Users Guide

Managing the device configuration compliance

baseline

By clicking OpenManage Enterprise > Configuration > Compliance, and selecting Compliance, you can create configuration

baselines by using the built-in or user-created templates. To create a configuration compliance baseline template, you must clone the

existing built-in templates. To use this feature, you must have the Enterprise level license of OpenManage Enterprise–Tech Release and

iDRAC for servers. For Chassis Management Controller, no license is required. User's only with certain privileges are permitted to use this

feature. See Role-based OpenManage Enterprise–Tech Release user privileges. Also see Managing the device compliance baseline by

using the OpenManage Enterprise–Tech Release dashboard.

NOTE: After a configuration baseline is created by using a template, the summary of compliance level of each baseline is

listed in a table. Each device has its own status, the highest severity status is considered as the status of the group. For

more information about Rollup Health status, see the

MANAGING THE ROLLUP HEALTH STATUS BY USING IDRAC ON

THE DELL EMC 14TH GENERATION AND LATER POWEREDGE SERVERS

white paper on the Dell TechCenter.

By using this feature, you can:

• Create configuration compliance baseline. See Creating a configuration compliance baseline.

• Check compliance of devices or device groups against configuration compliance baseline.

• Manage compliance templates. See Monitoring device compliance with compliance templates.

Use configuration compliance baseline data to set alert policies that alert you if a baseline policy is deviated. The alert is generated based

on a compliance baseline that can be viewed on the dashboard page of OpenManage Enterprise–Tech Release. For more information

about setting the alert policies, see Monitoring device alerts.

The Overall Compliance Summary report displays the following fields:

• COMPLIANCE: The Rollup compliance level of devices attached to a configuration compliance baseline. The status of the device with

least compliance (say, critical) is indicated as the status of the whole baseline.

• NAME: Name of the configuration compliance baseline.

• TEMPLATE

• LAST RUN TIME: The last time a configuration inventory report is run to check the compliance level of this baseline.

To view the configuration compliance report of a baseline, select the corresponding check box, and then click View Report in the right

pane.

Use the query builder feature to generate device level compliance to the selected baseline. See Selecting a query criteria.

OpenManage Enterprise–Tech Release provides a built-in report to view the list of monitored devices and their compliance to the

configuration compliance baseline. Click OpenManage Enterprise > Monitor > Reports > Devices per Template Compliance

Baseline. Click Run. See Running reports.

Related tasks

Creating a configuration compliance baseline

Editing a configuration compliance baseline

Removing a configuration compliance baseline

Managing compliance baseline templates

Selecting a query criteria

Topics:

• Creating a configuration compliance baseline

• Editing a configuration compliance baseline

• Removing a configuration compliance baseline

44 Managing the device configuration compliance baseline