Symantec ALTIRIS REAL-TIME CONSOLE INFRASTRUCTURE 7.0 SP3 - V1.0, ALTIRIS REAL-TIME CONSOLE INFRASTRUCTURE 7.0 SP3 User Manual

Altiris™ Real-Time Console
Infrastructure from
Symantec User Guide

Version 7.0 SP3

Altiris™ Real-Time Console Infrastructure from
Symantec User Guide

The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.

Legal Notice

Copyright © 2010 Symantec Corporation. All rights reserved.

Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the
product are trademarks or registered trademarks of Symantec Corporation or its affiliates
in the U.S. and other countries. Other names may be trademarks of their respective owners.

The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.

THE DOCUMENTATION ISPROVIDED"AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED
IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.

The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in
Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release,
performance, display or disclosure of the Licensed Software and Documentation by the U.S.
Government shall be solely in accordance with the terms of this Agreement.

Symantec Corporation
350 Ellis Street
Mountain View, CA 94043

http://www.symantec.com

Technical Support

Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group workswith Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.

Symantec’s support offerings include the following:

■ A range of support options that give you the flexibility to select the right

amount of service for any size organization

■ Telephone and/or web-based support that provides rapid response and

up-to-the-minute information

■ Upgrade assurance that delivers software upgrades

■ Global support purchased on a regional business hours or 24 hours a day, 7

days a week basis

■ Premium service offerings that include Account Management Services

For information about Symantec’s support offerings, you can visit our web site
at the following URL:

www.symantec.com/business/support/

All support services will be delivered in accordance with your support agreement
and the then-current enterprise technical support policy.

Contacting Technical Support

Customers with a current support agreement may access Technical Support
information at the following URL:

www.symantec.com/business/support/

Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, incase it is necessaryto replicate
the problem.

When you contact Technical Support, please have the following information
available:

■ Product release level

■ Hardware information

■ Available memory, disk space, and NIC information

■ Operating system

■ Version and patch level

■ Network topology

■ Router, gateway, and IP address information

■ Problem description:

■ Error messages and log files

■ Troubleshooting that was performed before contacting Symantec

■ Recent software configuration changes and network changes

Licensing and registration

If your Symantec product requires registration or a license key, access our technical
support web page at the following URL:

www.symantec.com/business/support/

Customer service

Customer service information is available at the following URL:

www.symantec.com/business/support/

Customer Service is available to assist with non-technical questions, such as the
following types of issues:

■ Questions regarding product licensing or serialization

■ Product registration updates, such as address or name changes

■ General product information (features, language availability, local dealers)

■ Latest information about product updates and upgrades

■ Information about upgrade assurance and support contracts

■ Information about the Symantec Buying Programs

■ Advice about Symantec's technical support options

■ Nontechnical presales questions

■ Issues that are related to CD-ROMs or manuals

Support agreement resources

If you want to contact Symantec regarding an existing support agreement, please
contact the support agreement administration team for your region as follows:

[e-mail]-Pacific and Japan

[e-mail], Middle-East, and Africa

[e-mail] America and Latin America

Additional enterprise services

Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.

Enterprise services that are available include the following:

Managed Services remove the burden of managing and monitoring security
devices and events, ensuring rapid response to real threats.

Managed Services

Symantec Consulting Services provide on-site technical expertise from
Symantec and its trusted partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include assessment, design,
implementation, monitoring, and management capabilities. Each is focused on
establishing and maintaining the integrity and availability of your IT resources.

Consulting Services

Education Services provide a full array of technical training, security education,
security certification, and awareness communication programs.

Education Services

To access more information about enterprise services, please visit our web site
at the following URL:

www.symantec.com/business/services/

Select your country or language from the site index.

Technical Support ........... . . . .............. . . .............. . . . .............. . . . ............. . . . .............. . 3

Chapter 1 Introducing Real-Time Console Infrastructure .......... . . . . . 9

About Real-Time Console Infrastructure ..... . . .............. . . . .............. . . . ... 9

Installing or upgrading the Real-Time Console Infrastructure product

.......... . . . .............. . . . .............. . . . ............. . . . .............. . . . ........... 10

Prerequisites for using Real-Time Console Infrastructure ........ . . . ......... 10

Where to get more information .. . .............. . . .............. . . . .............. . . . .. 11

Chapter 2 Using Real-Time Console Infrastructure ... . . . ............. . . . .. 13

Collecting Intel AMT and DASH inventory . .............. . . . .............. . . ...... 13

Updating Intel AMT and DASH alert settings .. . . . ............. . . . .............. . 14

Updating Intel AMT credentials .. . . ............. . . . .............. . . . .............. . . . 16

Updating Intel AMT settings .. . . . .............. . . .............. . . . .............. . . . ... 17

Turning on, off, and restarting computers out of band ........... . . . .......... 19

Turning off computers in critical state .... . . . .............. . . .............. . . . ..... 21

Using the Restore State power action ............ . . .............. . . . .............. . 22

Configuring the port check settings .. . . ............. . . . .............. . . . ............ 23

Adding or removing custom views .... . . . . ............. . . . .............. . . . .......... 24

Chapter 3 About Real-Time Console Infrastructure pages ... . . . ...... 25

About the Real-Time Home page .............. . . .............. . . . .............. . . . ... 25

About the Select connection profile page .. . . . ............. . . . .............. . . . .... 25

Glossary .......... . . .............. . . . .............. . . . ............. . . . .............. . . . .............. . . . ............. . . 27

Index ....... . . .............. . . . .............. . . . .............. . . .............. . . . .............. . . . .............. . . ....... 29

Contents

Contents8

Introducing Real-Time
Console Infrastructure

This chapter includes the following topics:

■ About Real-Time Console Infrastructure

■ Installing or upgrading the Real-Time Console Infrastructure product

■ Prerequisites for using Real-Time Console Infrastructure

■ Where to get more information

About Real-Time Console Infrastructure

The Real-Time Console Infrastructure software provides the necessary
infrastructure for one-to-one real-time management using the Altiris™ Real-Time
System Manager and other Altiris software.

Also, Real-Time Console Infrastructure lets you perform one-to-many out-of-band
management tasks on a collection of computers that support ASF, DASH, or Intel®
vPro technology (Intel® AMT). You can perform the following out-of-band tasks:

■ Collect hardware inventory from client computers that support Intel AMT or

DASH.
You can collect inventory even if the computers are not turned on or if the

operating system is not running.
See “Collecting Intel AMT and DASH inventory” on page 13.

■ Configure the default Intel AMT connection, security, and remote power control

settings on the client computers.
See “Updating Intel AMT settings” on page 17.

■ Configure Intel AMT and DASH computers to send alerts.

1

Chapter

Alters can help you respond proactively to memory faults, temperature issues,
hard drive warnings, chassis intrusion, and so forth. Alerts help you fix issues
before they become destructive.

See “Updating Intel AMT and DASH alert settings ” on page 14.

■ Perform power management functions (all technologies).

For example, you can turn on a computer before you deliver a software package
or before you perform a remote BIOS management task.

See “Turning on, off, and restarting computers out of band ” on page 19.

Real-Time Console Infrastructure provides you with the following incident
resolution tools:

■ Port Check

See “Configuring the port check settings” on page 23.

■ Trace Route

You can access the tools from the Resource Manager or from any computer filter.

Installing or upgrading the Real-Time Console
Infrastructure product

Use Symantec Installation Manager to install or upgrade Real-Time Console
Infrastructure.

For more information on installing or upgrading products, see the Symantec
Management Platform Installation Guide.

Prerequisites for using Real-Time Console
Infrastructure

Real-Time Console Infrastructure lets you perform out-of-band management
tasks on the client computers with ASF, DASH, and Intel AMT. Before running
these tasks, you must configure your ASF, DASH, or Intel AMT-capable computers.

Use Altiris™ Out of Band Management Component to discover and configure client
computers with ASF, DASH, and Intel AMT for out-of-band management.

For more information, see the Out of Band Management Component Implementation
Guide.

See “Where to get more information” on page 11.

Introducing Real-Time Console Infrastructure

Installing or upgrading the Real-Time Console Infrastructure product

10

Where to get more information

Use the following documentation resources to learn and use this product.

Table 1-1

Documentation resources

LocationDescriptionDocument

http://kb.altiris.com/

You can search for the product name under
Release Notes.

Information about new features and
important issues.

This information is available as an article in
the knowledge base.

Release Notes

■ The Documentation Library, which is

available in the Symantec Management
Console on the Help menu.

■ The Product Support page, which is

available at the following URL:

http://www.symantec.com/business
/support/all_products.jsp

When you open your product’s support
page, look for the Documentation link
on the right side of the page.

Information about how to use this product,
including detailed technical information and
instructions for performing common tasks.

This information is available in PDF format.

User Guide

The Documentation Library, which is
available in the Symantec Management
Console on the Help menu.

Context-sensitive help is available for most
screens in the Symantec Management
Console.

You can open context-sensitive help in the
following ways:

■ The F1 key

■ The Context command, which is available

in the Symantec Management Console
on the Help menu.

Information about how to use this product,
including detailed technical information and
instructions for performing common tasks.

Help is available at the solution level and at
the suite level.

This information is available in HTML help
format.

Help

In addition to the product documentation, you can use the following resources to
learn about Altiris products.

11Introducing Real-Time Console Infrastructure

Where to get more information

Table 1-2

Altiris information resources

LocationDescriptionResource

http://kb.altiris.com/Articles, incidents, and issues about Altiris

products.

Knowledge base

http://www.symantec.com/connect
/endpoint-management-virtualization

An online magazine that contains best
practices, tips, tricks, forums, and articles
for users of this product.

Symantec Connect

(formerly Altiris Juice)

Introducing Real-Time Console Infrastructure

Where to get more information

12

Using Real-Time Console
Infrastructure

This chapter includes the following topics:

■ Collecting Intel AMT and DASH inventory

■ Updating Intel AMT and DASH alert settings

■ Updating Intel AMT credentials

■ Updating Intel AMT settings

■ Turning on, off, and restarting computers out of band

■ Turning off computers in critical state

■ Using the Restore State power action

■ Configuring the port check settings

■ Adding or removing custom views

Collecting Intel AMT and DASH inventory

You can collect the hardware and the configuration inventory even if the
computers are turned off. The inventory is stored in the NVRAM of properly
configured Intel AMT and DASH computers.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

2

Chapter

To collect Intel AMT or DASH inventory from a client computer

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click System Jobs and Tasks > Real-Time Console
Infrastructure > Get Out-of-Band Inventory.

3

Run the task one time or on a schedule.

For more information, view topics about running and scheduling tasks in the
Symantec Management Platform Help.

Choose a connection profile that is configured with correct Intel AMT or
DASH credentials.

For more information, view topics about connection profiles in the Symantec

Management Platform Help

To view the Intel AMT or DASH inventory for a client computer

1

Open the Resource Manager for a computer by double-clicking on a specific
resource that is found in a filter.

For more information, view topics about the Resource Manager in the
Symantec Management Platform Help.

2

On the View menu, click Inventory.

3

In the tree view pane, expand the Real-Time Console Infrastructure folder
and select an inventory data class.

Updating Intel AMT and DASH alert settings

Intel AMT and DASH alerts can help you be more proactive in responding to
memory faults, temperature issues, hard drive warnings, chassis intrusion, and
so forth. These alerts help you fix issues before they become destructive.

The Update Out-of-Band Alert Settings task lets you remotely update the Intel
AMT and DASH alert settings on properly configured client computers with Intel
AMT or DASH.

You can configure the following alert settings:

■ Where to send the alerts.

■ Which alerts to send.

■ Which alerts to log.

You can run this task even on the computers that are turned off.

Using Real-Time Console Infrastructure

Updating Intel AMT and DASH alert settings

14

This task also lets you configure the SNMP traps destination address for computers
with ASF. However, this functionality is performed in-band, through the WMI
connection. The ASF-capable computer must be turned on with a Microsoft
Windows operating system running.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

To update Intel AMT and DASH alert settings

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click System Jobs and Tasks > Real-Time Console
Infrastructure > Update Out-of-Band Alert Settings.

3

Under Subscription settings, enter the SNMP server’s IP address. This value
is applied to computers with Intel AMT and ASF.

By default, the task is configured with the Notification Server computer’s IP
address. In this case, Event Console (a component of Notification Server),
accepts and displays the SNMP events that the client computers send.

For more information, view topics about alert management in the Symantec
Management Platform Help.

4

Enter the SNMP community string.

Example: public

5

Enter the destination URI for DASH alerts.

By default, the value is set to the Notification Server’s Web service event
listener, which is part of the Pluggable Protocol Architecture component:

http://<Notification Server IP>/Altiris/WSEL/wsel.aspx

Currently, DASH does not support sending alerts through an HTTPS
connection. If your Notification Server is installed on a secure Web site,
configure the wsel.aspx file so that it can be accessed through HTTP.

6

Select the DASH alerts delivery mode.

Choose from the following options:

The DASH client computer does not verify if the event
listener accepted the alert.

Push

The DASH client computer verifies if the event listener
accepted the alert. If no reply is received from the event
listener, the client computer can unsubscribe this particular
event filter (vendor dependent).

Push with acknowledge

15Using Real-Time Console Infrastructure

Updating Intel AMT and DASH alert settings

7

Under Select and configure event filters, click Add, select the alerts that you
want to configure with the task, and then click OK.

8

Under Select and configure event filters, select one or more alerts, and, on
the Actions menu, select what you want to do with this alert.

Choose from the following options:

Activate the alert. When alert triggers, a message is sent to the
destination address that you configured in the Subscription

settings section.

Subscribe

Deactivate the alert, but do not remove it from the memory.Unsubscribe

Remove the alert from the client computer’s memory and
reclaim space.

Remove from client

9

Sometimes the client computer does not have enough free space to fit all of
the alerts that you configured. To allow partial alert subscription, check Allow
partial alert application.

10

To remove all previous alert subscriptions from the client computer and
reclaim space before applying new subscriptions, check Remove 3rd party
filters and alert subscriptions.

11

Click Save Changes.

12

Run the task one time or on a schedule.

For more information, view topics about running and scheduling tasks in the
Symantec Management Platform Help.

Choose a connection profile that is configured withcorrect Intel AMT,DASH,
or WMI credentials.

For more information, view topics about connection profiles in the Symantec

Management Platform Help

Updating Intel AMT credentials

You can update Intel AMT administrative credentials on properly configured
client computers with Intel AMT. The credentials you update with this task are
used for Intel AMT remote access. This task does not update the MEBx credentials,
which are used to access the Intel AMT device locally.

For more information on Intel AMT credentials, see the Out of Band Management
Component Implementation Guide.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

Using Real-Time Console Infrastructure

Updating Intel AMT credentials

16

Warning: After you change administrative credentials on the client computer, it
is possible that you cannot connect to thecomputer using theruntime credentials
any more. This happens because the task does not update the Intel AMT runtime
credentials that are stored in the Intel AMT database.

You can create Intel AMT credentials manually and use them to connect.

For more information, view topics about credential manager in the Symantec
Management Platform Help.

To update Intel AMT credentials

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click System Jobs and Tasks > Real-Time Console
Infrastructure > Update Intel AMT Credentials.

3

Under IntelAMT Credentials, enter new Intel AMT administrative credentials.

4

Click Save changes.

5

Run the task one time or on a schedule.

For more information, view topics about running and scheduling tasks in the
Symantec Management Platform Help.

Choose a connection profile that is configured with correct Intel AMT
credentials.

For more information, view topics about connection profiles in the Symantec

Management Platform Help

Updating Intel AMT settings

You can update the configuration and the network settings of the Intel AMT device
on properly configured client computers with Intel AMT. Also, you canunconfigure
the Intel AMT device.

For more information on Intel AMT configuration, see the Outof Band Management
Component Implementation Guide.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

To update Intel AMT settings

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click System Jobs and Tasks > Real-Time Console
Infrastructure > Update Intel AMT Settings.

17Using Real-Time Console Infrastructure

Updating Intel AMT settings

3

Select which Intel AMT features you want to allow.

You can use this web-based interface for direct remote
management and maintenance of Intel AMT devices.
When enabled, you can access the Intel AMT
management console using the following URL:
http://<Intel_AMT_computer_name>:16992 (or port
16993 for Intel AMT computers configured in secure
mode).

Web user interface

This feature is also known as Serial-over-LAN. It is
used to manage an Intel AMT computer remotely by
encapsulating keystrokes and character display data
in a TCP/IP stream.

Task progress window and
remote control

This feature is also known as IDE-Redirection. It
remotely enables, disables, formats, or configures
individual floppy or IDE CD drives. It also reloads
operating systems and software from remote locations.

Redirect to optical/floppy
drive or image on a server

4

Define the network settings.

Check if you want the Intel AMT device to respond to a ping.Respond to ping

If a VLAN is used, set the VLAN ID, which is used to distinguish
between different VLANs.

Warning: Be careful when configuring the VLAN value. If the

value is incorrect, the Intel AMT device is not accessible.

Use tagged VLAN

5

Click Save changes.

6

Run the task one time or on a schedule.

For more information, view topics about running and scheduling tasks in the
Symantec Management Platform Help.

Choose a connection profile that is configured with correct Intel AMT
credentials.

For more information, view topics about connection profiles in the Symantec

Management Platform Help

Using Real-Time Console Infrastructure

Updating Intel AMT settings

18

To unconfigure Intel AMT devices

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click System Jobs and Tasks > Real-Time Console
Infrastructure > Update Intel AMT Settings.

3

Check Unconfigure Intel AMT and select the unconfiguration method and
the Intel AMT mode to set after unconfiguration.

Choose from the following options:

Removes all Intel AMT settings except for administrative user credentials
and PID-PPS pairs. After partial unconfiguration is complete, the Intel AMT
client computer starts sending configuration requests to the setup and
configuration server (Intel SCS). The computer is not available for
management through the Intel AMT interface until it is configured again
by Intel SCS.

Partial

Removes all settings from the Intel AMT device. You must initialize, set up,
and configure the device again.

If you click this option, you can also select a Small Business or Enterprise
configuration model to set after unconfiguration is complete.

Full

For more information on the Intel AMT initialization, setup,and configuration,
see the Out of Band Management Component Implementation Guide.

4

Click Save changes.

5

Run the task one time or on a schedule.

For more information, view topics about running and scheduling tasks in the
Symantec Management Platform Help.

Choose a connection profile that is configured with correct Intel AMT
credentials.

For more information, view topics about connection profiles in the Symantec

Management Platform Help

Turning on, off, and restarting computers out of band

You can manage the power state of client computers remotely using WMI, Intel
AMT, ASF, and DASH technologies.

For example, you can turn on computers before delivering a software package.
Or you can turn off the computers that have sent critical SNMP alerts to
Notification Server.

19Using Real-Time Console Infrastructure

Turning on, off, and restarting computers out of band

See “Turning off computers in critical state” on page 21.

Real-Time Console Infrastructure always tries to do a graceful Reboot/Reset and

Power Off through the WMI first. If the WMI operation fails, the Power Off,
Reboot/Reset, and Restore State actions perform a hard shutdown (losing all

unsaved data) through ASF, DASH, or Intel AMT. To perform a hard shutdown,
the target computers must support and be properly configured to use these
technologies.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

To manage the power state on the client computers

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click System Jobs and Tasks > Real-Time Console
Infrastructure > Power Management.

3

Under Power action, select the power action to execute.

Choose from the following actions:

Turns on the target computers using the out-of-band
management technology (ASF, DASH, or Intel AMT)
that the target computer is configured to use.

Power On

Attempts to turn off the target computer through WMI.
If WMI fails, a hard shutdown is performed using one
of the out-of-band management technologies.

Power Off

Attempts to restart the target computer through WMI.
If WMI fails, a hard reset is performed using one of the
out-of-band management technologies.

Reboot/Reset

You can use this power action when you include the
power management task in a job. This power action
lets you restore the power state that you changed by
running another power management task earlier in
the job.

For example, you can run the Power On action, and
later in the job, you can run the Restore State action.
The latter turns off the computers that were turned
off, but the computers that were turned on stay turned
on.

You cannot use this power action in a standalone task.

See “Using the Restore State power action ” on page 22.

Restore State

Using Real-Time Console Infrastructure

Turning on, off, and restarting computers out of band

20

4

(Optional) Configure the advanced boot options.

Choose from the following options:

Prevents the users from interacting with the target
computer.

Lock client keyboard

Prevents the users from turning off and restarting
the computer using the buttons that are located
on the computer case.

Disable power buttons

Lets you start the computer without the startup
password.

Bypass computer's startup
password

When the computer starts, it can send the detailed
progress PET events to the SNMP server.

Use the Update Out-of-Band Alert Settings task
to configure the events destination address.

See “Updating Intel AMT and DASH alert settings

” on page 14.

Client's firmware transmits all
progress PET events

Availability of these features depends on the hardware that you use.

5

Click Save changes.

6

Run the task one time or on a schedule.

For more information, view topics about running and scheduling tasks in the
Symantec Management Platform Help.

Choose a connection profile that is configured with correct WMI, ASF, DASH,
or Intel AMT credentials.

For more information, view topics about connection profiles in the Symantec

Management Platform Help

Turning off computers in critical state

Using Real-Time Console Infrastructure with Event Console lets you automatically
turn off the computers that have sent critical SNMP alerts (for example, the
hardware failure alerts) to Notification Server. If the computers support and are
properly configured to use any of the out-of-band management technologies, you
can remotely turn off the computers even if the computers have failed to load an
operating system.

See “Updating Intel AMT and DASH alert settings ” on page 14.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

21Using Real-Time Console Infrastructure

Turning off computers in critical state

To automatically turn off computers in critical state

1

In the Symantec Management Console, on the Settings menu, click All
Settings.

2

In the left pane, click Monitoring and Alerting > Alert Rule Settings.

3

In the right pane, click the Task Rules tab.

4

On the toolbar, click Add.

5

Under Rule, on the toolbar, click Add > Alert protocol.

6

In the Select comparison drop-down list, click equals.

7

In the Enter value drop-down list, click Simple Network Management
Protocol.

8

Under Rule, on the toolbar, click Add > Alert severity.

9

In the Select comparison drop-down list, click equals.

10

In the Enter value drop-down list, click Critical.

11

Under Task, click New.

12

In the Create New Task dialog box, in the left pane, click Real-Time Console
Infrastructure > Power Management.

13

On the right page, click Power Off.

14

Click OK.

15

Turn on the task rule.

To turn on the rule, at the upper right of the page, click the colored circle,
and then click On.

16

Click Save.

Using the Restore State power action

Power Management task's Restore State power action returns computers to the
power state they were in before the previous power action ran.

The Restore State power action lets you perform a job like the following:

■ Run the Power On action to turn on computers.

■ Then run some other task.

■ Then run the Restore State action to restore the power state of the computers.

Using Real-Time Console Infrastructure

Using the Restore State power action

22

In this example, if a computer was turned off, the Restore State action turns off
the computer. If a computer was turned on, the Restore State action keeps the
computer turned on.

The Sample Job is an example of the Restore State power action usage in a job.
For this power action to work, you must configure the Task Input to use the output
from the previous power management task, as shown in the sample job. You can
use the Restore State power action only in a job.

See “Prerequisites for using Real-Time Console Infrastructure” on page 10.

To view the Sample Job

1

In the Symantec Management Console, on the Manage menu, click Jobs and
Tasks.

2

In the left pane, click Samples > Real-Time Console Infrastructure> Sample
Job.

3

On the Sample Job page, under Jobs/Tasks, click the Run "Restore power
state" task.

4

Under Task Input , see how the task input is configured.

Configuring the port check settings

Real-Time Console Infrastructure includes a Port Check tool. This tool lets you
detect which ports are open on the target computer. You can run the Port Check
tool from a computer filter.

You can configure the port check settings that the Port Check tool uses. For
example, you can configure which ports to check.

To run the port check

1

In the Symantec Management Console, on the Manage menu, click Filters.

2

In the left pane, select a filter.

For example, click Computer Filters > All Computers.

3

In the right pane, right-click on a computer resource, and then click Remote
Management > Port check.

To configure port check settings

1

In the Symantec Management Console, on the Settings menu, click All
Settings.

2

In the left pane, click Remote Management > Real-Time Console
Infrastructure > Configuration Settings.

23Using Real-Time Console Infrastructure

Configuring the port check settings

3

On the Configuration Settings page, specify the port check timeout.

Default: 5 seconds.

4

Click Modify to modify the ports to check.

5

In the Modify Ports dialog, add or remove a port.

6

Click OK.

7

Click Save changes.

Adding or removing custom views

You can add or remove custom views, which appear in the Resource Manager's
Real-Time view.

For example, you can add the Linux OpenWSMan view, which is included with
Real-Time Console Infrastructure.

The location of the custom view file is C:\Program

Files\Altiris\RTCI\Web\Samples\Linux-Demo.config

For more information on how to configure the Linux OpenWSMan sample view,
see Altiris Knowledgebase article number 47132
(https://kb.altiris.com/article.asp?article=47132).

To add or remove a custom view

1

In the Symantec Management Console, on the Settings menu, click All
Settings.

2

In the left pane, click Remote Management > Real-Time Console
Infrastructure > Manage Custom Views.

3

On the Manage Custom Views page, add or remove a view.

Using Real-Time Console Infrastructure

Adding or removing custom views

24

About Real-Time Console
Infrastructure pages

This chapter includes the following topics:

■ About the Real-Time Home page

■ About the Select connection profile page

About the Real-Time Home page

The Real-Time Home page is the first page in the Resource Manager's Real-Time
view tree. It displays the connection information for the computer. This page
displays the list of protocols that the target computer supports, and if the target
computer accepts the connection credentials that you provided. The protocols
include WMI, ASF, DASH, Intel AMT, IPMI, and SNMP. Only the protocols that
are turned on in the connection profile are displayed.

If credentials are displayed as invalid, verify that your connection profile is
configured to use the correct credentials.

Under Supported protocols, you can select, add, or modify the connection profile
that you want to use when connecting to the target computer.

For more information, view topics about connection profiles in the Symantec
Management Platform Help.

About the Select connection profile page

On this page you can select the connection profile that you want the task or page
to use when connecting to the target computer.

If you want, you can modify a connection profile, or you can create a new one.

3

Chapter

For more information, view topics about connection profiles in the Symantec
Management Platform Help.

About Real-Time Console Infrastructure pages

About the Select connection profile page

26

Altiris Agent The software that is installed on the computers that you want to manage. It

facilitates interactions between Notification Server and a managed computer.
The agent receives requests for information from Notification Server, sends data
to Notification Server, and downloads files. The Altiris Agent also lets you install
and manage solution plug-ins that add functionality to the agent.

ASF (Alert Standard

Format)

An industry standard-based technology that lets IT administrators manage
computers regardless of the operating system state. ASF provides alerts and power
management functionality as long as the computer is plugged in with an Ethernet
connection. ASF functions through hardware on the networkcard or system board,
a software agent on the client computer, and management software on the server.

Circuit Breaker A security toolset of Intel AMT. This toolset represents a set of hardware-based

network packet filters. IT technicians can apply these filters to computers that
send suspicious network packets to seal infected computers from the rest of the
network.

DNS (Domain Name

System)

A system that converts host names and domain names into IP addresses on the
Internet or on the local networks thatuse the TCP/IP protocol. Forexample, when
a Web site address is given to DNS, DNS servers return the IP address of the server
that is associated with that name.

IDE-R (IDE-Redirection) An Intel AMT built-in hardware capability. It lets IT administrators start a

computer from an image that is stored on the network or on the remotely mounted
CD-ROM or hard drive.

in-band management A type of remote computer management. It requires the target computer's

operating system to be initialized and to function properly.

Intel AMT (Intel Active

Management

Technology)

A solution that is based in hardware and firmware and is connected to the system's
auxiliary power plane. Despite the power state or the operating system state of
the client computer, Intel AMT provides IT administrators with access to alerts,
hardware inventory, power management, circuit breaker, and agent presence
functionality. Intel AMT functionality requires the computer to be plugged into
the power source and connected to the network. Intel AMT functionality does not
require a software agent to be installed on the client computer.

Notification Server The Symantec Management Platform service that communicates with the Altiris

Agent and the CMDB to provide management, security, and administrative
functionality. It processes events, facilitates communications with managed

Glossary

computers, and coordinates the work of theother Symantec Management Platform
services.

out-of-band

management

A type of remote computer management. It lets IT administrators connect to a
computer's management controller when the computer is turned off, in sleep or
hibernate modes, or otherwise unresponsive through the operating system.
Out-of-band management can be performed on the computers that have Intel
AMT, DASH, or ASF-capable network adapters.

PET (Platform Event

Trap)

An event that is originated directly from platform firmware (BIOS) or platform
hardware (ASIC, chipset , or microcontroller) independently of the state of the
operating system or system management hardware. PET events provide advance
warning of possible system failures.

power state The overall power consumption of the system. Six power states exist that range

from S0 (the system is powered on and fully operational) to S5 (the system is
powered off). States S1, S2, S3, and S4 are referred to as sleeping states.

PXE Boot (Pre-Boot

Execution Environment)

An environment to start computers using a network interface independently of
available data storage devices (like hard disks) or installed operating systems. An
administrator can load operating systems and other software onto the device
from a server over the network.

Resource Manager A feature that displays information about a resource, such as its properties and

current state. It also lets you troubleshoot and perform actions on managed
resources.

SOL (Serial-over-LAN) A feature of Intel AMT that redirects console output to a remote terminal. It lets

IT administrators remotely change BIOS settings, repair a computer that cannot
start, and so on.

SOL/IDE-R (Serial-over-

LAN/IDE-Redirection)

The proprietary protocols that are defined for Intel AMT that redirect keyboard,
text, floppy disk, and CD transfers from a local host to a remote workstation.

Symantec Management

Console

The Web-based user interface for managing the Symantec Management Platform
and any other installed solutions.

Symantec Management

Platform

The platform that provides a set of services for IT-related solutions. These services
include security, scheduling, client communications and management, task
execution, file deployment, reporting, centralized management, and CMDB
services.

task An action that is performed on a computer. Server tasks are run on Notification

Server. Client tasks are run on managed computers.

task server A managed computer on which the Task Service plug-in is installed. The task

server lets you sequence tasks and provides automation for Symantec solutions.

Glossary28

A

alerts

configuring 14

C

configuring

alerts 14
Intel AMT credentials 16
Intel AMT device settings 17

port check settings 23
context-sensitive help 11
custom views 24

D

DASH

collecting inventory 13

configuring alerts 14
documentation 11

E

Event Console 21

F

full unconfiguration 17

H

help

context-sensitive 11

I

IDE-R 18
installing

Real-Time Console Infrastructure 10
Intel AMT

changing settings 17

collecting inventory 13

configuring alerts 14

unconfiguring 17

updating credentials 16

Intel AMT (continued)

Web console 18

inventory

collecting 13
viewing 13

M

managing power state 19

P

partial unconfiguration 17
port check

configuring 23

running 23
power management 19
prerequisites 10

R

Real-Time Home page 25
Release Notes 11
restoring power state 22

S

SIM 10
SOL 18
Symantec Installation Manager. See SIM

T

turning on, off, and restarting computers 19

U

unconfiguring

Intel AMT device 17
upgrading

Real-Time Console Infrastructure 10

V

VLAN 18

Index