Users Guide

Managing the device configuration compliance

By selecting OpenManage Enterprise > Configuration > Configuration Compliance, you can create configuration baselines by using

the built-in or user-created compliance templates. You can create a configuration compliance template from an existing deploy template,

reference device, or by importing from a file. To use this feature, you must have the Enterprise level license of OpenManage Enterprise

and iDRAC for servers. For Chassis Management Controller, no license is required. User's only with certain privileges are permitted to use

this feature. See Role-based OpenManage Enterprise user privileges on page 14.

NOTE: After a configuration baseline is created by using a template, the summary of compliance level of each baseline is

listed in a table. Each device has its own status, the highest severity status is considered as the status of the baseline.

For more information about Rollup Health status, see the

MANAGING THE ROLLUP HEALTH STATUS BY USING IDRAC

ON THE DELL EMC 14TH GENERATION AND LATER POWEREDGE SERVERS

white paper on the support site.

NOTE: You can create configuration baseline of only the lead MX7000 chassis.

On the Configuration Compliance page, you can:

• Create configuration compliance baseline. See Create a configuration compliance baseline on page 84.

• Check compliance of devices or device groups against configuration compliance baseline.

• Manage compliance templates. See Manage compliance baseline templates on page 82.

Use configuration compliance baseline data to set alert policies that alert you if a baseline policy is deviated. The alert is generated based

on a compliance baseline that can be viewed on the dashboard page of OpenManage Enterprise. For more information about setting the

alert policies, see Monitoring device alerts on page 87.

The Overall Compliance Summary report displays the following fields:

• COMPLIANCE: The Rollup compliance level of devices attached to a configuration compliance baseline. The status of the device with

least compliance (say, critical) is indicated as the status of the whole baseline.

• NAME: Name of the configuration compliance baseline.

• TEMPLATE: The name of the compliance template used by the baseline.

• LAST RUN TIME: The most recent date and time when the compliance baseline was run.

To view the configuration compliance report of a baseline, select the corresponding check box, and then click View Report in the right

pane.

Use the query builder feature to generate device level compliance to the selected baseline. See Select a query criteria on page 41.

OpenManage Enterprise provides a built-in report to view the list of monitored devices and their compliance to the configuration

compliance baseline. Select OpenManage Enterprise > Monitor > Reports > Devices per Template Compliance Baseline, and then

click Run. See Run reports on page 121.

Related tasks

Create a configuration compliance baseline on page 84

Edit a configuration compliance baseline on page 85

Remove a configuration compliance baseline on page 85

Manage compliance baseline templates on page 82

Select a query criteria on page 41

Topics:

• Manage compliance baseline templates

• Create a configuration compliance baseline

• Edit a configuration compliance baseline

• Remediate noncompliant devices

• Remove a configuration compliance baseline

Managing the device configuration compliance 81