Users Guide

Manage the device configuration compliance

baseline

By clicking OpenManage Enterprise > Configuration > Compliance, and selecting Compliance, you can create configuration

baselines by using the built-in or user-created templates. You can create a configuration compliance baseline template from an existing

deploy template, reference device, or by importing from a file. To use this feature, you must have the Enterprise level license of

OpenManage Enterprise and iDRAC for servers. For Chassis Management Controller, no license is required. User's only with certain

privileges are permitted to use this feature. See Role-based OpenManage Enterprise user privileges. Also see Manage the device

compliance baseline by using the OpenManage Enterprise dashboard.

NOTE: After a configuration baseline is created by using a template, the summary of compliance level of each baseline is

listed in a table. Each device has its own status, the highest severity status is considered as the status of the baseline.

For more information about Rollup Health status, see the

MANAGING THE ROLLUP HEALTH STATUS BY USING IDRAC

ON THE DELL EMC 14TH GENERATION AND LATER POWEREDGE SERVERS

white paper on the Dell TechCenter.

NOTE: You can create configuration baseline of only the lead MX7000 chassis.

By using this feature, you can:

• Create configuration compliance baseline. See Create a configuration compliance baseline.

• Check compliance of devices or device groups against configuration compliance baseline.

• Manage compliance templates. See Monitor device compliance with compliance templates.

Use configuration compliance baseline data to set alert policies that alert you if a baseline policy is deviated. The alert is generated based

on a compliance baseline that can be viewed on the dashboard page of OpenManage Enterprise. For more information about setting the

alert policies, see Monitoring device alerts.

The Overall Compliance Summary report displays the following fields:

• COMPLIANCE: The Rollup compliance level of devices attached to a configuration compliance baseline. The status of the device with

least compliance (say, critical) is indicated as the status of the whole baseline.

• NAME: Name of the configuration compliance baseline.

• TEMPLATE: The name of the compliance template used by the baseline.

• LAST RUN TIME: The last time a configuration inventory report is run to check the compliance level of this baseline.

To view the configuration compliance report of a baseline, select the corresponding check box, and then click View Report in the right

pane.

Use the query builder feature to generate device level compliance to the selected baseline. See Select a query criteria.

OpenManage Enterprise provides a built-in report to view the list of monitored devices and their compliance to the configuration

compliance baseline. Click OpenManage Enterprise > Monitor > Reports > Devices per Template Compliance Baseline. Click Run.

See Run reports.

Related tasks

Create a configuration compliance baseline

Edit a configuration compliance baseline

Remove a configuration compliance baseline

Manage compliance baseline templates

Select a query criteria

Topics:

• Create a configuration compliance baseline

• Edit a configuration compliance baseline

• Remediate noncompliant devices

• Remove a configuration compliance baseline

Manage the device configuration compliance baseline 55