Users Guide

Managing the device configuration
compliance
By selecting OpenManage Enterprise > Configuration > Configuration Compliance, you can create configuration baselines
by using the built-in or user-created compliance templates. You can create a configuration compliance template from an existing
deploy template, reference device, or by importing from a file. To use this feature, you must have the Enterprise level license of
OpenManage Enterprise and iDRAC for servers. For Chassis Management Controller, no license is required. User's only with
certain privileges are permitted to use this feature. See Role-based OpenManage Enterprise user privileges on page 14.
NOTE: After a configuration baseline is created by using a template, the summary of compliance level of each baseline is
listed in a table. Each device has its own status, the highest severity status is considered as the status of the baseline. For
more information about Rollup Health status, see the MANAGING THE ROLLUP HEALTH STATUS BY USING IDRAC ON
THE DELL EMC 14TH GENERATION AND LATER POWEREDGE SERVERS white paper on the support site.
NOTE: You can create configuration baseline of only the lead MX7000 chassis.
On the Configuration Compliance page, you can:
● Create configuration compliance baseline. See Create a configuration compliance baseline on page 86.
● Check compliance of devices or device groups against configuration compliance baseline.
● Manage compliance templates. See Manage compliance baseline templates on page 84.
Use configuration compliance baseline data to set alert policies that alert you if a baseline policy is deviated. The alert is
generated based on a compliance baseline that can be viewed on the dashboard page of OpenManage Enterprise. For more
information about setting the alert policies, see Monitoring device alerts on page 89.
The Overall Compliance Summary report displays the following fields:
● COMPLIANCE: The Rollup compliance level of devices attached to a configuration compliance baseline. The status of the
device with least compliance (say, critical) is indicated as the status of the whole baseline.
● NAME: Name of the configuration compliance baseline.
● TEMPLATE: The name of the compliance template used by the baseline.
● LAST RUN TIME: The most recent date and time when the compliance baseline was run.
To view the configuration compliance report of a baseline, select the corresponding check box, and then click View Report in
the right pane.
Use the query builder feature to generate device level compliance to the selected baseline. See Select a query criteria on page
41.
OpenManage Enterprise provides a built-in report to view the list of monitored devices and their compliance to the configuration
compliance baseline. Select OpenManage Enterprise > Monitor > Reports > Devices per Template Compliance Baseline,
and then click Run. See Run reports on page 124.
Related tasks
Create a configuration compliance baseline on page 86
Edit a configuration compliance baseline on page 87
Remove a configuration compliance baseline on page 88
Manage compliance baseline templates on page 84
Select a query criteria on page 41
Topics:
• Manage compliance baseline templates
• Create a configuration compliance baseline
• Edit a configuration compliance baseline
• Remediate noncompliant devices
11
Managing the device configuration compliance 83