ZENworks/ZCM:What is new

From MicroFocusInternationalWiki
Jump to: navigation, search

Breadcrumb >> ZENworks

It will be difficult to keep abreast of what is new in each release and service pack of ZENworks Configuration Management, but hopefully at least some of the important bits and pieces can be commented on and shared.

Novell has done a really good job with each release or patch.

The official list of What is New can be found here; in Novell's documentation.


11 SP2 (BETA)

ZENworks 11 SP2 is the next release of the ZENworks 11 product family. It includes the new ZENworks Full Disk Encryption product which provides the following capabilities:

  • FDE Centralized, integrated management of Full Disk Encryption for Seagate and ZENworks FDE software encrypted drives
    • Preboot Authentication is set and managed based on user identity in the primary directory structure (Microsoft Active Directory and/or Novell eDirectory™)
    • Designate intruder lock-out policies from the start—and change them as needed.
    • Define what gets encrypted—specific volumes, or everything on a given device.
    • Troubleshoot lost or forgotten passwords through centralized key management that validates users based on a secure combination of challenges, codes, and keys. IT always holds the current key to any encryption operation. Each time a device performs an encryption operation that has a key, the device sends that key to the server to ensure the help desk always has the current key.
    • To reset a password, IT takes users through a challenge sequence. Once IT validates the user's identity, they send the user a code that unlocks the password.
    • Emergency recovery. If a hard drive is damaged or won't boot, IT can physically pull data off of the disk, using a stored key encrypted with a random password. Hackers are locked out, but IT is not. No other encryption solution allows for emergency data recovery – typically the data is simply lost along with the device.
  • Centralized key management and recovery
  • Boot-time authentication Ability to authenticate via either Username / Password or Smartcard at preboot time
  • Ability to suppress preboot authentication
  • Macintosh Support!!!! Support for Macintosh OS-X 10.5 and higher on Intel hardware platforms.
    • remote management
    • inventory
    • bundle management
    • patch management
    • asset management
  • Improved Imaging Speeds Improved Windows 7 imaging performance with Linux based imaging solution
  • Content Export This one is a BIG deal!!!
    • Import/Export content when importing or exporting bundles
zman betf (bundle path) (XML file path) -c

Here are two screen-shots demonstrating how to export a bundle and the content with it. The final results contains the MSI which was a MSI Install action; part of the bundle.

An Example of exporting the registry settings from a bundle.
The actual content that was exported.
    • Registry action export to .reg file
An Example of exporting the registry settings from a bundle.


More can be found here Get automated data protection that locks out threats

Product-Specific Information

Novell ZENworks Full Disk Encryption is a part of the ZENworks 11 platform, but is limited with respect to which devices it can deploy security policies to (effectively a sub-set of all ZENworks 11 the managed devices). This means that it shares a common agent, server and web-based console with all other ZENworks 11 products (ZENworks Configuration Management 11, ZENworks Asset Management 11, ZENworks Patch Management 11). However, the specific capabilities of ZENworks Endpoint Security Management 11 are limited to the managed devices noted here.

You can use Novell ZENworks Full Disk Encryption policies on the following managed devices:

Windows Workstations:

  • Windows 2000 SP4
  • Windows XP SP1, SP2 & SP3
  • Windows Vista (32-bit)
  • Windows 7 (all versions)
  • Please note that the balance of technical information on this page reflects the ZENworks 11 platform.

Managed Devices

You can use Novell ZENworks 11 to manage the following servers, workstations and thin-client sessions:

Linux Servers:

  • SUSE® Linux Enterprise Server 11
  • SUSE Linux Enterprise Server 10
  • Novell Open Enterprise Server 2 (Linux)
  • Red Hat Enterprise Linux 4.6+
  • Red Hat Enterprise Linux 5.3+

Linux Workstations:

  • SUSE Linux Enterprise Desktop 10
  • SUSE Linux Enterprise Desktop 11

Windows Servers:

  • Windows Server 2003 SP1 / SP2 x86, x86-64 (Enterprise and Standard editions)
  • Windows Server 2008 SP1 / SP2 x86, x86-64 (Enterprise and Standard editions)
  • Windows 2008R2 (Enterprise and Standard editions)

Windows Workstations:

  • Embedded XP SP2 / SP3
  • Windows Vista SP1 / SP2 x86, x86-64 (Business, Ultimate, and Enterprise versions only; Home versions are not supported)
  • Embedded Vista SP1 / SP2
  • Windows Embedded Standard 2009
  • Windows Embedded Point of Service
  • Windows XP Professional SP2 / SP3 x86
  • Windows XP Tablet PC Edition SP3 x86
  • Windows 7 x86, x86-64 (Professional, Ultimate, and Enterprise editions)

Thin-client Sessions:

  • Windows Server 2003 SP1 / SP2 x86, x86-64 (Enterprise and Standard editions)
  • Windows Server 2008 SP1 / SP2 x86, x86-64 (Enterprise and Standard editions)
  • Citrix XenApp MetaFrame XP
  • Citrix XenApp Presentation Server 4.0
  • Citrix XenApp 4.5

Inventoried-Only Devices

You can use Novell ZENworks 11 to inventory the following servers and workstations: Servers:

  • AIX 4.3-5.3 IBM pSeries (RS6000)
  • HP-UX 10.20-11.23 HP PA-RISC (HP9000)
  • NetWare 5.1, 6, 6.51
  • OES 2 SP1 x86, x86-64
  • Red Hat Enterprise Linux 2.1-4.x
  • Solaris 2.6-10 Sun SPARC (32 and 64-bit)
  • SLES 8.0-11 (all editions)
  • Windows Server 2003 SP1 / SP2 x86, x86-64 (Enterprise and Standard editions)
  • Windows Server 2008 SP1 / SP2 x86, x86-64 (Enterprise and Standard editions)

Workstations:

  • Mac OS X 10.2.4 or later
  • Red Hat Linux 7.1-9
  • SLED 8.0-11 (all editions)
  • Embedded XP SP2 / SP3
  • Windows Vista SP1 / SP2 x86, x86-64 (Business, Ultimate, and Enterprise versions only; Home versions are not supported)
  • Embedded Vista SP1 / SP2
  • Windows XP Professional SP2 / SP3 x86
  • Windows XP Tablet PC Edition SP3 x86
  • Windows 7 x86, x86-64 (Professional, Ultimate, and Enterprise editions)

Server Requirements

The following lists the general supported server configurations on which you can install Novell ZENworks 11 services.

Windows Servers:

  • Server 2003 R2 x86, x86_64 (Enterprise and Standard editions)
  • Server 2003 SP2 x86, x86_64 (Enterprise and Standard editions)
  • Server 2008 SP1 / SP2 x86, x86_64 (Enterprise and Standard editions)
  • Server 2008 R2 x86_64 (Enterprise and Standard editions)
  • Server 2008 R2 SP1 x86_64 (Enterprise and Standard editions)

Linux Servers:

  • Linux Enterprise Server 10 (SLES 10) SP3/SP4 x86, x86_64 (Intel and AMD Opteron processors)
  • Enterprise Server 2 (OES 2) SP2 / SP3 x86, x86_64
  • 11 SP1 x86, x86_64 (Intel and AMD Opteron processors)
  • Hat Enterprise Linux 5.0 / 5.3 / 5.4 / 5.5 x86, x86_64
  • Hat Enterprise Linux 6.0 x86, x86_64

Database Support

  • Novell ZENworks 11 supports the following databases:
  • Microsoft SQL Server 2008 R2
  • Oracle 11g R2
  • Sybase SQL Anywhere 12


Points to Note

Reporting Server

The Web browsers supported by BusinessObjects Enterprise XI 3.1 (ZENworks Reporting Server) include the following:

Windows Operating System

  • Internet Explorer 8.0
  • Firefox 3.0
  • Firefox 3.5

Linux Operating System

  • Firefox 3.0
  • Firefox 3.5
  • Firefox 5.0

Sticky.gif Note: The Firefox 4.0 browser is not supported.

For more information on the minimum browser requirements, see SAP BusinessObjects Enterprise XI 3.1 SP3 documentation for Windows and Linux supported platforms.

11 SP1

  • Nested Groups - More information here In Microsoft Active Directory and eDirectory, you have groups as a member of another group. This is a really nice feature for ZCM
  • Bundle Blocking Novell Docs on Bundle Blocking
  • Uploading Files into a bundle as single content. Due to the nature of HTTP and that ZCM uses HTTP for transporting content between devices; downloading Bundles can take a really long time. Especially bundles that are large or have a lot of files. Many people will create a self extract exe when creating large bundles as a way to get around this limitation. Now there is a check-box in ZCM that allows this to happen for you. This is a VERY nice performance boost.
  • Schedule Discover Applicable Update Bundles Install This enhancements comes after a long wait for some. It brings some relief for those that were struggling with the default DAU schedules. The schedules can now be set like any other bundle. The Novell docs have more to say about this