5.8
Table Of Contents
- VMware vRealize Configuration ManagerAdministration Guide
- Contents
- About This Book
- Getting Started with VCM
- Installing and Getting Started with VCM Tools
- Configuring VMware Cloud Infrastructure
- Virtual Environments Configuration
- Configure Virtual Environments Collections
- Configure Managing Agent Machines for Virtual Environment Management
- Obtain the SSL Certificate Thumbprint
- Configure vCenter Server Data Collections
- Configure vCenter Server Virtual Machine Collections
- Configure vCloud Director Collections
- Configure vCloud Director vApp Virtual Machines Collections
- Configure vShield Manager Collections
- Configure ESX Service Console OS Collections
- Configure the vSphere Client VCM Plug-In
- Running Compliance for the VMware Cloud Infrastructure
- Create and Run Virtual Environment Compliance Templates
- Create Virtual Environment Compliance Rule Groups
- Create and Test Virtual Environment Compliance Rules
- Create and Test Virtual Environment Compliance Filters
- Preview Virtual Environment Compliance Rule Groups
- Create Virtual Environment Compliance Templates
- Run Virtual Environment Compliance Templates
- Create Virtual Environment Compliance Exceptions
- Resolve Noncompliant Virtual Environments Template Results
- Configure Alerts and Schedule Virtual Environment Compliance Runs
- Configuring vCenter Operations Manager Integration
- Auditing Security Changes in Your Environment
- Configuring Windows Machines
- Configure Windows Machines
- Windows Collection Results
- Getting Started with Windows Custom Information
- Prerequisites to Collect Windows Custom Information
- Using PowerShell Scripts for WCI Collections
- Windows Custom Information Change Management
- Collecting Windows Custom Information
- Create Your Own WCI PowerShell Collection Script
- Verify that Your Custom PowerShell Script is Valid
- Install PowerShell
- Collect Windows Custom Information Data
- Run the Script-Based Collection Filter
- View Windows Custom Information Job Status Details
- Windows Custom Information Collection Results
- Run Windows Custom Information Reports
- Troubleshooting Custom PowerShell Scripts
- Configuring Linux, UNIX, and Mac OS X Machines
- Linux, UNIX, and Mac OS X Machine Management
- Linux, UNIX, or Mac OS X Installation Credentials
- Configure Collections from Linux, UNIX, and Mac OS X Machines
- Configure Installation Delegate Machines to Install Linux, UNIX, and Mac OS X...
- Configure the HTTPS Bypass Setting for Linux Agent Installations
- Enable Linux, UNIX, and Mac OS X Agent Installation
- Add and License Linux, UNIX, and Mac OS X Machines for Agent Installation
- Install the VCM Agent on Linux, UNIX, and Mac OS X Operating Systems
- Collect Linux, UNIX, and Mac OS X Data
- Linux, UNIX, and Mac OS X Collection Results
- Configure Scheduled Linux, UNIX, and Mac OS X Collections
- Using Linux and UNIX Custom Information Types
- File Types that VCM can Parse
- Parsers for Supported File Types
- Identification Expressions
- Parser Directives
- Parser Directives for Linux, UNIX, and Mac OS X
- Creating Custom Information Types for Linux and UNIX
- Custom Information Types for Linux, UNIX, and Mac OS X
- Add, Edit, or Clone Custom Information Types for Linux and UNIX
- UNIX Custom Information Data View in the Console
- Path Panel in the VCM Collection Filter
- Patching Managed Machines
- Patch Assessment and Deployment
- Prerequisite Tasks and Requirements
- Manually Patching Managed Machines
- Getting Started with VCM Manual Patching
- Configuring An Automated Patch Deployment Environment
- Deploying Patches with Automated Patch Assessment and Deployment
- Configure VCM for Automatic Event-Driven Patch Assessment and Deployment
- Generate a Patch Assessment Template
- Run a Patch Assessment on Managed Machines
- Add Exceptions for Patching Managed Machines
- Configure the VCM Administration Settings
- Generate a Patch Deployment Mapping
- Configure VCM for Automatic Scheduled Patch Assessment and Deployment
- How the Linux and UNIX Patch Staging Works
- How the Linux and UNIX Patching Job Chain Works
- How the Deploy Action Works
- Patch Deployment Wizards
- Running Patching Reports
- Running and Enforcing Compliance
- Configuring Active Directory Environments
- Configuring Remote Machines
- Tracking Unmanaged Hardware and Software Asset Data
- Managing Changes with Service Desk Integration
- Index
6. Select the machine group to which you are applying the exception and click Next.
For this example, select All UNIX Machines.
7. Select the override options and the expiration date.
a. Select Override non-compliant results to compliant.
b. Select No Expiration.
c. Click Next.
8. To define the exception values, modify, delete, or add to the properties, operators, and values for the
selected results.
In this example, to specify RHEL_60_TestDev as the exception, remove all the property rows, except
for the row containing the Machine property.
9. Click Finish.
What to do next
n Run the template. See "Run Machine Group Compliance Templates" on page 208.
n Create alerts and schedule regular runs of your compliance templates. See "Configure Alerts and
Schedule Machine Group Compliance Runs" on page 212.
Configure Alerts and Schedule Machine Group Compliance Runs
To optimize how VCM monitors the compliance of physical and virtual machines in your environment,
configure alerts and schedule regular compliance template runs on your collected machine group data.
Prerequisites
Create at least one virtual environments compliance template. See "Create and Run Machine Group
Compliance Templates" on page 202.
Procedure
1. "Create Machine Group Compliance Alert Rules" on page 212
Alert rules are the conditions you define that determine when an alert is generated. Machine group
alert rules are based on machine group compliance templates.
2. "Create Machine Group Compliance Alert Configurations" on page 213
Machine group compliance alert configurations are created for machine groups to generate alerts
when a machine group compliance template returns noncompliant results during scheduled runs of
the template.
3. "Schedule Machine Group Compliance Template Runs" on page 214
You can schedule a regular run of your machine group compliance templates to ensure that the
collected data is regularly assessed for adherence to the defined compliance rules.
Create Machine Group Compliance Alert Rules
Alert rules are the conditions you define that determine when an alert is generated. Machine group alert
rules are based on machine group compliance templates.
Prerequisites
Verify that you have machine group compliance templates. See "Create and Run Machine Group
Compliance Templates" on page 202.
vRealize Configuration Manager Administration Guide
212
VMware, Inc.