Users Guide

Managing the device configuration compliance

By selecting OpenManage Enterprise > Configuration > Configuration Compliance, you can create configuration baselines by using

the built-in or user-created compliance templates. You can create a configuration compliance template from an existing deploy template,

reference device, or by importing from a file. To use this feature, you must have the Enterprise level license of OpenManage Enterprise

and iDRAC for servers. For Chassis Management Controller, no license is required. User's only with certain privileges are permitted to use

this feature. See Role-based OpenManage Enterprise user privileges. Also see Manage the device compliance baseline by using the

OpenManage Enterprise dashboard.

NOTE: After a configuration baseline is created by using a template, the summary of compliance level of each baseline is

listed in a table. Each device has its own status, the highest severity status is considered as the status of the baseline.

For more information about Rollup Health status, see the

MANAGING THE ROLLUP HEALTH STATUS BY USING IDRAC

ON THE DELL EMC 14TH GENERATION AND LATER POWEREDGE SERVERS

white paper on the support site.

NOTE: You can create configuration baseline of only the lead MX7000 chassis.

On the Compliance page, you can:

• Create configuration compliance baseline. See Create a configuration compliance baseline.

• Check compliance of devices or device groups against configuration compliance baseline.

• Manage compliance templates. See Manage compliance baseline templates.

Use configuration compliance baseline data to set alert policies that alert you if a baseline policy is deviated. The alert is generated based

on a compliance baseline that can be viewed on the dashboard page of OpenManage Enterprise. For more information about setting the

alert policies, see Monitoring device alerts.

The Overall Compliance Summary report displays the following fields:

• COMPLIANCE: The Rollup compliance level of devices attached to a configuration compliance baseline. The status of the device with

least compliance (say, critical) is indicated as the status of the whole baseline.

• NAME: Name of the configuration compliance baseline.

• TEMPLATE: The name of the compliance template used by the baseline.

To view the configuration compliance report of a baseline, select the corresponding check box, and then click View Report in the right

pane.

Use the query builder feature to generate device level compliance to the selected baseline. See Select a query criteria.

OpenManage Enterprise provides a built-in report to view the list of monitored devices and their compliance to the configuration

compliance baseline. Select OpenManage Enterprise > Monitor > Reports > Devices per Template Compliance Baseline, and then

click Run. See Run reports.

Related tasks

Create a configuration compliance baseline

Edit a configuration compliance baseline

Remove a configuration compliance baseline

Manage compliance baseline templates

Select a query criteria

Topics:

• Manage compliance baseline templates

• Create a configuration compliance baseline

• Edit a configuration compliance baseline

• Remediate noncompliant devices

• Remove a configuration compliance baseline

70 Managing the device configuration compliance