Users Guide

Managing the device configuration
compliance
By selecting OpenManage Enterprise > Configuration > Configuration Compliance, you can create configuration-
compliance baselines by using the built-in or user-created compliance templates. You can create a compliance template from an
existing deployment template, reference device, or by importing from a file. To use this feature, you must have the Enterprise
level license of OpenManage Enterprise and iDRAC for servers. For Chassis Management Controller, no license is required.
User's only with certain privileges are permitted to use this feature. See Role and scope-based access control in OpenManage
Enterprise on page 15.
After a configuration baseline is created by using a compliance template, the summary of compliance level of each baseline is
listed in a table. Each device associated with the baseline has its own status, however, the highest severity status is considered
as the status of the baseline. For more information about Rollup Health status, see the MANAGING THE ROLLUP HEALTH
STATUS BY USING IDRAC ON THE DELL EMC 14TH GENERATION AND LATER POWEREDGE SERVERS white paper on the
support site.
NOTE: A baseline with multiple devices can sometimes show up as non-complaint permanently as few of the attribute
values are not necessarily same across all the targets. For example, the Boot Control attributes such as the iSCSI
Target IQN, LUN ID, FCoE Target WWPN and so on that are not same across all targets and can cause a permanent
non-compliance of the baseline.
The Overall Compliance Summary report displays the following fields:
● COMPLIANCE: The Rollup compliance level of devices attached to a configuration compliance baseline. The status of the
device with least compliance (say, critical) is indicated as the status of the whole baseline.
● NAME: Name of the configuration compliance baseline.
● TEMPLATE: The name of the compliance template used by the baseline.
● LAST RUN TIME: The most recent date and time when the compliance baseline was run.
To view the configuration compliance report of a baseline, select the corresponding check box, and then click View Report in
the right pane.
Use the query builder feature to generate device level compliance to the selected baseline. See Select a query criteria on page
55.
OpenManage Enterprise provides a built-in report to view the list of monitored devices and their compliance to the configuration
compliance baseline. Select OpenManage Enterprise > Monitor > Reports > Devices per Template Compliance Baseline,
and then click Run. See Run reports on page 133.
Related tasks
Create a configuration compliance baseline on page 107
Edit a configuration compliance baseline on page 108
Remove a configuration compliance baseline on page 110
Manage compliance templates on page 105
Select a query criteria on page 55
Topics:
• Manage compliance templates
• Create a configuration compliance baseline
• Edit a configuration compliance baseline
• Delete configuration compliance baselines
• Refresh compliance of the configuration compliance baselines
• Remediate noncompliant devices
• Remove a configuration compliance baseline
13
104 Managing the device configuration compliance