6.2 Adding and Configuring Satellite Devices

You can create a new Satellite device or configure an existing Satellite with the Authentication, Content and Collection roles, change its default port, and adjust the schedules for the roles. You can also remove roles from an existing Satellite.

IMPORTANT:Before promoting a managed device as Satellite, ensure that the ZENworks 10 Configuration Management version installed on the managed device is same as that of the Primary Server.

  1. To add a new Satellite into the Server Hierarchy panel, in ZENworks Control Center, click the Configuration tab. In the Server Hierarchy panel, select the check box next to the desired Primary Server, click Action, then click Add Satellite Server.

    or

    To configure an existing Satellite from the Server Hierarchy panel, in ZENworks Control Center, click the Configuration tab. In the Server Hierarchy panel, select the check box next to the Satellite that you want to configure, click Action, then click Configure Satellite Server.

    You can only configure one Satellite at a time.

    or

    To configure an existing Satellite from the device view, in ZENworks Control Center, click the Devices tab, then on the Managed tab, click either Servers or Workstations. In the Servers or Workstations panel, select the check box for the Satellite that you want to configure, click Action, then click Configure Satellite Server.

    You can only configure one Satellite at a time.

    Depending on whether you are adding a new Satellite device or configuring an existing device, the title of the dialog box is different (Add Satellite Server or Configure Satellite Server). The settings and options on each page are similar.

  2. (Conditional) To remove Satellite roles from a device, uncheck the desired role in the Satellite Server Roles section, then click OK.

    You can also use the zman satellite-server-delete (ssd) command to remove roles from a Satellite. For more information, see Satellite Commands in the ZENworks 10 Asset Management Command Line Utilities Reference.

  3. (Conditional) To add a role to a Satellite, select the desired role in the Satellite Server Roles section.

    If the Configure link is disabled for any role, that role is disabled for this device. For example, if the Satellite’s parent Primary Server does not have the Collection role, the Satellite’s Collection role is disabled and cannot be configured. Non-configurable roles that a managed device performs are also listed in the dialog box but cannot be edited.

    See the following sections for more information about each role:

  4. (Optional) In the Port for Content and/or Collection HTTP Requests field, specify the port number.

    The default port is 80. Content and Collection servers share the same Web server and the same port. Make sure that the specified port is not in use.

  5. (Optional) In the Port for authentication Secure HTTPS requests field, specify the port number.

    The default port is 443. This is the port on which the Satellite device listens while communicating with the managed devices. Make sure that the specified port is not in use.

  6. Click OK to save your changes and exit the dialog box.

  7. Repeat the previous steps to configure other Satellites.

6.2.1 Authentication Role

This role helps speed the authentication process by spreading the workload among various devices and by performing authentication locally to managed devices.

Prerequisites to Configure the Authentication Role on a Satellite

If you are using an external certificate, you must complete the following tasks on the Satellite before configuring the Authentication role on a Satellite:

  1. Ensure that the Satellite has its own individual server certificate and the private key.

    For detailed information on how to create to an external certificate and generate the private key, see Creating an External Certificate in the ZENworks 10 Asset Management Installation Guide.

  2. Import the external certificate by using the zac import-authentication-cert (iac) command.

    For more information about zac, view the zac man page (man zac) on the Satellite or see the ZENworks 10 Asset Management Command Line Utilities Reference.

    NOTE:You must import the external certificate each time you promote the Satellite to Authentication role.

Configuring the Authentication Role on a Satellite

  1. (Optional) To configure the Authentication role on a Satellite, select the check box next to Authentication, click Configure to display the Configure Authentication dialog box.

  2. Specify the authentication port.

  3. Select a user source from the User Source drop-down list.

  4. Click Add to display the Add User Source Connections dialog box.

    Fill in the fields:

    Connection Name: (Optional) Specify all or part of the name for the connection to the LDAP directory, then click Filter to display the list of connections that match the criteria.

    If you have many connections in your ZENworks Management Zone, you can use the Connection Name field to display only those connections that match the criteria. For example, to display all connections that contain the word “London,” type London in the Connection Name field, then click Filter.

    Connection Address: (Optional) Specify part of the IP address or DNS hostname of the connection to the LDAP directory, then click Filter to display all connections with that IP address.

    If you have many connections in your ZENworks Management Zone, you can use the Connection Address field to display only those connections that match the criteria. For example, to search for and display all connections that have an IP address starting with 172, type 172 in the Connection Address field, then click Filter.

    User Source Connections: Select the check box next to the connection you want to add.

  5. Click OK to return to the Configure Authentication dialog box.

  6. (Optional) Reorder the connections in the User Source Connection list by selecting a connection’s check box, then clicking Move Up or Move Down.

    The device uses the connections in the order they are listed to authenticate the device to the ZENworks Management Zone.

  7. Click OK to return to the Add Satellite Server or Configure Satellite Server dialog box.

  8. Continue with Step 4.

6.2.2 Collection Role

This role causes the device to collect inventory information and messages (errors, warning, informational, and so forth), then rolls that information up to its parent Primary Server, which in turn either writes to the database directly or passes the information to its parent Primary Server, which does the database writing.

  1. Select the check box next to Collection, then click Configure.

  2. Fill in the field:

    Collection Roll-Up Schedule: Specify the number of days, hours, and minutes for how often you want the collected data to be rolled up from the devices that use it as a collection server.

    The Collection Roll?Up schedule determines how often the collected inventory information is rolled up to the parent Primary Server for inclusion in the ZENworks database. When the information is in the database, it is viewable in ZENworks Control Center.

    To specify the devices that use the Collection Roll-Up role, configure the Closest Server Rules setting in the Management Zone settings on the Configuration page.

  3. Click OK.

  4. Continue with Step 4.

6.2.3 Content Role

This role enables the managed device to distribute content (system updates) to other devices.

When you set up a device to function with a Content role, you must specify a Primary Server as its parent. The device with the Content role receives all content from its parent Primary Server. Any content you want hosted on a Satellite with the Content role must also be hosted on its parent Primary Server. If the content is not hosted on the new Primary Server, it is added.

To specify the devices that need content from this Satellite, configure the Closest Server Rules setting in the Management Zone settings on the Configuration page.

  1. Select the check box next to Content, click Configure, then click Add.

    Fill in the fields:

    Content Type: Select a Content Type (for example, Policy, Non-Patch Bundles, or System Update Server).

    Throttle (in KB/sec): Select the throttle rate. This rate specifies the maximum rate at which content is replicated. The actual rate can be lower, depending on other factors, including the number of downloads.

    Duration: Click the up-arrow or down-arrow to set the content update duration period in minutes. Depending on the Schedule Type and its options you select, you need to be aware of the following:

    • The End Time setting in all three scheduling types (Days of the Week, Month, and Fixed Interval) is not the true end time when the content update stops processing. The end time specifies the end of the time period during which an update can start.

      If you select Days of the Week or Month and set a random start and end time, the update starts between these times and continues for the specified duration. For example, if the Duration is set at the default of 60 minutes and the update starts 10 minutes before the specified end time, content is updated for the entire 60 minutes. The same concept applies for the Fixed Interval schedule. If Duration is set at the default of 60 minutes and the end time does not allow enough time for the specified duration, content is updated for the entire 60 minutes.

    • If the Primary Server contains too much content to update during the specified duration, the update continues at the next regularly scheduled time. Content that already exists on the Satellite device is not updated again. Content that was not updated during the previous update and any new content added to the Primary Server is updated.

    Schedule Type: Select a schedule for how often you want the Satellite’s content to be updated from the parent Primary Server:

    • No Schedule: If you select No Schedule, content is never automatically updated from the parent Primary Server. To manually replicate the content run the zac wake-cdp (cdp) command on the Satellite.

    • Recurring: Select Days of the Week, Monthly, or Fixed Interval, then fill in the fields. For more information, see Section C.4, Recurring.

    Be aware that the cleanup action for content occurs every night at midnight.

    If you do not set a schedule for a particular type of content, the <Default> schedule applies to all content of that type.

  2. Click OK twice to return to the Add Satellite Server or Configure Satellite Server dialog box.

  3. Continue with Step 4.