5.6
Table Of Contents
- VMware vCenter Configuration Manager Administration Guide
- Contents
- About This Book
- Getting Started with VCM
- Installing and Getting Started with VCM Tools
- Configuring VMware Cloud Infrastructure
- Virtual Environments Configuration
- Configure Virtual Environments Collections
- Configure Managing Agent Machines
- Obtain the SSL Certificate Thumbprint
- Configure vCenter Server Data Collections
- Configure vCenter Server Virtual Machine Collections
- Configure vCloud Director Collections
- Configure vCloud Director vApp Virtual Machines Collections
- Configure vShield Manager Collections
- Configure ESX Service Console OS Collections
- Configure the vSphere Client VCM Plug-In
- Running Compliance for the VMware Cloud Infrastructure
- Create and Run Virtual Environment Compliance Templates
- Create Virtual Environment Compliance Rule Groups
- Create and Test Virtual Environment Compliance Rules
- Create and Test Virtual Environment Compliance Filters
- Preview Virtual Environment Compliance Rule Groups
- Create Virtual Environment Compliance Templates
- Run Virtual Environment Compliance Templates
- Resolve Noncompliant Virtual Environments Template Results
- Configure Alerts and Schedule Virtual Environment Compliance Runs
- Configuring vCenter Operations Manager Integration
- Auditing Security Changes in Your Environment
- Configuring Windows Machines
- Configure Windows Machines
- Verify Available Domains
- Check the Network Authority
- Assign Network Authority Accounts
- Discover Windows Machines
- License Windows Machines
- Install the VCM Windows Agent on Your Windows Machines
- Collect Windows Data
- Windows Collection Results
- Getting Started with Windows Custom Information
- Prerequisites to Collect Windows Custom Information
- Using PowerShell Scripts for WCI Collections
- Windows Custom Information Change Management
- Collecting Windows Custom Information
- Create Your Own WCI PowerShell Collection Script
- Verify that Your Custom PowerShell Script is Valid
- Install PowerShell
- Collect Windows Custom Information Data
- Run the Script-Based Collection Filter
- View Windows Custom Information Job Status Details
- Windows Custom Information Collection Results
- Run Windows Custom Information Reports
- Troubleshooting Custom PowerShell Scripts
- Configuring Linux and UNIX Machines
- Configuring Mac OS X Machines
- Patching Managed Machines
- VCM Patching for Windows Machines
- VCM Patching for UNIX and Linux Machines
- UNIX and Linux Patch Assessment and Deployment
- Getting Started with VCM Patching
- Getting Started with VCM Patching for Windows Machines
- Check for Updates to Bulletins
- Collect Data from Windows Machines by Using the VCM Patching Filter Sets
- Assess Windows Machines
- Review VCM Patching Windows Assessment Results
- Prerequisites for Patch Deployment
- Default Location for UNIX/Linux Patches
- Location for UNIX/Linux Patches
- Default Location for UNIX/Linux Patches
- vCenter Software Content Repository Tool
- Deploy Patches to Windows Machines
- Getting Started with VCM Patching for UNIX and Linux Machines
- Check for Updates to Bulletins
- Collect Patch Assessment Data from UNIX and Linux Machines
- Explore Assessment Results and Acquire and Store the Patches
- Default Location for UNIX/Linux Patches
- Deploy Patches to UNIX/Linux Machines
- How the Deploy Action Works
- Running VCM Patching Reports
- Customize Your Environment for VCM Patching
- Running and Enforcing Compliance
- Provisioning Physical or Virtual Machine Operating Systems
- Provisioning Software on Managed Machines
- Using Package Studio to Create Software Packages and Publish to Repositories
- Software Repository for Windows
- Package Manager for Windows
- Software Provisioning Component Relationships
- Install the Software Provisioning Components
- Using Package Studio to Create Software Packages and Publish to Repositories
- Using VCM Software Provisioning for Windows
- Related Software Provisioning Actions
- Configuring Active Directory Environments
- Configuring Remote Machines
- Tracking Unmanaged Hardware and Software Asset Data
- Managing Changes with Service Desk Integration
- Index
What to do next
n
If you find results that you want to temporarily make compliant or noncompliant, create an exception.
See "Create Virtual Environment Compliance Exceptions" on page 68.
n
Evaluate the results and resolve any issues on the noncompliant objects.
Resolve Noncompliant Virtual Environments Template Results
The results for the compliance templates indicate whether the rule was compliant or noncompliant, and
whether you can enforce noncompliant results manually or using VCM, or you can add an exception for
expected noncompliant results.
These procedures provide a variety of examples that apply to virtual environments compliance.
Procedure
n
"Enforce Compliance Template Results Using VCM Actions" on page 67
Resolve noncompliant results using VCM actions on the data grids to change settings when the action is
not available for enforceable compliance.
n
"Manually Enforce Compliance Template Results" on page 68
Resolve noncompliant results by directly accessing the physical or virtual machine, or by accessing the
object in vCenter Server, to change the noncompliant configuration setting.
n
"Create Virtual Environment Compliance Exceptions" on page 68
Rather than resolve noncompliant results, exceptions are the method you use to temporarily or
permanently override the specific template results.
Enforce Compliance Template Results Using VCM Actions
Resolve noncompliant results using VCM actions on the data grids to change settings when the action is
not available for enforceable compliance.
For this example, a template includes a rule that requires virtual machines to be powered on. If a virtual
machine is powered off, the object is noncompliant. The compliance remediation action is to power it on.
Procedure
1. Click Compliance.
2. Select Virtual Environments Compliance > Templates > {template name}.
3. In the Status column, identify the rule results that are noncompliant.
4. Identify the affected physical or virtual machines or virtual objects, and determine the expected value
of the property.
For example, click and drag the Status column heading and the Rule column heading to the filter.
Expand the noncompliant results and the rule related to the power state. The noncompliant object
appears in the object column.
5. To resolve the noncompliant results, click Console and select Virtual Environments or the Windows
tab or UNIX tab, and browse to the data grid where the action is available.
For example, click Console and select Virtual Environments > vCenter > Guests > Summary.
Running Compliance for the VMware Cloud Infrastructure
VMware, Inc.
67