OpenManage Enterprise 4.0.x User's Guide

Configuration compliance

Create and manage configuration compliance baselines using deployment templates, templates that are created from a device, or imported templates from a file.

By selecting Configuration > Configuration Compliance, you can create configuration-compliance baselines by using the system-defined or user-created compliance templates. You can create a compliance template from an existing deployment template, reference device, or by importing from a file. To use this feature, you must have the Enterprise-level license of OpenManage Enterprise and iDRAC for servers. For Chassis Management Controller, no license is required. Only users with certain privileges are permitted to use this feature. See Role and scope-based access.

After a configuration baseline is created by using a compliance template, the summary of compliance level of each baseline is listed in a table. Each device that is associated with the baseline has its own status, however, the highest severity status is considered as the status of the baseline. For more information, see the Managing The Rollup Health Status By Using iDRAC On The Dell 14th Generation And Later PowerEdge Servers white paper on the support site.

The Overall Compliance Summary report displays the following fields:

• COMPLIANCE: The Rollup compliance level of devices that are attached to a configuration compliance baseline. The status of the device with least compliance (say, critical) is indicated as the status of the whole baseline.
• NAME lists the user-defined name of the report.
• TEMPLATE lists the compliance template that the baseline uses.
• BASELINE LAST EDITED: The most recent date and time when the compliance baseline was run.

To view the configuration compliance report of a baseline, select the corresponding check box, then click View Report in the right pane.

Use the query builder feature to generate device level compliance with the selected baseline. See Select a query criteria.

OpenManage Enterprise provides a system-defined report to view the list of monitored devices and their compliance with the configuration compliance baseline. Select Monitor > Reports > Devices per Template Compliance Baseline, and then click Run. See Run reports.