Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Article Number: 000211250

HCP Compliance Fails or Has Unresolved Warnings

Summary: There are some situations when HCP Compliance reports warnings. This is a manual method to try to baseline check the results against a local file.

This article may have been automatically translated. If you have any feedback regarding its quality, please let us know using the form at the bottom of this page.

Article Content

Symptoms

Symptoms can vary from HCP Compliance failure to individual line-item warnings and failures. Reports consist of errors or warnings in the HCP Compliance report.

Cause

The cause can vary but this example illustrates how the install may not reflect the most current accurate HCP information. The files are downloadable and placing the new files into a specific folder result in OMIMSWAC using that folder to pull the HCP Compliance information.

Resolution

How to Set HCP Compliance to use local files for Azure Stack HCI HCP Compliance 

To resolve HCP Compliance issues, there are troubleshooting guides available from Microsoft and Dell. Some primary examples are located below. Troubleshoot HCP Compliance per the guides. This solution is how to set up an on-premises, HCP Compliance test, using known source files. The source files are similar to catalog files used for hardware compliance. See Appendix A for additional guides. 

The ones used today are listed here: 
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/troubleshootingThis hyperlink is taking you to a website outside of Dell Technologies.  

https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/known-issuesThis hyperlink is taking you to a website outside of Dell Technologies. 

The Dell HCP Compliance document is helpful. Most information used in this article comes from the HCP guide. Other Helpful guides are available in the Appendix A.
HCP Compliance
https://dl.dell.com/content/manual5942904-onboarding-hcp-policies-into-azure-and-hcp-compliance-for-hci-clusters-using-windows-admin-center.pdf?   

Arc Integration
https://dl.dell.com/content/manual9420645-onboard-dell-server-configuration-profile-policies-from-windows-admin-center-to-azure-arc-for-failover-cluster.pdf?

What is HCP Compliance?

Dell Server Configuration Profiles (SCP) and Dell HCI Configuration Profiles (HCP) are largely the same thing. The Policies are pushed to Azure when Arc is deployed, during a Windows HCI cluster registration. 

The Policies are files containing the recommended settings for various objects in the deployment. The Policies can be viewed, exported, read, and remediated. This exercise uses a local file to use as the basis of comparison. This method can also serve as a troubleshooting and training document to illustrate what is compared and how the comparison and remediation works. 

These are the Policy types.

  • Dell Infrastructure lock policy -> Check iDRAC directly
  • Dell Hardware Symmetry policy -> Compares inventories to each other.
  • Dell Hardware Configuration Policy - Compares inventories to a policy file - can be offline.
  • Dell Operating System Configuration Policy-Compares inventories to a policy file - can be offline.

These Policies are in convenient JSON Files that can be downloaded. The file names are: 

  • scpMetaData.Json = Cluster Recommendation
  • hcpMetaData.json = HCP Compliance summary
  • hclSolutionSupportMatrix.json  = Where policies come from

More information about the use of these files is in the sections below.

  • Prerequisites 

Open the guides needed for HCP compliance. Observe they both address Azure Arc. Arc is one of the several prerequisites required technologies for success.

For HCP compliance to work, all the following must be deployed correctly.  
Onboard Dell Server Configuration Profile Policies Wac to Azure Arc for Failover Clusters
https://dl.dell.com/content/manual9420645-onboard-dell-server-configuration-profile-policies-from-windows-admin-center-to-azure-arc-for-failover-cluster.pdf?  

Onboard HCP policies into Azure and HCP compliance for HCI cluster using WAC
https://dl.dell.com/content/manual5942904-onboarding-hcp-policies-into-azure-and-hcp-compliance-for-hci-clusters-using-windows-admin-center.pdf?
 
To save some reading, the following summarizes the required checklist, to make HCP Compliance work. Requirements are:
  • Working Azure Subscription
  • WAC registered to Azure.
  • Cluster Registered and connected to Azure Arc.
  • Operating System must be Windows 2019, 2022 or Azure HCI OS 22H2.
  • OMIMSWAC premium License for OMIMSWAC installed on each member of cluster
  • Install WAC in Gateway mode, not windows 10. See Appendix C for supported installs.
  • Servers must be in the Compatibility Matrix for HCP compliance to succeed.
  • See Appendix B for Bios prerequisites. 
See page 20 in the above article if the prerequisites are not met. 

  • Download and place files 

Download and place the following files on the WAC server. Notice that a clustered WAC instance cannot run this test since there is no file standardization. Microsoft supports a clustered WAC deployment. Dell supports OMIMSWAC on a WAC Gateway deployment. The files must be copied to the windows profile of the WAC machine. 
 
scpMetaData.Json
  • https://downloads.dell.com/omimswac/scp/1.1.0.0/SCPMetaData.json
  • Place into this folder location
  • C:\Users\Dell\ScpMetaData\
hcpMetaData.json
HCP compliance should run before Hardware compliance! 
asHCISolutionSupportMatrix.json
  • Download the asHCISolutionSupportMatrix.json and asHCISolutionSupportMatrix.json.sign files
  • http://downloads.dell.com/omimswac/supportmatrix/
  • Place these files in the C:\Users\Dell\SymmetryCheck folder in the WAC Server.
  • This file Works with Full Stack CAU.
Azure stack Updates URL
  • https://dl.dell.com/catalog/azhci-catalog.xml.gz
  • Deploy HCP compliance
With the files in place, perform these steps on the WAC server: 
  1. Close the browser. 
  2. Copy the files to c:\users\Dell\ folder.
  3. Restart the Windows Admin Center Service. 
  4. Clear the %temp% cache. 
  5. Clear the browser cache.  
  6. Start the WAC browser page.
Log in to Azure with WAC and check that Arc Integration is working. Go to Compliance and run HCP compliance. You should see green check marks, unless some remediation tasks are needed. Figure 1 illustrates the results. 

HCP Compliance

Figure 1: HCP Compliance  


This should illustrate how HCP compliance works. If the online HCP fails, it may show issues with the Azure side of the Policies. This may require a repair or re-registration of Arc, the Registration, or both. 

Additional Information

Appendix A: 

Other Links for setup and troubleshooting

Security Guide
https://dl.dell.com/content/manual25595674-dell-openmanage-integration-with-microsoft-windows-admin-center-version-3-0-security-configuration-guide.pdf?  

User Guide
https://dl.dell.com/content/manual36968281-dell-openmanage-integration-with-microsoft-windows-admin-center-version-3-0-user-s-guide.pdf?  

CAU updates
https://dl.dell.com/content/manual11720650-update-cluster-using-cluster-aware-updating-in-openmanage-integration-version-3-0-with-microsoft-windows-admin-center.pdf?  

Licenses
iDRAC, CMC, OpenManage Enterprise, OpenManage Integration with Microsoft Windows Admin Center, OpenManage Integration with ServiceNow, and DPAT Trial Licenses 

Support 
Support for Dell OpenManage Integration with Microsoft Windows Admin Center
  
Release notes 
https://dl.dell.com/content/manual24710393-dell-openmanage-integration-with-microsoft-windows-admin-center-version-3-0-release-notes.pdf?  

HCP Policies
https://dl.dell.com/content/manual5942904-onboarding-hcp-policies-into-azure-and-hcp-compliance-for-hci-clusters-using-windows-admin-center.pdf?  

Dell OMIWAC guides
Updates
https://dl.dell.com/content/manual11720650-update-cluster-using-cluster-aware-updating-in-openmanage-integration-version-3-0-with-microsoft-windows-admin-center.pdf?  

Security
https://dl.dell.com/content/manual25595674-dell-openmanage-integration-with-microsoft-windows-admin-center-version-3-0-security-configuration-guide.pdf?

 

Appendix B: 

More Prerequisites
This list could cause HCP Compliance failures. Secure core-checked items could result in Azure registration failure and HCP Compliance failure.

If using secure core, the following BIOS values must be checked and updated to specific values.

  • Virtualization Technology 
  • Kernel DMA Protection
  • Secure Boot
  • Trusted Platform Module
  • (TPM) 2.0
  • System Management Mode  
  • [AMD] Dynamic root of Trust Measurement
  • [Intel] Trusted Execution Technology


Appendix C: 

WAC deployment differences and graphic of what is supported.

Client Windows Admin Center Deployment which may result in HCP failure or other failure of basic function. 

Client Windows Admin Center Deployments that Result in HCP Failures
Figure 2: Client Windows Admin Center Deployments that Result in HCP Failures
 

Appendix D: 

Acronyms 

List of Acronyms
Figure 3: List of Acronyms

Article Properties

Affected Product

OpenManage Integration with Microsoft Windows Admin Center, OpenManage Integration with Microsoft Windows Admin Center

Last Published Date

21 Mar 2024

Version

3

Article Type

Solution

Back to Top