1E 23.7 (SaaS)

Import template Configuration Items

1. Download the set of template Configuration Items available here 1EClientCIs.zip and unzip to a working directory accessible from a CM console

2. Start the CM console and open the Assets and Compliance workspace

3. Expand the Compliance Settings folder, right-click Configuration Items and select Import Configuration Data to start the Import Configuration Data Wizard

4. From the Import Configuration Data Wizard Select Files page, click Add... and browse to the files extracted from 1EClientCIs.zip. You can select to import all files, or select only those relevant to the modules you want to enable and configure right now, using the above table for reference. Click Open to import the selected files

5. As the Configuration Items have not been signed you will be prompted to confirm that you want to import them - click Yes to import each file, then click Next

6. On the Summary page click Next to import the Configuration Items

7. On the Confirmation page click Close.

   Supported Platforms

   After importing the Configuration Items, double-click each in turn to view the CI properties and review the Supported Platforms tab to ensure all Operating Systems you currently manage are selected. For example, if you are managing Windows Server 2019 with CM CB 1902 or later, you will need to select Windows Server 2019.

If you want to configure 1E

1. Double-click the Configure 1E client in 1E Client Configuration Item to edit its properties

2. Click on the Settings tab, then double-click the Configure 1E client in 1E Client setting

3. From the General tab of the Configure 1E client in 1E Client Properties dialog box, select the Edit Script button under Remediation Script (optional)

4. In the script editor, replace <SERVERFQDN> with the FQDN of your 1E server for both the Switch and BackgroundChannelUrl. If you are using custom ports, then modify these accordingly too, then click OK to save and close the script editor.

5. Click OK on the remaining dialog boxes to save the updated CI and return to Configuration Items in the CM console.

If you want to configure Shopping

1. Double-click the Enable and Configure Shopping module in 1E Client configuration Item to edit its properties

2. Click on the Settings tab, then double-click the Enable and Configure Shopping module in 1E Client setting

3. From the General tab of the Enable and Configure Shopping module in 1E Client Properties dialog box, select the Edit Script button under Remediation Script (optional)

4. In the script editor, replace <<FQDN>> with the FQDN of your Shopping web server (typically this is a DNS alias for the Shopping website host header), then click OK to save and close the script editor

5. Click OK on the remaining dialog boxes to save the updated CI and return to Configuration Items in the CM console.

If you want to configure WakeUp, there are no changes required to the Enable WakeUp module in 1E Client CI, but you will need to modify the WakeUp 7.3 Registry Settings CI as follows:

1. Double-click the WakeUp 7.3 Registry Settings configuration Item to edit its properties

2. Click on the Compliance Rules tab and review the values defined for each of the registry values. To modify any of these, double-click the item and in the Edit Rule dialog box, define the value that should be used:

   • If the AFWebService website is using HTTP, replace the <SERVERFQDN> in the ServiceUrl (HTTP) setting with the FQDN of the web server and ensure the ServiceUrl (HTTPS) value is blank

   • If the AFWebService website is using HTTPS, blank the ServiceUrl (HTTP) value and replace the <SERVERFQDN> in the ServiceUrl (HTTPS) setting

   • When using HTTPS you must also define either CertIssuer or CertSubject setting.

3. Click OK to save the properties and return to Configuration Items in the CM console.

If you want to configure Nomad, there are no changes required to the Enable Nomad module in 1E Client CI, but you will need to modify the Nomad 7.0 Registry Settings CI as follows:

1. Double-click the Nomad 7.1 Registry Settings configuration Item to edit its properties

2. Click on the Compliance Rules tab and review the values defined for each of the registry values. To modify any of these, double-click the item and in the Edit Rule dialog box, define the value that should be used. If you are using ActiveEfficiency you will need to replace the <<AEServerFQDN>> in the PlatformUrl setting with the FQDN of the ActiveEfficiency web server

3. Click OK to save the properties and return to Configuration Items in the CM console.

Create a baseline to configure the 1E Client to include the required Configuration Items as follows:

1. Right-click Configuration Baselines and select Create Configuration Baseline. Enter a suitable name and description.

2. Click the Add button and select Configuration Items from the drop-down list. Select the Configuration Items as follows:

   • To configure 1E with this baseline, select the Configure 1E Client in 1E Client CI and click Add

   • To configure Shopping, select the Enable and Configure Shopping module in 1E Client CI and click Add

   • To configure WakeUp, select the Enable WakeUp module in 1E Client and WakeUp 7.3 Registry Settings CIs and click Add

   • To configure Nomad, select the Enable Nomad module in 1E Client and Nomad 7.0 Registry Settings CIs and click Add

3. When you have added all the CIs you want to include, click OK to save and close the Add Configuration Items dialog box, then click OK to close the Create Configuration Baseline dialog box.

Deploy the Configuration Baseline to systems with the 1E Client installed

1. Right-click the Configuration Baseline created in the previous step and select Deploy

2. In the Deploy Configuration Baselines dialog box check the option Remediate noncompliant rules when supported

3. Click the Browse... button and select a Collection to deploy the baseline to (typically you would use the same Collection that was targeted with the initial 1E Client installation deployment)

4. Modify the scheduling according to your preferences and click OK.