On the
Compliance Report screen of a baseline, devices that do not comply with the baseline can be remediated by updating their attributes.
About this task
The
Compliance Report screen displays the following fields for the target devices that are associated with the compliance template baseline:
COMPLIANCE is the status of the device with least compliance (for example, critical) is indicated as the status of the device.
DEVICE NAME is the Name of the target device that is associated with the baseline.
IP ADDRESS is the IP address of the target device.
TYPE is the type of the target device associated.
MODEL is the model name of the target device.
SERVICE TAG is the service tag of the target device.
LAST SUCCESSFUL INVENTORY TIME is the most recent date and time that a successful inventory job was run. To initiate a new default inventory job, click
Monitor > Jobs and run the
Default Inventory Task.
You can use the Advanced Filters to quickly see noncompliant devices. Also, the Select All and sorting support can be used on Configuration compliance results. To undo the filters, click
Clear Filters.
To view the drifted attributes of a noncompliant target device, select the device and click
View Report. The
Compliance Report of the respective target device lists the attribute names with the expected and current values of the attributes.
Steps
Select
Configuration > Configuration Compliance.
From the list of configuration compliance baselines, select the corresponding check box, and then click
View Report.
From the list of noncompliant devices, select one or more devices, and then click
Make Compliant.
NOTE:
All attributes that are part of the template are applied on the target device irrespective of the compliance status. A reboot may be required to apply the changes.
If the deployed template is created from a reference device, verify whether the template contains user password information. If the template contains user password information, the appliance reverts to the discovery credentials for device communication. This change can be verified post deployment by checking the
Credential Type of the target device (It displays
Discovery). If using the service account for communication is preferred or the device is using password rotation, trigger the onboarding task for this device. This task either updates the password on the existing service account in iDRAC or, if user slots are available, generates a new service account.
Schedule the configuration changes to run immediately or later, and then click
Finish.
To apply the configuration changes after the next server reboot, you can select the
Stage configuration changes to device(s) on next reboot option.
Results
A new configuration inventory task is run, and the compliance status of the baseline is updated on the
Compliance screen.
Export a compliance baseline report
A complete or partial list of the devices that are associated with a compliance template baseline can be exported to a CSV file.
