IBM Endpoint Manager 9 - Trial SoftwareConsole Usage Guide

October 2013

© Copyright IBM Corp. 2013. All Rights Reserved.

US Government Users Restricted Rights: Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM, the IBM logo, and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at “Copyright and trademark information” at www.ibm.com/legal/copytrade.shtml.

Trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.

IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of Government Commerce.

Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.

ITIL is a registered trademark, and a registered community trademark of the Office of Government Commerce, and is registered in the U.S. Patent and Trademark Office.

UNIX is a registered trademark of The Open Group in the United States and other countries.

Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.

Cell Broadband Engine is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license therefrom.

Linear Tape-Open, LTO, the LTO Logo, Ultrium, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.

The information contained in this publication is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in this publication, it is provided AS IS without warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and strategy, which are subject to change by IBM without notice. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this publication or any other materials. Nothing contained in this publication is intended to,nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software.

References in this publication to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in this presentation may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth, savings or other results.

Printed in Ireland

Table of contents

Overview . . . . . . . . . . . 1-1Exercise 1: Log in to the Console . . . . . . . . . 1-1Exercise 2: Navigating the Console . . . . . . . . . 1-2Exercise 3: Set Console preferences . . . . . . . . . 1-9Exercise 4: Using filters . . . . . . . . . . . 1-10Exercise 5: Understanding dashboards . . . . . . . . 1-11

Page III

Page

IBM Software

IV IBM Endpoint Manager 9 - Trial Software

Ove

IBM Software

Overview

IBM Endpoint Manager offers a unified management platform that automates and streamlines systems and security management for endpoints and servers. Through the use of single-agent, single-console technology for enterprise endpoint management, IBM Endpoint Manager can help you:

• Manage your endpoints regardless of location, connection, type or status from a single management server.

• Leverage the robust Endpoint Manager platform - Execute highly targeted ad-hoc queries and actions in minutes based on nearly any computer property.

• Reduce management complexity and cost while increasing accuracy and boosting productivity.

This document will assist new users with the trial of the IBM Endpoint Manager by demonstrating basic functionality of the IBM Endpoint Manager Console, the primary user interface to the IBM Endpoint Manager product.

This guide is presented in a lab exercise format to simplify instructional steps aiding you with your initial deployment. As this is your custom installation as opposed to a controlled lab environment, there may be some differences between the instructions and what your deployment actually looks like. Use this guide as a general approach to help guide you, as opposed to an absolute instruction set. Here are a few clarifications regarding our referenced lab environment:

• Our IP domain name: training.tivoli.edu

• Our server name: IEMServer

• Our Windows client name: IEMClient1

• Our Linux client name: IEMClient2

Exercise 1: Log in to the Console

___ 1. From the desktop of the system on which the console was installed, start the Console:

Click Start > All Programs > IBM Endpoint Manager > IBM Endpoint Manager Console.

Alternatively, you can double-click the Console shortcut on the server desktop.

___ 2. Log in with the following credentials:

– Server: IP of the server installed to

– User name: EvaluationUser

– Password: <password you created during installation>

rview Page 1

Page

IBM Software

___ 3. Click Login and wait while data loads into the Console cache.

This process can take several minutes to complete in this lab environment. When data loading is complete, the Console is displayed.

Exercise 2: Navigating the Console

In this exercise, you learn how to operate within the IBM Endpoint Manager Console. After completing this exercise, you will understand important terminology and how the various Console views change based on domains and filter options that you select.

___ 1. Begin by reviewing the diagram of the IBM Endpoint Manager Console and familiarizing yourself with the areas labeled.

___ 2. In the Console Domain button area, click the All Content domain button. The navigation tree updates with the All Content view.

___ 3. In the navigation tree, which now shows the All Content domain view, select the Fixlets and Tasks node.

2 IBM Endpoint Manager 9 - Trial Software

Exe

IBM Software

___ 4. The List panel updates and Fixlets and Tasks is displayed. Review the content in the Fixlets and Tasks panel. The information in the List panel is based on the filters that were applied (All Content domain, and Fixlets and Tasks filter).

Note: In the Console tool bar, the Show Non-Relevant Content button acts as another filter. When it is activated (indented), all content available for the selected node is shown, even if it is not relevant for any computer in your environment. You can toggle the function by clicking it to identify the difference in the Fixlet and Tasks count as well as the list displayed in the panel.

___ 5. Complete the following steps to become familiar with the information displayed in the List panel.

___ a. To sort the data by category type, locate the Category column header by scrolling to the right, then select the column header.

___ b. Right-click the Category column header to review the additional items available for display in the column list.

___ c. Select more items to add to the display by placing a check beside them.

Note: Fixlet messages provide information about essential issues and known problems on a computer that requires attention. Each Fixlet message typically consists of a description of the problem, an information link, and a button to fix the problem. Examples of Fixlet messages can include missing or recommended patches, obsolete anti-virus definitions, and vulnerable security configurations that are discovered on client computers. Tasks are seen as issues of lesser importance that do not represent a problem. They normally represent policies or configurations that are common across the enterprise network. Examples of tasks include deploying new software and setting configurations.

rcise 2: Navigating the Console Page 3

Page

IBM Software

___ 6. On the Fixlets and Tasks panel, click an item that is listed. The Task panel for the selected Fixlet or task is displayed in the work area that is shown in the following screen capture.

___ 7. In the work area for the selected Fixlet or task, click each of the following tabbed pages to review the associated data.

– Description: Provides a Fixlet description and links to associated actions items.

– Details: Provides a list of criteria that are used to detect relevance of an issue to a client computer and includes the suggested actions. These criteria are in the form of program expressions called relevance language.

– Applicable Computers: Provides a list of all client computers whose properties are associated with Fixlet criteria.

– Action History: Provides a list of actions associated with the selected Fixlet that were previously taken.

___ 8. In the All Content domain navigation tree, expand the nodes Fixlets and Tasks > All > By Site. Review the various subscribed sites and the associated content available within each

4 IBM Endpoint Manager 9 - Trial Software

Exe

IBM Software

site by clicking the site. Expanding the site exposes more filters. After reviewing the options, reduce the Fixlets and Tasks filter.

Note: Client computers represent those computers in your network that run the IBM Endpoint Manager client. After the client software is installed, you have a high level of control over these systems. You can easily maintain common operating environments, roll out the latest patches, view and summarize properties, and create reports.

___ 9. In the All Content navigation panel on the left side of screen, select the node Computers.

___ 10. The Computers panel is displayed. Select a managed computer from the list view. You should have at least one.

rcise 2: Navigating the Console Page 5

Page

IBM Software

___ 11. .Review the following tabbed pages in the work area for the selected computer:

– Summary: Shows a list of client computer properties, such as relay status, grouping, custom sites, and other properties. These properties are regularly evaluated and sent to the IBM Endpoint Manager server by the client computers.

– Relevant Fixlet Messages: Shows a list of Fixlet messages that are relevant to the selected client computer.

– Relevant Baselines: Shows all baselines that are deployed on the specified computer group.

– Baseline Component Applicability: Displays a collection of Fixlet messages and tasks that are associated with a computer or group.

– Action History: Shows the history of any actions that this Fixlet message started.

– User Management Rights: Shows the list of users whose management rights are assigned to the selected client computer.

– Role Management Rights: Shows the list of roles applicable to the selected client computer.

___ 12. Increase the number of domains that are shown below the hierarchical tree view.

Domain Panel size can be modified by dragging the bar up and down to expose or hide more domains. You can also click the arrows and then choose to show more or fewer domains.

6 IBM Endpoint Manager 9 - Trial Software

Exe

IBM Software

You can configure the Domain Panel to your liking. However, as you require more domains in future labs, the exercises will be clearer if you display all available domains in the fully exposed form.

___ 13. Select the BigFix Management domain. The navigation view is updated, and the BigFix Deployment Overview is displayed.

rcise 2: Navigating the Console Page 7

Page

IBM Software

___ 14. On the BigFix Management domain title bar, click << to maximize the dashboard view. Maximizing expands the work area available for viewing the dashboard.

___ 15. The navigation panel for the BigFix Management domain is reduced to a vertical button and the dashboard is expanded to fill the entire area.

___ 16. Click BigFix Management to restore the domain panel. Click Back to review previously shown items.

___ 17. Click the All Content domain.

___ 18. In the All Content navigation tree, click Fixlets and Tasks.

8 IBM Endpoint Manager 9 - Trial Software

Exe

IBM Software

___ 19. The Fixlets and Tasks panel is displayed. In the Live Search field at the right, enter the text Firewall to locate any Fixlet or task that has the word Firewall in the name. Notice the dynamic filtering of the list content as you type.

Tip: You might need to click Show Non-Relevant Content to display more Fixlets and tasks that are related to firewalls.

___ 20. Clear the Live Search contents by deleting the text. The search filter updates to list all items.

Exercise 3: Set Console preferences

In this exercise, configure your Console preferences within the IBM Endpoint Manager Console by modifying the values of the various settings as described.

___ 1. Select File > Preferences from the menu.

___ 2. The Preferences window is displayed. Modify the values by following these instructions.

___ a. Set the Refresh list every value to 30 seconds.

___ b. Select the option Prompt for confirmation before closing the console.

___ c. Set the Mark as offline after value to 60 minutes.

rcise 3: Set Console preferences Page 9

Page

IBM Software

___ d. Click OK.

Exercise 4: Using filters

In this exercise, create a filter to limit objects that are shown in the IBM Endpoint Manager Console. Follow the instructions to understand the process of creating, modifying, and applying filters to narrow down and select the exact information required.

___ 1. Select the All Content domain.

___ 2. Create a filter for patches with a Moderate severity.

___ a. Press CTRL+F to open the Create Filter window.

___ b. In the Create Filter window, enter Moderate Severity Fixlets <xyz> as Name where <xyz> represents your initials to differentiate your filter.

___ c. From the Include list, select Fixlets (default).

___ d. From the with list, select all (default).

___ e. In the first condition field, select Source Severity.

___ f. From the middle box, select Contains.

___ g. In the last text box, type Moderate (case does not matter).

10 IBM Endpoint Manager 9 - Trial Software

Exe

IBM Software

___ h. Save the new filter by clicking Create.

___ 3. Verify that the All Content navigation views automatically expanded Custom Filters and selected the filter that you created in the last step. Observe the results of the Moderate Severity Fixlets <xyz> filter that you previously created.

Note: You must enable the Show Non-Relevant Content button to view any results that are returned by the filter because your environment is new.

The Custom Filter: Moderate Severity Fixlets <xyz> is displayed. Review the various Fixlets in the panel and observe that all of the values under Source Severity are Moderate.

Exercise 5: Understanding dashboards

In this exercise, you view and use the Patches for Windows Overview dashboard within the IBM Endpoint

rcise 5: Understanding dashboards Page 11

Page

IBM Software

Manager Console.

___ 1. Select the Patch Management domain.

___ 2. From the Patch Management navigation window, expand the nodes All Patch Management > Dashboards and select Patches for Windows Overview.

___ 3. The Patches for Windows Overview dashboard is displayed. Review the various settings and graphs.

___ 4. You can refresh the dashboard by clicking the Refresh icon in the upper right corner of the dashboard. It might be necessary to scroll your window to the right to see the Refresh button.

___ 5. You can print the dashboard by clicking Print in the upper-right corner of the dashboard. It might be necessary to scroll your window to the right to see the Print button.

12 IBM Endpoint Manager 9 - Trial Software