Using Guaranteed State
Using Patch Success
Creating the user
These steps create the Tachyon user required by the Tachyon Connector and assigns it to the Management Group Sync Initiators system role.
You need a domain user account in Active Directory, in our example this is ACME\SLATACHYON.
- Logon to the Tachyon Portal using a Tachyon user account with a Permissions Administrators role.
- Open the Settings application.
- Navigate to the Settings→Permissions→Users page.
- Click on the Add button, doing this displays the Add user popup.
- In the Select user field type the name, or part of the name, for the Active Directory user or security group that you want to add. A list of matching names will be retrieved from Active Directory and displayed as you type, these are filtered so that users or groups that have already been added do not appear.
- Select the Active Directory user or security group from the list of matching names displayed in the drop-down list. In our example this is ACME\SLATACHYON.
- Click Add.
- On the Settings→Permissions→Users page, click on the user's name link for ACME\SLATACHYON.
- On the User: SLATACHYON page click the Edit button to display the Edit roles assigned to user popup.
- Select Management Group Sync Initiators.
- Click the Save button.
If you only intend using the Management Group feature then proceed with Configuring the Tachyon connector immediately below.
If you intend using the Tachyon Powered Inventory feature then proceed with Creating the 1E Inventory Instruction Set further below. The Tachyon Powered Inventory feature is a prerequisite for Patch Success.
Configuring the Tachyon connector
These steps add and test a Tachyon connector:
- Navigate to Settings→Configuration→Connectors
- Click on the Add button.
- In the Add connector popup select the Tachyon type.
In Connector name, use the default Tachyon.
In URL, enter location of the Tachyon consumer, in following format
Please note that, as stated above /consumer must be included in the URL, in the same way that Tachyon needs to be added to <TachyonDNSAliasFQDN> when a Tachyon users browses to the Tachyon Portal.
In our example the URL is https://tachyon.acme.local/consumer .
- In User Name, enter the name of the Tachyon user that has permission to run the Tachyon Inventory instructions. In our example this user is ACME\SLATACHYON.
- In Password, enter the password for this account.
- Leave the other fields empty.
Check the Run Consolidation Reports checkbox if you want consolidation actions to be processed each time the Sync Data action is executed for the connector.
This can lead to unnecessary processing if you enable this on more than one connector. The recommended method of processing consolidation actions is to schedule the action Generate Report - Basic Inventory Consolidation to execute after the Sync Data actions have run for all connectors. This will execute the remaining consolidation actions. Alternatively check the Run Consolidation Reports checkbox on one of your connectors. You can view action processes in Settings→Process log .
The Run Consolidation Reports checkbox is available only if you have installed the latest Accumulated Hotfix for Tachyon Platform SLA. This is enabled by default and requires the hotfix in order to disable it.
- Click Add.
You should then test the connector:
- Select the connector you want to test from the list of Connectors by checking the box at the left-hand end of the connector's row.
- Click the Test button.
- The Test status column for the connector will display a clock icon indicating that the test has been queued for executing.
- If the test succeeds Test status will display a check icon and the Last tested column will display the date and time the test succeeded.
- If the test fails the Test status will display a failed icon and you'll need to check the details you entered for the connector.
If you have access to the Process log you can see an entry for the Test action.
The test does not confirm the presence or permissions for the Tachyon Powered Inventory instruction set and its instructions. You will test these later if you intend using the Tachyon Powered Inventory, after you have created its instruction set. The Tachyon Powered Inventory feature is a prerequisite for Patch Success.
If you only intend using the Management Group feature then you have completed the configuration. For information about how to configure and use Management groups please refer to Management groups page.
If you intend using the Tachyon Powered Inventory feature then proceed with Creating the 1E Inventory Instruction Set immediately below.
Creating the 1E Inventory Instruction Set
These steps are only required if you will be using Tachyon Powered Inventory. They create an instruction set called 1E Inventory and a custom role called 1E Inventory Questioners, and assign them to the Tachyon user you created in Creating a user, in our example this is ACME\SLATACHYON.
The 1E Inventory instruction set will contain the 5 instructions listed in the following table:
|Instruction text (ReadablePayload)||Type||Description||Instruction file name||Version|
Which processors are in the device? With a stagger of <limitSecs> seconds.
Inventory - what is the summary of file usage since <startDate>? With a stagger of <limitSecs> seconds.
|Question||Process Usage data inventory for SLA|
Inventory - what software is installed? With a stagger of <limitSecs> seconds.
|Question||Software inventory for SLA|
Inventory - summary of which users have logged on since <startDate>? With a stagger of <limitSecs> seconds.
|Question||User data inventory for SLA|
Returns patch status for 1E Inventory consumption, staggering for <limitSecs> seconds.
The 1E-PatchSuccess-PatchStatus instruction is not required if you do not intend using the Patch Success application, and will not run if you do not have a license for Patch Success. For more information about configuring Patch Success please refer to Configuring Patch Success.
This instruction is part of this 1E Inventory instruction set used by the Tachyon Connector. Do not move it to the 1E Patch Success instruction set used by the buttons visible in the Patch Success application.
|Question||Returns patch status for 1E Inventory consumption|
You can use the Product Pack Deployment tool to simultaneously Upload the instructions and Create the Instruction set, or uses the manual steps below. Either way, you will then need to Assign a role to the Instruction set.
These instructions are included in the 1E Inventory product pack, available in the TachyonPlatform.v5.x.x.x.zip file downloaded from the 1E Support Portal.
Before Tachyon version 5.0, this product pack was copied to disk during installation of Tachyon, and was found in C:\ProgramData\1E\SLA Platform\TachyonProductPack\Inventory\4.x.x.
Upload the instructions
First upload the instructions:
- Download the TachyonPlatform.v5.x.x.x.zip file from the 1E Support Portal .
- Extract the 1E-Inventory.zip from the Classic folder
- Logon to the Tachyon Portal using a Tachyon user account with the Permissions Administrators and Instructions Administrators roles.
- Open the Settings application.
- Navigate to the Settings→Instructions→Instruction sets page.
- Click on the Upload button.
- In the Open dialog navigate to the location of the 1E-Inventory.zip file.
- Select 1E-Inventory.zip and click Open.
Create the Instruction set
All the instructions contained in the zip file will initially be added to the default Unassigned instruction set. Instructions in the Unassigned instruction set cannot be used, so first you will need to create a new instruction set with the verification instructions.
- Select the 5 instructions you want to add to the new set, by clicking the checkbox at the start of each instruction row in the list.
- Click the Add new set button in the button panel to the right of the page.
- In the Add new instruction set popup subsequently displayed, and type:
- 1E Inventory as the name.
- Tachyon Powered Inventory as the description.
- Ensure that the Include 5 selected instructions checkbox is checked.
- Click the Add button to add the new instruction set, with the selected instructions.
Assign a role to the Instruction set
To create a custom role:
- Navigate to the Settings→Permissions→Roles page.
- Click the Add button to start the add role process.
- In the Add role popup subsequently displayed set the name as 1E Inventory Questioners and click the Add button.
- The new role will be added to the Roles table. Locate its entry and click on the link in the Name column for that row.
- Select the Permissions tab and click the Add button.
- In the Add permission popup subsequently displayed, scroll down the Type list and select Instruction set.
- Scroll down the Name list and select the 1E Inventory instruction set.
- Select the Questioner checkbox from the list of permissions.
- Click the Add button.
- Select the Management groups tab and click the Add button.
- In the Add management group popup subsequently displayed, scroll down the list and select All Devices.
- Click the Add button.
- Select the Members tab and click the Add button.
- In the Add role member popup subsequently displayed, search for the user, in our example this is SLATACHYON.
- Click the Add button.
Only select All Devices. Other Management groups may rely on data you collect using the instructions run by the Tachyon connector, therefore you need the instructions to run on All Devices.
To review the user:
- Navigate to the Settings→Permissions→Users page.
- Click on the user's name link for ACME\SLATACHYON and confirm you can see the two roles:
- Management Group Sync Initiators - System
- 1E Inventory Questioners - Custom
Executing the Tachyon Connector Sync Data action
These steps are only required if you will be using Tachyon Powered Inventory. When you've finished setting up the Tachyon connector you will then need to synchronize it to populate an inventory repository with the data from Tachyon.
You can execute the Tachyon Connector Sync Data action in the same way as other connectors, manually or using a schedule, however the Tachyon connector manages its actions differently to other connectors.
First, you should run the Sync Data action manually to confirm it works, in particular to test the user permissions and its ability to run the instructions.
- To manually sync data, please refer to Connectors page: Execute a connector sync action.
- To schedule the sync data action, please refer to Schedules page.
In each case, for our example, you will be running the Sync Data - Tachyon action on the default inventory repository called Default inventory. This will run a sequence of 5 instructions that run over a period of 1 week.
Do not schedule to run more frequently than every week. To understand why, please refer to How Tachyon Powered Inventory works.
You can also review the results as they come in by reviewing the instruction history.
- Switch to the Explorer application.
- Navigate to the Instructions→History page.
- Observe that all 5 instructions are running with a duration of 7 days. This allows any devices coming online during that period will respond.
- Click on any of the 5 instructions to review the response content and status.
If you want to review in detail the data that was imported into the inventory repository, navigate to the SLA Inventory pages:
where <tachyon DNS Name FQDN> is the one set up during the preparation phase, as described under the heading Preparation: DNS Names.
- The Inventory→By Product page shows software details retrieved from the devices that have Tachyon clients.
- The Inventory→By Device page shows hardware and OS details for devices that have Tachyon clients.
- The Inventory→Product Usage page shows the software product usage that has been retrieved from devices that have Tachyon clients.
The above data from Tachyon clients may be consolidated with data from other inventory sources using their inventory connectors.
How Management Group Synchronization works
The SLA components are responsible for storing information about management groups, including group definitions and membership in the SLA databases. Tachyon maintains a synchronized copy in the Tachyon Master databases. Whenever SLA Engine evaluates group membership and it detects changes it notifies Tachyon by initiating a sync. Tachyon Coordinator service receives the sync, fetches the changes, and updates the Tachyon Master database. To contact Tachyon, the SLA Engine uses the URL of the Consumer defined in the Tachyon Connector and the Network Service account is a member of the Tachyon system role Management Group Sync Initiators role.
Membership evaluations occur whenever an inventory repository is updated by a manual or scheduled Connector Sync Data action, or the Evaluate button is pressed, as described in the Management groups page.
How Tachyon Powered Inventory works
1E Inventory instructions
The Tachyon connector works differently compared with other connectors. Other connectors import data in a single operation, whereas a Tachyon connector sync issues a set of instructions, and then makes a series of regular polls to collect responses while the instructions are still running. By default, the instructions run for one week, ensuring that each device responds at least once a week, if online. The default behavior is controlled using settings for the inventory repository in the SLA-Data database. These must not be changed unless otherwise instructed by 1E.
When a Tachyon connector sync is actioned, either manually using Create a new action, or as a scheduled sync, the following happens.
- The SLA Engine asks Tachyon to run each instruction
- Each instruction runs for 1 week, known as a gather period
- Tachyon sends each instruction to all devices at the same time
- Devices respond immediately if they are online, or catch-up shortly after coming online
- Each device will respond only once to each instruction during the gather period
- Each instruction has a short random delay before the device sends its response back to the Tachyon server
- Responses are stored in the Tachyon database and only deleted at the end of the gather period plus a 10-minute keep period
- The SLA Engine regularly polls Tachyon
- The first poll is 10 minutes after starting the instruction run, and fetches all the responses so far
- Subsequent polls are at regular 24 hour intervals until the end of the 1-week gather period to fetch responses from devices that were previously offline
- Data is stored in the inventory repository, and kept after the Tachyon deletes its copy of the date
Devices only appear in the inventory repository if they respond, or if they have previously responded to a previous sync.
Tachyon has minimal impact on the network and client devices when the instructions are run and responses are sent back to the Tachyon server. The low impact is further reduced by the random delay used by each instruction.
During each poll there is a small performance impact on the Tachyon server (master stack) and SLA components, when the initial responses are processed, and when the deltas are processed for subsequent polls, for other machines coming online.
Tachyon client configuration
Process and User usage capture is available only on Windows devices.
Tachyon Agent for Windows version 3.2 or later, or 1E Client 4.1 or later is required, with the following Tachyon client features enabled:
- Module.Inventory.Enabled=true (default, and this setting is visible in the 1E Client configuration file)
- Module.Inventory.ProcessUsage.Enabled=true (default - in 3.3 this was also true by default, but in 4.0 it was false by default)
- Module.Inventory.UserUsage.Enabled=true (default)
For more detail about configuring these and other settings in 1E Client, please refer to Tachyon client settings: Inventory module settings.
Tachyon License details
Ensure your Tachyon License file has the Inventory consumer enabled and includes the pattern for 1E-Inventory-*
You can view your Tachyon license details using either of the following methods:
- in the Tachyon Admin web portal, under License info, look in the Products section and expand Features and instruction items
- in the license file Tachyon.LIC found in C:\ProgramData\1E\Licensing
If the pattern does not exist, then the 1E-Inventory instructions will not run. You may have an old version of Tachyon, or your license needs to be updated.