5.8
Table Of Contents
- VMware vRealize Configuration ManagerAdministration Guide
- Contents
- About This Book
- Getting Started with VCM
- Installing and Getting Started with VCM Tools
- Configuring VMware Cloud Infrastructure
- Virtual Environments Configuration
- Configure Virtual Environments Collections
- Configure Managing Agent Machines for Virtual Environment Management
- Obtain the SSL Certificate Thumbprint
- Configure vCenter Server Data Collections
- Configure vCenter Server Virtual Machine Collections
- Configure vCloud Director Collections
- Configure vCloud Director vApp Virtual Machines Collections
- Configure vShield Manager Collections
- Configure ESX Service Console OS Collections
- Configure the vSphere Client VCM Plug-In
- Running Compliance for the VMware Cloud Infrastructure
- Create and Run Virtual Environment Compliance Templates
- Create Virtual Environment Compliance Rule Groups
- Create and Test Virtual Environment Compliance Rules
- Create and Test Virtual Environment Compliance Filters
- Preview Virtual Environment Compliance Rule Groups
- Create Virtual Environment Compliance Templates
- Run Virtual Environment Compliance Templates
- Create Virtual Environment Compliance Exceptions
- Resolve Noncompliant Virtual Environments Template Results
- Configure Alerts and Schedule Virtual Environment Compliance Runs
- Configuring vCenter Operations Manager Integration
- Auditing Security Changes in Your Environment
- Configuring Windows Machines
- Configure Windows Machines
- Windows Collection Results
- Getting Started with Windows Custom Information
- Prerequisites to Collect Windows Custom Information
- Using PowerShell Scripts for WCI Collections
- Windows Custom Information Change Management
- Collecting Windows Custom Information
- Create Your Own WCI PowerShell Collection Script
- Verify that Your Custom PowerShell Script is Valid
- Install PowerShell
- Collect Windows Custom Information Data
- Run the Script-Based Collection Filter
- View Windows Custom Information Job Status Details
- Windows Custom Information Collection Results
- Run Windows Custom Information Reports
- Troubleshooting Custom PowerShell Scripts
- Configuring Linux, UNIX, and Mac OS X Machines
- Linux, UNIX, and Mac OS X Machine Management
- Linux, UNIX, or Mac OS X Installation Credentials
- Configure Collections from Linux, UNIX, and Mac OS X Machines
- Configure Installation Delegate Machines to Install Linux, UNIX, and Mac OS X...
- Configure the HTTPS Bypass Setting for Linux Agent Installations
- Enable Linux, UNIX, and Mac OS X Agent Installation
- Add and License Linux, UNIX, and Mac OS X Machines for Agent Installation
- Install the VCM Agent on Linux, UNIX, and Mac OS X Operating Systems
- Collect Linux, UNIX, and Mac OS X Data
- Linux, UNIX, and Mac OS X Collection Results
- Configure Scheduled Linux, UNIX, and Mac OS X Collections
- Using Linux and UNIX Custom Information Types
- File Types that VCM can Parse
- Parsers for Supported File Types
- Identification Expressions
- Parser Directives
- Parser Directives for Linux, UNIX, and Mac OS X
- Creating Custom Information Types for Linux and UNIX
- Custom Information Types for Linux, UNIX, and Mac OS X
- Add, Edit, or Clone Custom Information Types for Linux and UNIX
- UNIX Custom Information Data View in the Console
- Path Panel in the VCM Collection Filter
- Patching Managed Machines
- Patch Assessment and Deployment
- Prerequisite Tasks and Requirements
- Manually Patching Managed Machines
- Getting Started with VCM Manual Patching
- Configuring An Automated Patch Deployment Environment
- Deploying Patches with Automated Patch Assessment and Deployment
- Configure VCM for Automatic Event-Driven Patch Assessment and Deployment
- Generate a Patch Assessment Template
- Run a Patch Assessment on Managed Machines
- Add Exceptions for Patching Managed Machines
- Configure the VCM Administration Settings
- Generate a Patch Deployment Mapping
- Configure VCM for Automatic Scheduled Patch Assessment and Deployment
- How the Linux and UNIX Patch Staging Works
- How the Linux and UNIX Patching Job Chain Works
- How the Deploy Action Works
- Patch Deployment Wizards
- Running Patching Reports
- Running and Enforcing Compliance
- Configuring Active Directory Environments
- Configuring Remote Machines
- Tracking Unmanaged Hardware and Software Asset Data
- Managing Changes with Service Desk Integration
- Index
8. To define the exception values, modify, delete, or add to the properties, operators, and values for the
selected results.
In this example, you are specifying the RHEL_60_ProdDev as the exception.
a. Click Add.
b. In the properties drop-down menu, select Object.
c. Select = as the rule operator.
d. Click the ellipsis button and select RHEL_60_ProdDev in the property values dialog box and click
OK.
9. Click Finish.
What to do next
n Run the template. See "Run Virtual Environment Compliance Templates" on page 66.
n Create alerts and schedule regular runs of your compliance templates. See "Configure Alerts and
Schedule Virtual Environment Compliance Runs" on page 71
Resolve Noncompliant Virtual Environments Template Results
The results for the compliance templates indicate whether the virtual or physical machine are compliant or
noncompliant. If the machine is noncompliant, you can enforce noncompliant results manually or using
VCM, or you can add an exception for expected noncompliant results.
These procedures provide a variety of examples that apply to virtual environments compliance.
Procedure
1. "Enforce Compliance Template Results Using Enforceable Compliance" on page 209
You can use enforceable compliance to resolve noncompliant results. Enforceable compliance is a VCM
action that changes settings on physical machines, virtual machines, or virtual objects during or after a
compliance template is run on the machine or object.
2. "Enforce Compliance Template Results by Using VCM Actions" on page 210
You can resolve noncompliant results using VCM actions on the data grids to change settings when
the action is not available for enforceable compliance.
3. "Manually Enforce Compliance Template " on page 211
You can resolve noncompliant results by directly accessing the virtual or physical machine, or by
accessing the object in vCenter Server, to change the noncompliant configuration setting.
4. "Create Virtual Environment Compliance Exceptions" on page 70
To temporarily or permanently override the specific template results, use exceptions rather than
explicitly resolve noncompliant results.
Enforce Compliance Template Results Using Enforceable Compliance
You can use enforceable compliance to resolve noncompliant results. Enforceable compliance is a VCM
action that changes settings on physical machines, virtual machines, or virtual objects during or after a
compliance template is run on the machine or object.
The enforceable compliance action is available for some, but not all, settings. You configure the action in
the rule to allow automatic enforcement during the compliance run or to initiate enforcement after
compliance.
vRealize Configuration Manager Administration Guide
68
VMware, Inc.