OpenManage Enterprise 4.1.x User's Guide

Create a configuration compliance baseline

A configuration compliance baseline is a list of devices that are associated to a compliance template. A device in OpenManage Enterprise can be assigned to 10 baselines. You can check the compliance of a maximum of 250 devices at a time.

Prerequisites

Ensure that you have created the appropriate compliance template.

About this task

To view the list of baselines, click Configuration > Configuration Compliance.

The list of compliance baselines available to you depends on your role and scope-based access privileges in OpenManage Enterprise. For example, an administrator can oversee and manage all compliance baselines, while a device manager can only handle baselines that they have created and own. Also, the devices/device groups in the scope of the device manager decide the target devices available to the device manager.

You can create a configuration compliance baseline by:

Using an existing deployment template. See Configuration compliance.
Using a template captured from a support device. See Create a compliance template from reference device.
Using a template imported from a file. See Create a compliance template by importing from a file.

When you select a template for creating a baseline, the attributes that are associated with the template are also selected. However, you can edit the baseline properties. See Edit a configuration compliance baseline.

CAUTION:Editing properties of a compliance template that is already associated with another baseline alters the baseline compliance levels of devices that are linked to it. Read through the Error and Event message that is displayed and act accordingly. For more information about error and event messages, see the Error and Event Message Reference Guide available on the support site.

Steps

Select Configuration > Configuration Compliance > Create Compliance Baseline
In the Baseline Information Section:
1. From the Template drop-down menu, select a compliance template. For more information about templates, see: Configuration Compliance.
2. Enter a compliance baseline name and description.
3. Click Next.
In the Target section:
1. Select devices or device groups. Only compatible devices are displayed. See: Select target devices and device groups.
  
  NOTE:Only compatible devices are listed. Selecting a group exclusively identifies devices incompatible with the compliance template or lacking support for the configuration compliance baseline feature.
(Optional) In the Schedule and Options section:
1. Check the Schedule box and specify when the notification would be triggered by selecting either Notify any time the baseline becomes non-compliant or Notify on Schedule.
2. To schedule the notification later and time, select Run Later and select the Date and Time. Alternatively, to trigger the notification on a weekly or daily basis, select Run On Schedule. Select Daily or Weekly from the drop-down list and specify a time in the 12-hour format.
3. From the Format menu select one of the following formats for the Configuration Compliance report: HTML, CSV, PDF, XLS.
4. In the Email Recipient box, enter the email address that must receive the notification. If email is not configured, you must configure the email (SMTP) address. For more information, see: Configure SMTP, SNMP, and Syslog
Click Finish

Results

Whenever a configuration baseline is created, the appliance creates a configuration inventory job. This job collects an inventory of the devices that are associated with the baseline for which the inventory data is unavailable. This newly created Configuration inventory job has the same name as the baseline for which the inventory is collected. Also, on the Configuration Compliance screen, a progress bar indicating the progress of Inventory job appears alongside the respective baseline.

Welcome

Welcome to Dell