BIOS Passwords tab is displayed. 3. Select one of the following options: • Clear — clear either the Admin or System password.
3. Search for the list of client systems on which you want to establish KVM sessions. 4. Select a client system on which you want to start the KVM session and click Connect. Performing Power Management This feature allows you to gracefully shut down or restart your client system, through the Windows operating system enabled by the AMT operation. NOTE: Windows firewall can block graceful power request by Dell Command | Integration Suite for System Center. 1.
5. The Schedule Task tab is displayed. 6. You can either choose to apply the task immediately or schedule it to run later. Depending on your schedule, select one of the following options: • Run now — the wipe client data operations are immediately applied and displays the Running status in the Task Queue. NOTE: If your client systems are not connected to the network, run the task again. • Run At — wipe client disk operations are queued in the Task Queue.
Scheduling Reports Generate reports for selected client systems on the network. To schedule a report: 1. Click Schedule. The Select Clients tab is displayed. 2. Search for the list of client systems you want to view the reports on. 3. From the Available clients list select the client systems you want to manage and click the press the button to move all the discovered Dell clients into the Selected clients list. button to move your selected systems or 4. Click Next. The Schedule Task tab is displayed. 5.
• • • • 32 Retrieve — executes the Retrieve (instead of the Schedule) path of a report task. Edit — edit tasks that are pending (waiting to be run). Tasks are placed on Hold while editing is underway. Duplicate — duplicate any pending, completed, and canceled tasks. Cancel — cancel tasks that are not yet Completed.
4 Troubleshooting This section contains troubleshooting information for the Dell Command | Integration Suite for System Center . Topics: • • • • • • Authenticode Signature KVM Over Wireless Hardware Inventory Report Memory Speed is reported as Zero Max Password Length Change KVM Power Control to Boot to OS in S3 Apply Operating System Task Sequence Action Has A Red Bang Authenticode Signature If authenticode signature takes longer than usual to start because .
KVM Power Control to Boot to OS in S3 If after a KVM connection is established, the AMT client enters power state S3 or S4, the KVM connection is lost within 30 seconds of entering the sleep state. (This issue occurs in both wired and wireless environments.) In such a case, the administrator needs to restart the connection (Connection→ Start), before issuing a reboot command (OS, BIOS, Diagnostics, IDE-R).
5 Related Reference In addition to this guide, there are other product guides you should have for reference. You can find the following guides on the Dell Support website at support.dell.com/manuals. • • • The Dell Command | Configure User’s Guide describes the installation and use of the Dell Command | Configure to configure various BIOS features for Dell business client platforms. The Dell Command | Monitor User’s Guide describes the installation and the use of the Dell Command | Monitor software.
