VMware VCENTER CONFIGURATION MANAGER 5.3 - VCENTER DISCOVERED MACHINES IMPORT TOOL GUIDE Installationsanleitung

VMware vCenter Configuration ManagerAdministration GuidevCenter Configuration Manager 5.5This document supports the version of each product listed and

Technical Support and Education ResourcesThe following technical support resources are available to you. To access the current version of this bookand

Errors appear in red in the PowerShell window.5. If errors occur, resolve them.A valid script returns a set of XML content without any formatting, whi

When you use the script-based filter in a collection, the VCM Agent calls a script engine to run the script,parse the results to return the collected

Procedure1. On your VCM Collector, click Collect.2. On the Collection Type page, select Machine Data and click OK.3. On the Machines page, select the

Procedure1. On your VCM Collector, click Administration.2. Select Job Manager > History > InstantCollections > Past 24 Hours.3. In the Insta

Procedure1. On your VCM Collector, click Console.2. Select Windows > Operating System > Custom Information.3. Select a view of the collected WCI

PrerequisitesnVerify that your script runs in PowerShell. See "Verify that Your Custom PowerShell Script is Valid" onpage 99.nUnderstand the

vCenter Configuration Manager Administration Guide106VMware, Inc.

Configuring Linux and UNIX Machines8Configuring Linux and UNIX MachinesTo collect UNIX/Linux data and to manage your physical or virtual UNIX/Linux ma

Add UNIX/Linux MachinesAdd UNIX/Linux machines to the Available Machines list to make the machines available for licensing.If you add a large number o

What to do nextLicense the machine. See "License UNIX/Linux Machines" on page 109.License UNIX/Linux MachinesLicense UNIX/Linux machines bef

Getting Started with VCM1Getting Started with VCMWhen you use VCM, you must understand user access and how to start VCM from any physical or virtualma

PrerequisitesnVerify that the machine on which you intend to install the Agent has enough free disk space. For moreinformation, see the VCM Installati

To force an overwrite of any existing files, include the -o option. For example:/CMAgent.<version>.SunOS -o.The command and output is similar to

a. Run the chmod u+x csi.config command to add write file permissions if the file has only readpermissions set.b. Modify the csi.config file options b

drwxr-x--- 3 root cfgsoft 4096 Jul 2 17:34 Agentdrwxr-x--- 3 root cfgsoft 4096 Jul 2 17:34 CFC-rw-rw---- 1 root cfgsoft 49993 Jul 2 17:34 CSIRegistry-

Installation Options with DefaultValuesDescriptionWhen you install in trusted mode on HP-UX v1.0 (11.11), the usermust existon the target machine. If

Installation Options with DefaultValuesDescriptionCSI_CERTIFICATE_PATH=Specifies the path to Collector Certificates. The certificates specifiedat this

Collect UNIX/Linux DataWhen the UNIX/Linux machines are licensed and the Agent is installed, you collect data from thosemachines.Collecting data from

Option DescriptionConsole Displays dashboards and summary reports based on collected data. You use the Consoleto view data relevant to day-to-day oper

Discover Oracle InstancesTo discover Oracle instances, you run a collection on supported UNIX/Linux machines where Oracle isinstalled. The Oracle inst

PrerequisitesnAdd, license, and install the Agent on Solaris machines hosting Oracle instances. See "Configuring Linuxand UNIX Machines" on

nRemote command executionnChange actions against target managed machinesnChange rollbacknCompliance enforcementnPatch deploymentnSoftware deploymentnO

What to do nextnIf your target Oracle instance is Oracle 10g, you must set user permissions. See "Grant Permissions forthe Oracle Collection User

a. Type the configuration values.Option DescriptionOracle SID (Add only) Name or system ID of the Oracle instance, used to identify a particular datab

Procedure1. Click Administration.2. Select Machines Manager > Additional Components > VCM for Oracle.3. Click Config User.4. On the Select Machi

chmod o+r $ORACLE_HOME/ldap/mesg/*chmod o+rx $ORACLE_HOME/networkchmod o+rx $ORACLE_HOME/network/adminchmod o+rx $ORACLE_HOME/sqlpluschmod o+rx $ORACL

Oracle Collection ResultsYou use the collected Oracle data to manage your Oracle instances. The data is available for severalmanagement actions.The di

Configuring Mac OS X Machines9Configuring Mac OS X MachinesTo collect Mac OS X data and to manage your physical or virtual Mac OS X machines, you must

Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Click Add Machines.4. On the Add Machines page, select Basic an

Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Select the machines and click License.4. On the Machines page,

Procedure1. Copy the appropriate Agent binary installation package from the Collector to the machine on whichyou will install the Agent.The Agent pack

Option ActionSilent mode Run the # ./CSIInstall/InstallCMAgent -scommand.Install the Agent using the silent mode if youmanually edited the csi.config

Procedure1. To connect to VCM from a physical or virtual machine on your network, open Internet Explorer andtype http://<name-or-IP-address-of-Coll

drwxrwx--- 3 root cfgsoft 4096 Jul 2 17:34 ECMudrwxr-x--- 6 root cfgsoft 4096 Jul 2 17:34 installlrwxrwxrwx 1 root root 20 Jul 2 17:34 log -> /var/

Installation Options with DefaultValuesDescriptionGROUP=Y primary group for the CSI_USER.CSI_USER_PRIMARY_GID=501Keep the default value. Create user’s

Installation Options with DefaultValuesDescriptionCSI_PARENT_LOG_DIRECTORY=defaultSpecifies where agent operational log files are kept. The logdirecto

2. On the Collection Type page, select Machine Data and click OK.3. On the Machines page, select the machines from which you are collecting data and c

Option DescriptionConsole Displays dashboards and summary reports based on collected data. You use the Consoleto view data relevant to day-to-day oper

Patching Managed Machines10Patching Managed MachinesVCM Patching is the VCM patch assessment, deployment, and verification capability, which ensuresco

VCM Patching for UNIX and Linux MachinesVCM Patching for UNIX and Linux machines helps you deploy patches to bring UNIX and Linuxmachines into complia

Figure 10–1. UNIXand Linux Patch Assessment and Deployment ProcessTo verify that VCM supports your UNIX and Linux machines for patch deployment, see

The .pls files use new names. Red Hat file names include Red Hat instead of RH, and SUSE file namesinclude Novell SUSE instead of Novell Linux.Patch A

Procedure1. "Check for Updates to Bulletins" on page 139Use VCM Patching to check the Web for updates to patch bulletins, which you can use

nLog Out: Exits the Web Console. The Web Console closes and the VCM Logon screen appears.nAbout: Displays information about how to contact VMware Tech

Procedure1. On the toolbar, click Collect.2. Select the Windows machines from which to collect data.3. Select Select a Collection Filter Set to apply

10. On the VCM toolbar, verify that the correct Machine Group is selected.11. Click Patching and select Windows > Assessment Templates.12. Select t

VCM Patching ActionsThe following actions are available.nAgent Install: VCM Patching installs the Agent component to a machine the first time a patch

Machine Group MappingWhen you define an alternate patch location for a particular machine group, you must select that machinegroup in VCM before you d

Machine Group mappings are not inherited. For example, if under the machine group called UNIXMachines, you create a machine group called Solaris, the

Procedure1. Click Patching.2. Select Windows > Assessment Templates and select the template used for the assessment.3. Make sure the data grid view

Getting Started with VCM Patching for UNIX and Linux MachinesUse VCM Patching for UNIX/Linux to determine the patch status of UNIX and Linux machines

Collect Patch Assessment Data from UNIX and Linux MachinesCollect UNIX and Linux patch assessment data using bulletins, an assessment template, or the

7. On the toolbar, click Jobs and view the progress of the collection.The assessment on UNIX and Linux machines uses the Patch Assessment collection f

Icon Status DescriptionPatch-MachineMismatchThe patch OS version or hardware architecture does not match the machine.Patch NotNeededThe machine is up-

SlidersThe sliders on the left side of the Web Console include the items listed and described in the following table.The individual items that you see

Machine Group MappingWhen you define an alternate patch location for a particular machine group, you must select that machinegroup in VCM before you d

7. (Optional) If you need to specify commands to deploy the patches, on the Command Line Optionspage specify the options to use.8. (Optional) If you n

nManually update VCM Patching Windows content.nRun reports without Internet access.Customize Your Environment for VCMPatchingPerform routine maintena

Running and Enforcing Compliance11Running and Enforcing ComplianceUsing the Compliance module, you define a standard configuration for all machines or

vulnerabilitiesTo calculate CVSS scores that apply to your unique environment, go to the CVSS scoring Web site, fillin the form, and click the Update

Run an SCAP AssessmentRun an SCAP assessment that compares your managed machine configuration against a profile in astandard SCAP benchmark.Prerequisi

Upon successful export, VCM creates a file with a name based on the machine name, output format, andtime stamp in the following folder on the Collecto

Provisioning Physical or Virtual MachineOperating Systems12Provisioning Physical or Virtual MachineOperating SystemsOperating system (OS) provisioning

Figure 12–1. Relationship of OS Provisioning ComponentsPatching the Operating System Provisioning ServerExclude the OS Provisioning Server instances f

The discovered target machines appear in the Provisionable Machines data grid by MAC address.5. Use VCM to send the command that includes the provisio

Slider Actionobjects.nView Active Directory Schema information.ReportsnRun out-of-the-box reports against your collected data.nWrite your own SQL and

The OS Provisioning Server identifies provisionable physical or virtual machines in your environmentwhen the target machines are set to network boot a

Procedure1. Click Administration.2. Select Certificates.3. Select the OS Provisioning Server machines and click Change Trust Status.4. Add any additio

Procedure1. On target machines, configure the BIOS to network boot.2. Start the machines on your provisioning network.3. In VCM, click Administration.

nIdentify or create any postinstallation scripts that you want to run on the target machine after it isprovisioned with the new operating system. The

7. On the Select OS Distribution page, select the Windows operating system that you are installing on theselected machines and click Next.8. On the Se

Option DescriptionLicense these machines forVCMLicense the machines for VCM management.9. On the Machine-Specific Settings page, type the HostName and

You can install one OS distribution on one or more target machines. To install a different OS distribution,configure a new OS provisioning action.Prer

7. On the Select OS Distribution page, select the a Linux operating system that you are installing on theselected machines and click Next.8. On the Se

Option DescriptionnDuplicate mount points are not allowed.nFor a swap partition, the mount point and the file system type should beswap.nWhen naming m

Option DescriptionFile System Select the type of file system.For a swap partition, the mount point and the file system type should be swap.Supported F

nRoles and Rules: VCM roles and access rules work together to control user access to VCM. Forexample, you can create a role that allows a user to view

Option DescriptionGrow partition touse all remainingspaceSelect the option to allow the logical volume to fill available space up to themaximum size s

Procedure1. On the Linux machine, log in as root.2. Run the ntpdate -u <ntpserver> command to update the machine clock.For example, ntpdate -u n

Option DescriptionMachines > Licensed Windows Machines. The OS ProvisioningStatus column indicates whether the Windows machine wascreate using OS p

The OS Provisioning Server starts jobs for each of the selected machines. Each job creates a configuredsession for the specified machines. The configu

vCenter Configuration Manager Administration Guide174VMware, Inc.

Provisioning Software on ManagedMachines13Provisioning Software on Managed MachinesSoftware provisioning is the process you use to create software pac

Software Provisioning Component RelationshipsThe following diagram displays the general relationship between Package Studio, repositories, andPackage

nSoftware Repository for Windows: Installed on at least one Windows machine in your environment,and installed on the same machine with Package Studio.

Procedure1. Double-click Repository.msi.2. On the Welcome page, click Next.3. Review the license agreement, select the appropriate options to continue

Procedure1. Double-click PackageStudio.msi.2. On the Welcome page, click Next.3. Review the license agreement, select the appropriate options to conti

vCenter Configuration Manager Administration Guide18VMware, Inc.

The Package Studio is installed to the location specified during installation. The default location isC:\Program Files\VMware\VCM\Tools\Package Studio

PrerequisitesnVerify that the target machine meets the supported hardware, operating system, and softwarerequirements. See VCM Installation Guide for

a. Click Properties and type a Name, Version, Description, and select the Architecture. These fieldsare required. You have the option to update the ot

Procedure1. On a Windows 2008 machines, select Start > All Programs > VMware vCenter ConfigurationManager > Tools.2. Right-click Package Stud

PrerequisitesnPackage Manager is installed on the target machines. Package Manager is installed when you install theVCM 5.3 Agent or later. See "

6. On the Confirmation page, review the information, resolve any conflicts, and click Finish.You can monitor the process in the Jobs Manager. See &quo

d. Select the URI and click OK.e. Verify that the Platform name and the Section name are exactly the names used in the repository.6. On the Schedule p

5. On the Select Package page, select the package to install.6. Select one of the following version options.Option DescriptionInstall Version Installs

Related Software Provisioning ActionsYou can use the following management options in VCM when working with software provisioning.Option DescriptionCon

Create Compliance Rules Based on Software Provisioning DataA Compliance rule based on software provisioning data detects any packages or sources that

Installing and Getting Started with VCMTools2Installing and Getting Started with VCMToolsVCM Installation Manager installs several VCM components and

What to do nextAdd the rule to your template. When the Compliance Template is run, it checks the target machines todetermine if the repository source

f. Configure the version options to use the selected version, specify a different version, or install thelatest version.g. Specify the Security Option

vCenter Configuration Manager Administration Guide192VMware, Inc.

Configuring Active Directory Environments14Configuring Active Directory EnvironmentsVCM for Active Directory collects Active Directory objects across

5. "License Domain Controllers" on page 196To manage domain controllers, you must license them in VCM.6. "Install the VCM Windows Agent

Procedure1. Click Administration.2. Select Settings > Network Authority > Available Accounts.3. To add a new domain account, click Add.4. Type t

NOTE You can use the Discovered Machines Import Tool (DMIT), which imports machines discovered bythe Network Mapper (Nmap), to import many physical an

Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Select the domain controllers to license.4. Click License.5. Ve

Procedure1. Click Administration.2. Select Machines Manager > Licensed Machines > Licensed Windows Machines.3. In the data grid, select one or m

Procedure1. On the VCM toolbar, click Collect.2. On the Collection Type page, select Machine Data and click OK.3. On the Machines page, select the dom

CopyrightYou can find the most up-to-date technical documentation on the VMware Web site at:http://www.vmware.com/support/The VMware Web site also pro

Procedure1. On the non-Collector Windows machine on which you want to install the tools, insert the installationCD.2. In Installation Manager, click R

PrerequisitesnDiscover, license, and install the VCM Windows Agent on your domain controllers. See "ConfigureDomain Controllers" on page 193

Run the Domain Controller Setup ActionVCM for Active Directory collects your Active Directory schema and structure as part of the domaincontroller set

PrerequisitesnInstall VCM for Active Directory. See "Configure VCM for Active Directory as an Additional Product"on page 199.nVerify that jo

Option DescriptionFrom the data grid view, you can enable or disable the summary to viewthe details immediately.Reports Provides Active Directory info

vCenter Configuration Manager Administration Guide204VMware, Inc.

Configuring Remote Machines15Configuring Remote MachinesThe VCM Remote client is the communication and management mechanism that you use to managemobi

Using Certificates With VCM RemoteThe use of certificates with VCMRemote ensures secure communication between VCM and the VCMRemote client when they

Procedure1. "Create Custom Collection Filter Sets" on page 207You create custom collection filter sets for Dial-up, Broadband, or LAN connec

What to do nextnRepeat the procedure for all the connection types for which you configure filter sets.nAssign the filter sets to the appropriate VCM R

Procedure1. Click Administration.2. Select Settings > General Settings > VCM Remote.3. On the VCM Remote Settings data grid, select each setting

Run the Import/Export ToolUse the Import/Export Tool to back up your VCM database business objects and import them into a newVCM database or into a re

n"Install the VCM Remote Client Manually" on page 210The manual installation of the VCM Remote client is a wizard-based process that you use

5. On the VCM Remote Client Information page, configure the options and click Next.Option DescriptionCollectorMachineNameName of the Windows machine o

Procedure1. On the target machine, create a folder and copy the files from the Collector to the target folder.File DescriptionCM Remote Client.msiLoca

Option Descriptionthe msiexec.exe was run.What to do nextConnect the remote machine to the network to ensure that VCM completes the installation proce

Sub DoWork()Set WshShell = CreateObject("WScript.Shell")sCollName = "YourCollectorName" 'Name of your VCM Collector machine i

End IfEcmScriptRuntime.CmdExecute Chr(34) & AppToRun & Chr(34), 10000End SubSub CheckVars()If sCollName = "" ThenWScript.QuitElsesCo

sAddRemove = Trim(sAddRemove)End Subc. Select the Certain file(s) are required to be on the target machine for this remote commandcheck box.d. Click N

VCM Remote Collection ResultsThe VCM Remote client-specific data is limited to administrative details. All other data collected from theremote machine

vCenter Configuration Manager Administration Guide218VMware, Inc.

Tracking Unmanaged Hardware and Soft-ware Asset Data16Tracking Unmanaged Hardware andSoftware Asset DataVCM management extensions for assets integrate

Procedure1. On the Collector, navigate to C:\Program Files (x86)\VMware\VCM\Tools.2. Copy the DeployUtility-<version>.zip file from the Collecto

Review Available Asset Data FieldsVCM for assets is populated with a short list of data fields to get you started. Examples include hardwaredata such

a. Select the way to populate the data.Manually: type free-form textLookup: select from a fixed or query-based list of valuesDynamically: query from o

You cannot change the data properties.8. Click Next.9. Select the roles that are allowed to edit the data.Only users assigned to these roles can edit

Procedure1. Click Administration.2. Select Settings > Asset Extensions Settings.3. Select one of the following nodes.Hardware Configuration Items &

Procedure1. Click Console.2. Select Asset Extensions > Hardware Configuration Items > VCM Devices.3. In the data grid, select the VCM machine.4.

PrerequisitesnHave an administrator configure the asset data fields that you need. See "Configure Asset Data Fields"on page 219.nLog in to V

Procedure1. Click Console.2. Select Asset Extensions > Hardware Configuration Items > Other Devices.3. In the data grid, select the asset.4. Cli

Configure Asset Data for SoftwareA user with a role that has permission to edit asset data can use VCM for assets to gather informationabout the softw

nSoftware Inventory (Windows): Select a product from the software inventory (SI) list.nRegistry (Windows): Type or select a Windows Registry path, key

Edit Asset Data for SoftwareUse VCM for assets to change your software asset records as your enterprise changes.PrerequisitesLog in to VCM with a role

Configuring VMware Cloud Infrastructure3Configuring VMware Cloud InfrastructureVCM collects information from your instances of vCenter Server, vCloud

Procedure1. Click Console.2. Select Asset Extensions > Software Configuration Items.3. In the data grid, select the software asset.4. Click Edit Va

Managing Changes with Service Desk Inte-gration17Managing Changes with Service DeskIntegrationVCM Service Desk Integration tracks planned and unplanne

Procedure1. Click Console.2. Select Service Desk.3. Under the Service Desk node, select any subnode.For example, click By RFC to view the data accordi

Index%%Systemroot% environment variable 79, 81AAbout Patching 135about this book 9access by user 11accessingcompliance content 21active directory(AD)

collectdomain controllers 198ESX logs 48, 53ESX service console operating system 48hosts, virtual machine 50package managers 183repositories 184vCente

discoveryprovisioning, operating system 161domain controllersadd network authority 194assign network authority 195available domains 194collect 198coll

software provisioning 176VCM for active directory 199integrationservice desk 231invalid certificate in vSphere Clienttroubleshooting 57Jjob manager 19

PowerShellexample script 92executing for WCI 92installation 100references 92script signing policies 91scripts, troubleshooting 104signing scripts for

script signingpolicies 91references 92scriptsPowerShell 88service desk integration 231adding 231console 231job manager 232set server trust statusprovi

VCM Summary and VCM Actiontroubleshooting 57VCM summary tabtroubleshooting 57verify PowerShell script 99virtual environmentsmanaging agent 29virtual e

Figure 3–1. Virtual Environments Configuration DiagramManaging AgentsThe Managing Agent machines must have the 5.5 Agent or later installed. They must

240VMware, Inc.vCenter Configuration Manager Administration Guide

CAUTION Do not use the Windows machines on which your vCenter Server instances are runningas Managing Agent machines.Managing vCenter Server Instances

Collect vCloud Director data so that you can identify and manage the guest operating systems of thevApp virtual machines.7. "Configure vShield Ma

Collect Machines Data From the Managing Agent MachinesCollect data from your Managing Agent machines to ensure that VCM identifies the Windows machine

Procedure1. Click Administration.2. Select Certificates.3. Select the Managing Agent machines and click Change Trust Status.4. Add any additional mach

Procedure1. Click Administration.2. Select Administration > Machines Manager > Licensed Machines > Licensed Windows Machiens.3. Select the Ma

ContentsAbout This Book 9Getting Started with VCM 11Understanding User Access 11Running VCM as Administrator on the Collector 12Log In to VCM 12Gettin

Configure vCenter Server Data CollectionsCollect data from your vCenter Server so that you can identify and manage your virtual environments,including

Option DescriptionDomain Domain to which the vCenter Server belongs.Type Domain type.Machine Type Select vCenter (Windows).6. Click Add.The machine in

Option DescriptionYou can use the Collector as your managingagent.Port Type the port used by the VMware InfrastructureSDK on the vCenter Server instan

What to do nextReview the collected virtualization data. Click Console and select Virtual Environments > vCenter.vCenter Server Collection ResultsT

nCollect vCenter Guests data from you vCenter Servers and manage the virtual Windows, Linux, orUNIX machines. See "Collect vCenter Server Virtual

5. On the Edit VMGuest Machine Info page, review the list and update or remove virtual machines, andclick Next.6. On the License VMGuests page, conf

PrerequisitesKnow the names and domain information for the instances of vCloud Director in your environment.Procedure1. Click Administration.2. Select

Procedure1. Click Administration.2. Select Machines Manager > Licensed Machines > Licensed Virtual Environments.3. Select the vCloud Director in

PrerequisitesConfigure the vCloud Director settings. See "Configure the vCloud Director Settings" on page 36.Procedure1. Click Administratio

Option DescriptionAdministration Displays managed vCloud Director instances from which you arecollecting data. Click Administration and select Machine

vCenter Configuration Manager Administration GuideConfigure vShield Manager Collections 45Configure ESX Service Console OS Collections 48Configure the

nVCM is located in the vApp with the virtual machines that it is managing.nThe vApp has a direct connection to the org network.nThe vApp has a direct

In a NATmapped network environment, your best practice is to install the Agent on the vApp templatemachines. You must manually install the Agent with

Option DescriptionnOrg:vDC:vApp:VCName: Name of the vCloud Director organization with thevirtual datacenter name, the name of the vApp that contains t

Option DescriptionUse aproxyserverSelect Yes if you use a proxy server for communication between the Collector andthe Agents on the virtual Windows ma

Option DescriptionDiscovers all virtual machines in the virtual datacenter.vAppNameFilterTo run the query against a vApp, type the name of the vApp.SQ

Configure vShield Manager CollectionsConfigure collections from your vShield Manager instances so that you can run reports on the collecteddata.Prereq

Option DescriptionMachine Name of the instance of vShield Manager.Domain Domain to which the instance of vShield Manager belongs.Type Domain type.Mach

Option DescriptionPort Type the port used by the API on the vShieldManager instances.The default value is 443.User ID Type a vShield Manager instance

What to do nextReview the collected virtualization data. Click Console and select Virtual Environments > vCloudDirector.Discover the vApp virtual m

4. "Collect ESX Logs Data" on page 53An initial collection of Virtual Environments data identifies your virtual machine hosts and their gues

ContentsWindows Custom Information Collection Results 103Run Windows Custom Information Reports 104Troubleshooting Custom PowerShell Scripts 104Config

d. Click Select Data Types to collect from these machines and click Next.e. On the Data Types page, expand the Windows tree and select Machines.f. Sel

5. Configure the settings on the Agent Proxy and Communication Setting page.Option DescriptionAgentProxyThe configured Agent Proxy used to manage the

For ESX machines, you import target machine information from VCM and copy the SSH public key file,the csiprep.py file, and the csiprep.config file to

nUse the same user name for both SSH and Web Services collections (ESX 3.x only).nUse the same password for all WebServices users.nApply the same user

Configure the vSphere Client VCM Plug-InThe vSphere Client VCM Plug-In provides contextual access to VCM change, compliance, andmanagement functions.

Procedure1. On the VCM Collector, browse to [path]\VMware\VCM\Tools\vSphere Client VCMPlugin\bin and double-click VCVPInstaller.exe.2. In the VCVP Plu

Procedure1. Select Administration > Settings > Integrated Products > VMware > vSphere Client VCM Plug-In.2. Select the setting that you wa

You can use troubleshooting options to identify and resolve any problems.Invalid Certificate on a vSphere ClientThe vSphere Client connects to the vCe

vCenter Configuration Manager Administration Guide58VMware, Inc.

Running Compliance for the VMwareCloud Infrastructure4Running Compliance for the VMware CloudInfrastructureCompliance templates evaluate the virtual e

vCenter Configuration Manager Administration GuideGetting Started with SCAP Compliance 153Conduct SCAP Compliance Assessments 154Provisioning Physical

4. "Preview Virtual Environment Compliance Rule Groups" on page 62Preview the rule group to ensure that your combination of rules and filter

Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Rule Groups > rule group name > Rules.Guest Tools Running is the rule

Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Rule Groups > rule group name > Filters.Guest Tools Running is the ru

Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Rule Groups.Guest Tools Running is the rule group in this example.3. Select

What to do nextRun the template. See "Run Virtual Environment Compliance Templates" on page 64.Run Virtual Environment Compliance TemplatesR

Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Templates > template name.3. Select the noncompliant result on which you

vCenter Configuration Manager Administration Guide66VMware, Inc.

Configuring vCenter Operations ManagerIntegration5Configuring vCenter Operations ManagerIntegrationIntegration of VCM with vCenter Operations Manager

vCenter Configuration Manager Administration Guide68VMware, Inc.

Auditing Security Changes in Your Envi-ronment6Auditing Security Changes in YourEnvironmentThe VCM Auditing capability tracks all changes in the secur

ContentsConfiguring VCMRemote Connection Types 205Using Certificates With VCM Remote 206Configure and Install the VCMRemote Client 206Configure the

vCenter Configuration Manager Administration Guide70VMware, Inc.

Configuring Windows Machines7Configuring Windows MachinesTo manage your virtual and physical Windows machines, you must verify domains and accounts, d

Continuous Windows machine management is based on the latest data you collect from target machines.You can view data and run actions, such as reports

What to do nextAssign the network authority account to the domain so that VCM can access the Windows machines in thedomain. See "Assign Network A

Procedure1. Click Administration.2. Select Machines Manager > Discovery Rules.3. Click Add to create a discovery rule.4. On the Discovery Rules pag

Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Select the Windows machines to license.4. Click License.5. Veri

4. In the System Configuration dialog box, click the Tools tab.5. In the Tool Name list, select Disable UAC.6. Click Launch.7. When the command is fin

What to do nextInstall the VCM Windows Agent on licensed Windows machines in your environment, and then re-enablethe group policy on the domain contro

Option DescriptionHTTP Secure communication protocol for the Agent. Use HTTP, whichinstalls the HTTP Listener on the target machine and configures itt

nYou use the EXE file to install the Agent in unattended, silent mode. EXE files detect an existingsoftware version and provide the option to uninstal

vCenter Configuration Manager Administration Guide8VMware, Inc.

Option Action/s Indicates a silent install. When you run CMAgentInstall.exefrom the command line, VMware recommends that you installthe Agent in silen

Use the MSI File to Install the AgentYou can use the MSI file to manually install the VCM Windows Agent on a target machine. The directoriesspecified

Option Action/qn Runs the command in quiet mode without user interaction./i Runs the command as an installation./x Runs the command as an uninstall pr

The Windows Agent uninstall executable file exists on the VCM managed machine if you installed theAgent manually using CMAgentInstall.exe or CMAgentIn

Procedure1. On the Windows 2008 machine, click Start > Run.2. In the Run dialog box, type msconfig and click OK.3. In the User Account Control dial

To move all visible Windows machines to the selection window, 500 at a time, use the double arrow.4. On the Data Types page, select the Select All che

Option DescriptionnTo run assessments and patch your Windows machines, see the online help.Getting Started with Windows Custom InformationWindows Cust

1. "Collecting Windows Custom Information" on page 98To collect Windows Custom Information (WCI) using script-based filters, you create and

The WCI data type uses extensions to the VCM Windows Agent. The extensions allow the Agent toinvoke PowerShell scripts. Using the script-based collect

Challenges in PowerShell Scripting for WCIWhen you develop custom collection scripts, understand the challenges that you might encounter whilescriptin

About This BookAbout This BookThe VMware vCenter Configuration Manager Administration Guide describes the steps required to configureVCM to collect an

Column Names Include SpacesRunning the schtasks command without any options displays a column name of Next Run Time.Because this name includes spaces,

To preserve the user-friendly name, use the task name as the element name for the task rows. When youcreate a collection filter that uses your script,

nIn-line: The default WCI filter uses an in-line script to collect basic information about the PowerShellversion, .NET version, and execution policy s

The schtasks command returns basic information about scheduled tasks. The data returned byschtasks includes multiple rows. PowerShell structures the $

###########################################################################-##function ToCMBase64String([string]$input_string){return [string]("c

if (([string]$cols[$j]).toupper() -eq "HOSTNAME"){$hostcol = $j++}else{if (([string]$cols[$j]).toupper() -eq "TASKNAME"){$namecol

#some operating systems will return columns multiple timesin the result setif ($task[0] -ne $firstcol){#if we did not find a TaskName column, just tag

} #end data row that is not columns repeated} #end data row} #end row loop}$clTasks += ("</Scheduled_Tasks>")write-host $clTasks5. Aft

When the filters return data under the top-level element name and a managed machine starts to listenon port 80, each filter initially reports the data

Create Your Own WCI PowerShell Collection ScriptCreate or modify your Windows Custom Information (WCI) scripts to collect almost any data type that is