Update Manager Plugin for OpenManage Enterprise Overview
Download PDFMon, 16 Jan 2023 16:36:04 -0000
|Read Time: 0 minutes
Summary
Dell EMC Update Manager plugin brings Dell Repository Manager functionality to OpenManage Enterprise. Update Manager. Update Manager Plugin is provided Free of Charge.
Introduction
Dell EMC Update Manager is a plugin to the Dell EMC OpenManage Enterprise console that enables IT Administrators to create and manage repositories of update packages for PowerEdge devices that are managed by OpenManage Enterprise. This plugin is a vital piece of the OpenManage portfolio and provides seamless integration.
Update Manager is provided free of charge and supports OpenManage Enterprise v3.5 and newer.
- Plugin to the Dell EMC OpenManage Enterprise
- Create custom repositories/Catalogs/Baselines
- Import or delete components/bundles to and from a repository
- Refresh repositories when new content is available
- Automatically download required update packages from Dell.com
- Configure maximum storage size.
- GUI or API
Benefits of using Dell EMC Update Manager Plugin
Using Update Manager keeps your systems up to date with the latest firmware and software by:
- Streamlines the identification and gathering of PowerEdge update packages
- Keeps the repositories up to date for updating the systems
- Allowing manual or automatic updates of a catalog present in a repository
- Customizing a repository by importing or deleting update packages
- Generating a baseline for a repository that can be used to update the firmware of the components in the repository
- Access View Report directly from UMP to initiate an update job
In Conclusion
Keeping Servers up to date with the latest firmware and BIOS is essential to minimize the potential vulnerabilities to systems. Update Manager streamlines and automates the identification, gathering, and staging of update packages to ensure that the PowerEdge devices you manage are updated.
Related Documents
Improve Operational Efficiency Through OME Server Drift Management
Mon, 16 Jan 2023 16:23:05 -0000
|Read Time: 0 minutes
Summary
As they say “drift happens” … Ideally, firmware versions and configuration settings such as for iDRAC and system BIOS set up across a server environment should remain consistent. Configuration drift refers to the phenomenon where server(s) configurations ‘drift’ toward an inconsistent state. This Direct from Development (DfD) tech note describes how capabilities in Dell’s OpenManage Enterprise server management appliance facilitates the simplification of drift management, gives visibility of problems while at the same time reduces the time and effort to resolve.
Introduction
The failure to ensure a consistent server firmware version and configuration settings or not to detect unauthorized changes increases the risk of operational problems, security breaches, and even server outages. Why does this happen? – This situation can have many causes, including poor processes, routine hardware upgrades and replacements, or even attacks from external threats. What is the scope of the impact? – Any number of firmware versions or configuration settings. For example, in a secure environment many elements such as iDRAC user accounts / USB ports / server boot order may be areas of key interest. Dell’s OpenManage Enterprise management console (“OME” for short), provides compliance features that detect, highlight, and remediate issues, with simple processes for both firmware versions and configuration settings. OME also provides easy-to- create baseline configurations, using the intuitive server configuration templates/firmware catalogs, to streamline the capture/creation of required values, analyze multiple servers, and then apply the desired state. To perform any tasks in OME, you must have the correct role-based user privileges and scope-based operational access to the devices.
Managing configuration settings
Let’s look at configuration settings first. This is based on the iDRAC’s “server configuration profile” concept. A compliance template captures the server BIOS, iDRAC, and components’ configuration settings. A template can consist of hundreds of firmware settings, including iDRAC, BIOS, PERC RAID, NICs, and FC HBA configurations.
Figure 1: Configuration compliance status of server against configuration baseline
The OpenManage Enterprise Advanced license must be enabled on each server’s iDRAC to use this configuration compliance solution.
There are four basic steps to ensure configuration compliance:
- Create a compliance template to capture all required server configuration settings.
- Associate the compliance template to one or more servers to create a baseline group.
- Compare the template with the actual settings for each server and report.
- Remediate non-compliant servers with a single-click. Customers can create a compliance template from an existing deployment template, either by using OME to extract it from a “reference” server or by importing an existing template from a file. Each server associated with the baseline has its own itemized compliance status.
Figure 2. Drill down view of “Compliance Report” screen that shows a compliance failure
When servers appear on the non-compliant list, remediation is simple to accomplish. A “one-click” compliance using the “Make compliant” button can be started immediately or scheduled. Note: a server reboot may be required to make the selected devices compliant.
Figure 3. One-click “Make Compliant” button
After this baseline is created, more servers can be added to the baseline at any time, and the corresponding server template can be amended, cloned, or exported to another instance of OME. Finally, in “Reports” there is a pre-defined “Devices Per Configuration Baseline” report, which details the servers associated with each configuration baseline and each device’s compliance status. Using the reporting mechanism, the report can be downloaded or emailed. (In an upcoming release, OME will automate the process of report scheduling and emailing.)
Managing firmware versions
In the modern server there are many components that have firmware, such as system BIOS, iDRAC, NICs, PERC, and hard drives. OME can inventory, report, and update firmware versions. If managing firmware versions is required to deliver consistency across a fleet of servers, this can be achieved by using the “Firmware and Driver Compliance” element of OME.
Managing firmware version compliance, including firmware updating, does not require an OpenManage Enterprise Advanced license.
There are four steps to perform this compliance:
- Build a list of firmware versions to be scrutinized against the servers that require checking. This required server firmware “build” can be created from a default catalog of firmware versions (use OME to download the latest one from Dell Support). You can also build a custom catalog from repository manager or by using the Update Manager plugin for OME that is available with OME 3.5 or higher.
- Select the servers to be compared for compliance to create a baseline group.
- OME compares the catalog against the installed firmware then reports the overall and itemized compliance status of each server in the baseline.
- Remediate non-compliant servers with a single click.
Figure 4. View of firmware versions created in “custom” catalog by Update Manager plugin
Figure 5. Drill down view of Compliance Report in case of firmware compliance failures
When servers appear as non-compliant, remediation is simple to accomplish. A “one-click” compliance task can be started immediately or scheduled by the “Make compliant” button. Note: a server reboot may be required to make the selected devices compliant. Again, in “Reports” there are pre-defined reports named “Firmware Compliance per Device Report”/”Firmware Compliance Per Component Report”. These reports detail the server’s firmware versions and status. Using the reporting mechanism, these can be downloaded or emailed. As we mentioned earlier, firmware version compliance, including firmware updating does not require an OpenManage Enterprise Advanced license. In addition, driver compliance and updates are available for servers running Microsoft Windows 2016, 2019, or 2022.
Conclusion
Configuration and firmware compliance increases control while decreasing drift related issues and risk. Dell OpenManage Enterprise not only brings advanced feature rich server management to PowerEdge customers -- it also brings the power of automation to reduce effort, decrease time to resolution, and reduce management costs.
References
For additional details see:
- Firmware Baseline Video
- Support for OpenManage Enterprise
- Dell Technologies Developer Portal
- Systems Management community
Update Manager Plugin for OpenManage Enterprise Using Solution Catalogs
Mon, 16 Jan 2023 16:43:07 -0000
|Read Time: 0 minutes
Summary
Dell EMC Update Manager plugin brings Dell Repository Manager functionality to OpenManage Enterprise. Update Manager provides easy access to solution catalogs for:
- ESXi
- vSAN
- Microsoft HCI
Update Manager Plugin is provided Free of Charge.
Introduction
Dell EMC Update Manager is a plugin to the Dell EMC OpenManage Enterprise console that enables IT Administrators to create and manage repositories of update packages for PowerEdge devices managed by OpenManage Enterprise. This plugin is a vital piece of the OpenManage portfolio and provides seamless integration.
Update Manager provides easy access to solution catalogs that are tuned to the requirements of ESXi, vSAN, and Microsoft HCI environments.
It is easy to create a custom repository using a solution catalog by simply selecting the corresponding catalog when creating a new repository.
During the repository creation, select a schedule to check for new updates. The Update Manager Plugin will then automatically refresh the repository with the latest content to ensure that it has the latest updates available from Dell when a system is updated.
Benefits of using a solution catalog
Solution catalogs are created and maintained by teams within Dell Technologies that are knowledgeable about each solution—ensuring that the update packages are compatible with the corresponding solution. Solution catalogs are refreshed on a quarterly basis, with content that meets or exceeds the corresponding solution Hardware Compatibility List.
Solution catalogs are refreshed on a quarterly basis, with content that meets or exceeds the corresponding solution Hardware Compatibility List.
In Conclusion
Keeping Servers up to date with the latest firmware and BIOS is essential to minimize the potential vulnerabilities to systems. Update Manager streamlines and automates the identification, gathering, and staging of update packages to ensure that the PowerEdge devices you manage are updated.