Radia Cloud For the Windows operating systems Software Version: 9.10 User Guide Document Release Date: June 2014 Software Release Date: June 2014
Legal Notices Warranty The only warranties for products and services are set forth in the express license or service agreements accompanying such products and services. Nothing here in should be construed as constituting an additional warranty. Accelerite shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice. Restricted Rights Legend Confidential computer software. Valid license from Accelerite, its affiliates or its licensors required for possession, use or copying. No part of this manual maybe reproduced in any form or by any means (including electronic storage and retrieval or translation into a foreign language) without prior agreement and written consent from Accelerite. Copyright Notice Copyright 2013-2014 Accelerite, its affiliates, its licensors, and Hewlett-Packard Development Company, LP. Trademark Notices Android is a trademark of Google Inc. IOS is a registered trademark of Cisco in the U.S. and other countries and is used under license by Apple. Microsoft, Windows, Windows XP, and Windows Vista are U.S. registered trademarks of Microsoft Corporation. Acknowledgements This product includes software developed by the Apache Software Foundation (http://www.apache.org/). This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software developed by the Open SSL Project for use in the Open SSL Toolkit (http://www.openssl.org/). This product includes software written by Tim Hudson (tjh@cryptsoft.com). This product includes software written by Daniel Stenberg (daniel@haxx.se). This product includes OVAL language maintained by The MITRE Corporation (oval@mitre.org). Page 2 of 16
Documentation Updates The title page of this document contains the following identifying information: Software Version number, which indicates the software version. Document Release Date, which changes each time the document is updated. Software Release Date, which indicates the release date of this version of the software. To check for recent updates or to verify that you are using the most recent edition of a document, go to: http://support-epm.accelerite.com Page 3 of 16
Support Accelerite Support provides customer self-solve capabilities. It provides a fast and efficient way to access interactive technical support tools needed to manage your business. As a valued support customer, you can benefit by being able to: Search for knowledge documents of interest Submit and track support cases and enhancement requests Submit enhancement requests online Download software patches Look up Accelerite Support contacts Enter into discussions with other software customers Research and register for software training To access the Self-solve knowledge base, visit the Accelerite Support home page. Page 4 of 16
Contents User Guide 1 Contents 5 Overview 6 Benefits of Radia Cloud 6 Features 6 Accelerite Software Support 8 Setting up Radia Cloud Environment 9 Installing RCA Agent on Client Devices 9 Hardware and Software Requirements 9 Steps to Deploy RCA Agent 10 Using Core Console 11 Creating Device Groups 11 Publishing Software 12 Entitling Software 13 Viewing Dashboards and 13 We appreciate your feedback! 16 Page 5 of 16
Chapter 1 Overview Radia Client Automation (RCA) is a real-time, policy-based, desired state management client management solution that automates the administrative tasks for the physical and virtual endpoint devices. The desired state approach ensures that all endpoint devices in your infrastructure are in adherence with the state information stored for the device in a central database. To achieve the desired state, RCA enforces policies and delivers the required configurations or data files to the endpoint device without any manual intervention. Endpoint management devices include Windows devices and Mobile Device capabilities for ios, Android, and Windows Phone devices including smart phones, tablets, laptops, desktops, thin clients, as well as customer touchpoints such as ATMs, kiosks, and other touchscreen devices. With increasingly mobile and distributed workforces, Radia provides an all-in-one cloud-based endpoint management solution to streamline administration and increase productivity, while reducing costs. Benefits of Radia Cloud Radia Client Automation Cloud-based service (Radia Cloud) enables you to manage your endpoints similar to the traditional on-premise RCA implementation. It provides security enhancements to ensure the environment, content, and device information are both secure and readily accessible by the administrator and your endpoint devices. Some of the key benefits of Radia Cloud include: Global accessibility Easier administration Easier collaboration and compatibility Lower costs due to minimal infrastructure investment Features Radia Cloud provides a suite of features that perform administrative tasks for the physical and virtual endpoint devices in complex and ever-changing environments. These features are designed to replace ad hoc, error-prone, manual processes. RCA automates the deployment, configuration, and management for software, and patches. You can avail the following Radia Cloud capabilities: Page 6 of 16
Chapter 1: Overview 1. Inventory - Inventory management enables you to: Automatically gather information about software and hardware configurations and consolidates the results into web-based reports Increase manageability of enterprise data by maintaining current inventory information collected across LAN, Internet, and dial-up links, and across a wide array of heterogeneous devices and operating systems 2. Patch - Patch management enables you to: Acquire patches from vendor web sites Determine the vulnerabilities on the managed devices Deploy applicable patches to managed devices Verify applied patches on managed devices to ensure compliance and security Generate reports that provide information on which acquired and applicable patches have or have not yet been applied to a managed device 3. Usage - Application usage metric collection enables you to: Ensure license compliance within your enterprise Implement license tracking, giving you the ability to purchase and maintain only those licenses that are required View the actual use of application resources using reports 4. Software - Software management enables: Policy-driven distribution of software RCA administrators to automatically deploy required software End users to install the authorized elective software 5. Security and Compliance - Security and compliance management enables you to monitor and manage the following across your environment: Security vulnerabilities: Identifies software security and vulnerability issues in the enterprise Configuration compliance: Identifies software configuration issues on managed devices in the enterprise Security tools management: Identifies what type of security tools are present and enabled on managed devices in the enterprise 6. Mobile Device - Mobile Device enables you to manage mobile devices in your enterprise. A mobile device can either be a smartphone or a tablet running on Android, ios, and Windows Phone operating systems. 7. Settings - Settings management enables you to: Create groups of configuration settings for software installed on the managed devices in your environment View reports about the run-time data of the software Page 7 of 16
Chapter 1: Overview Accelerite Software Support Self-service support at your fingers Available around the clock, it provides the interactive technical support tools needed to manage your Accelerite Software, allowing your IT staff to quickly self-solve or log support cases electronically. Accelerite Support Portal (ASP) offers a vast array of Accelerite software knowledge, bringing comprehensive support resources to your fingertips. Additionally, ASP provides online incident reporting to an unlimited number of users. It enables you to: Search our technical knowledge base for known problems, technical documents, manuals, and patches Log, track, and update cases electronically Register for email notifications for many Accelerite software product updates and patches Electronically download the latest software patches for Accelerite software products Visit PSO http://support-epm.accelerite.com Page 8 of 16
Chapter 2 Setting up Radia Cloud Environment You must subscribe to Radia Cloud to use Radia Cloud services. By subscribing, you will be entitled to all benefits and capabilities that Radia offers in its all-in-one cloud-based endpoint management solution. Once you subscribe to Radia Cloud, you will receive a welcome email from Accelerite that contains the following information to help you get started: URL to access the RCA Core Console Fully-qualified host name of the RCA Core Server Primary administrator user name and password to access the RCA Core Console and RCA Core Server. While your assigned password is unique and confidential, it is recommended to change the password at the first login. URL to download RCA agent for Windows devices and Windows Phone-based mobile devices. RCA agent for Android and ios mobile devices must be downloaded from the respective App store. Installing RCA Agent on Client Devices The RCA Agent is used to manage devices in your environment. It enables an RCA administrator to: Automate deployment Update, repair, and delete applications Inspect hardware and software Ensure security of the data Hardware and Software Requirements The following are the minimum system requirements for the devices where you want to install the RCA agents: 1 GB free disk space Microsoft.NET Framework 3.5 and above. Microsoft.NET requires Microsoft Internet Explorer 5.01 or later. Ensure the communication port 443 used for secure HTTP (HTTPS) communications and port 444 used for secure TCP (TCPS) communications for RCA is accessible on client side Page 9 of 16
Chapter 2: Setting up Radia Cloud Environment Steps to Deploy RCA Agent Use the URL provided in the welcome mail to download the RCA Agent. After downloading the agent, you can deploy the agent in any manner of your choice. Some of the possible methods to deploy the agent are suggested below: Use Microsoft Group Policies Place the media on a share accessible to the users so that it can be installed using a login script Send a mail to the users with instructions to manually install the agent After the RCA Agent is installed on client devices, devices connect to the RCA Core Server and get registered. Page 10 of 16
Chapter 3 Using Core Console The Core Console is the web interface that enables an administrator to perform various administrative and configuration tasks to manage the enterprise. The administrator can manage devices, software, and patches. The administrator can also use the Core Console to create and view reports based on those managed devices. Core Console provides the following tabs to perform these tasks: Dashboard Reporting Operations Configuration To access the Core Console, use the URL that you received in the Welcome Email. For example, https://<customername>.core.radiacloud.com/console where, customername is the name provided by you during the subscription process. If you have already installed the RCA Agent on your endpoint devices, view the details of the endpoint devices by accessing the Core Console and navigating to the tab > Directories > Devices. Creating Device Groups Groups are used to perform tasks on many devices at once, such as assigning software and patches. Devices are added to groups based on search criteria that you define during group creation. Use the Group Creation Wizard to define device groups based on devices you specify, discovered devices, or on the devices returned as part of a reporting query. The following procedure creates groups for internal directories: 1. Access the Core Console > tab > Device Groups. 2. Click Launch the RCA Group Panel to Create a New Group icon. The RCA Group Creation Wizard appears. 3. Type a name and description for the group. 4. Click Add Devices. The Add Devices window appears. 5. Define Search Parameters and click Search to display a list of devices. Clicking Search without defining parameters will return a list of all available devices. 6. Select the devices that you want to add, and click Add. Page 11 of 16
Chapter 3: Using Core Console 7. When you are finished adding devices, close the Add Devices to a New Group window. 8. To remove devices, select the devices in the Members grid, and click Remove Devices. 9. Click Submit. The new group is added to the Groups container within the internal zone. Publishing Software Software must be published to the Core Console before its content can be distributed and deployed into your environment. The RCA Administrator Publisher is a tool that you use to publish software in a form that RCA can easily manage. To publish software, perform the following steps: 1. Use the fully-qualified host name of the RCA Core Server to access it remotely. 2. Type the primary administrator user name and password provided in the Welcome mail. 3. Access RCA Administrator Publisher. 4. Type your Administrator User ID and Password and click OK. 5. In the Publishing Options area, select any option as per your requirement and click OK. Note: The following publishing options are not supported in Radia Cloud environment: OS Image OS Add-ons/extra POS drivers HW Configuration The Select files to publish window appears. 6. Select all files that you want to publish and click Next. The Edit file properties window appears 7. Edit file and folder properties and methods and click Next. The Package Information window appears. 8. Type a name for the package including additional descriptive information as well as set package deployment limitations based on hardware and operating system settings and click Next. The Service Information window appears. 9. Provide descriptive information about the service along with information on how it will be managed after it is deployed and click Next. The Summary window appears. 10. Review the package and service information specified and click Publish. The published software is stored in the Services area of the tab in the Core Console. Page 12 of 16
Chapter 3: Using Core Console Entitling Software Once the software is published, you must entitle the software to the managed devices. To entitle software, perform the following steps: 1. Access the Core Console using the URL provided in the Welcome Email. 2. From the directory object tree on the tab, select the directory object that contains the devices to which you want to entitle the software. 3. Select the devices or device groups from the list and click Launch Policy Wizard. 4. Select the appropriate Service Domain. For example, Software, Patches. All published software is displayed in the Available Services list. 5. Select one or more available services and click Next. 6. Click Next when you have added all the services you need. A window appears displaying the selected services. In this window, you can set the policy configuration, priority, and attributes for the selected services. 7. Click Next when you have configured the policies. A window appears displaying the summary information for the selected services. 8. Review the summary information for your configuration. Click Commit to save your changes. 9. Click Close to exit the wizard. Your newly created policies will be displayed in the Policies table on the Assignments tab. The policies will also be visible in the Entitlements table if you click the Entitlements tab. The selected services get entitled to the managed devices in your environment. When the next connect to the RCA Core server is initiated from the devices, the entitled software gets deployed as per the policy. Viewing Dashboards and The Dashboard tab in the Core Console enables you to view and assess the status of your enterprise at a glance. Dashboards include a home page with summary statistics and links to related reports. The following types of dashboards are available: RCA Operations - Use this dashboard to display operations that RCA performs to manage your enterprise. Vulnerability - Use this dashboard to view the aggregated security vulnerability information for each managed client device in your enterprise. Compliance - Use this dashboard to view the aggregated regulatory compliance information for each managed client device in your enterprise. Page 13 of 16
Chapter 3: Using Core Console Security Tools - Use this dashboard to view the aggregated information about the anti-spyware, anti-virus, and software firewall products that are installed on the managed client devices in your enterprise. Patch - Use this dashboard to view the information about patch vulnerabilities that are detected on the managed client devices in your enterprise. The Reporting tab in Core Console contains summary and detailed reports on enterprise infrastructure. The home page provides a snapshot of the enterprise with respect to compliance management, mobility management, inventory management, patch management (if installed and enabled), usage management (if enabled), security tools management, and vulnerability management. You can view detailed information on various reports using one of the following ways: Use Report Quicklinks to open frequently requested reports Use Quick Search to find inventory information about a specific device or service. This feature applies to inventory reports only. Use the links in the Reporting Views section of the left navigation pane to open a specific report A Reporting View defines a set of reporting windows to display for the current data set and initial settings related to each window (such as minimized or maximized, and the number of items per window). When you first access the reports, the Default View is applied. The current view is listed on the right side of the Global Toolbar. You can change or customize your Reporting View. The following table lists the various reporting views available under Display Options: Reporting Views Reporting View Description Infrastructure Inventory Settings RCA Enables you to view synchronization status of various Satellite servers Enables you to view hardware and software information for all endpoint devices in RCA Enables you to view settings profile information for devices on which a settings profile has been deployed Enables you to view management information for various RCA functions Patch Usage Enables you to view patch compliance information for managed devices and acquisition information for patches and Softpaqs Enables you to view usage information for devices that have the Usage Collection Agent installed. Page 14 of 16
Chapter 3: Using Core Console Reporting View Vulnerability Description Enables you to view vulnerability information for managed devices such as: Vulnerability management activities and trends in your environment Vulnerability definitions and detailed information about vulnerabilities detected in your environment Vulnerabilities detected on specific devices in your environment Compliance Enables you to view compliance information for managed devices: Snapshot of your environment from the compliance management perspective. Number of endpoint devices that are currently in or out of compliance with each Secure Content Automation Protocol (SCAP) benchmark included in your scans Most recent compliance scan for each scanned endpoint device Security Tools Virtualization Mobility Enables you to view the anti-virus, anti-spyware, and firewall products detected on managed devices. You can also view when the anti-virus and anti-spyware definitions were last updated on your client devices. Enables you to view current status of the VMware ThinApp and Microsoft Application Virtualization applications that are deployed on the RCA agents Enables you to view information on the mobile device platform, applications downloaded and installed on the mobile device, and the type of devices that are managed (smartphones or tablets) using RCA Page 15 of 16
We appreciate your feedback! We appreciate your feedback! If an email client is configured on this system, by default an email window opens when you click here. If no email client is available, copy the information below to a new message in a web mail client, and then send this message to radiadocfeedback@persistentsys.com. Product name and version: Radia Cloud, 9.10 Document title: User Guide Feedback: Page 16 of 16