10.2 Adding and Configuring Satellite Devices

You can create a new Satellite device or configure an existing Satellite with the Authentication, Content, Imaging, and Collection roles, change its default port, and adjust the schedules for the roles. You can also remove roles from an existing Satellite.

Before promoting a managed device as a Satellite, ensure to review the following guidelines:

The ZENworks version installed on the managed device must be same as that of the Primary Server.
You cannot promote the following devices as a Satellite:
- A managed device that has a previous version of ZENworks Adaptive Agent () installed.
- A ZENworks 11 test device.
You cannot change the Satellite roles and settings for the existing Satellites.

To add and configure Satellites:

To add a new Satellite into the Server Hierarchy panel, in ZENworks Control Center, click the Configuration tab. In the Server Hierarchy panel, select the check box next to the desired Primary Server, click Action, then click Add Satellite Server.

or

To configure an existing Satellite from the Server Hierarchy panel, in ZENworks Control Center, click the Configuration tab. In the Server Hierarchy panel, select the check box next to the Satellite that you want to configure, click Action, then click Configure Satellite Server.

You can only configure one Satellite at a time.

or

To configure an existing Satellite from the device view, in ZENworks Control Center, click the Devices tab, then on the Managed tab, click either Servers or Workstations. In the Servers or Workstations panel, select the check box for the Satellite that you want to configure, click Action, then click Configure Satellite Server.

You can only configure one Satellite at a time.

Depending on whether you are adding a new Satellite device or configuring an existing device, the title of the dialog box is different (Add Satellite Server or Configure Satellite Server). The settings and options on each page are similar.

You can also use the zman satellite-server-create (ssc) command to add or configure roles for a Satellite. For more information, see Satellite Commands in the ZENworks 11 Command Line Utilities Reference.
(Conditional) To remove Satellite roles from a device, deselect the desired role in the Satellite Server Roles section, then click OK.

You can also use the zman satellite-server-delete (ssd) command to remove roles from a Satellite. For more information, see Satellite Commands in the ZENworks 11 Command Line Utilities Reference.
(Conditional) To add a role to a Satellite, select the desired role in the Satellite Server Roles section.

If the Configure link is disabled for any role, that role is disabled for this device. For example, if the Satellite’s parent Primary Server does not have the Collection role, the Satellite’s Collection role is disabled and cannot be configured. Non-configurable roles that a managed device performs are also listed in the dialog box but cannot be edited.

See the following sections for more information about each role:
(Optional) In the Port for Content and/or Collection HTTP Requests field, specify the port number.

The default port is 80. Content and Collection servers share the same Web server and the same port. Make sure that the specified port is not in use.
(Optional) In the Port for authentication Secure HTTPS requests field, specify the port number.

The default port is 443. This is the port on which the Satellite device listens while communicating with the managed devices. Make sure that the specified port is not in use.
Click OK to save your changes and exit the dialog box.
Repeat the previous steps to configure other Satellites.
Specify the devices that need to use this Satellite for the Collection Roll-Up, Content, Authentication and Imaging roles.
To configure the Location Closest Server for this Satellite:
1. On the Configuration page, click the Locations tab.
2. In the Locations panel, click the location for which you want to configure the Closets Servers rules.
3. Click the Severs tab.
4. Configure the location closest servers.

10.2.1 Authentication Role

This role helps speed the authentication process by spreading the workload among various devices and by performing authentication locally to managed devices.

Prerequisites to Configure the Authentication Role on a Satellite

If you have installed ZENworks 11 with external certificates, you must complete the following tasks on the Satellite before configuring the Authentication role on a Satellite:

Ensure that the Satellite has its own individual server certificate and private key.

For detailed information on how to create to an external certificate, see Creating an External Certificate in the ZENworks 11 Server Installation Guide.
Import the external certificate by using the zac iac command.

For more information about zac, view the zac man page (man zac) on the Satellite or see the ZENworks 11 Command Line Utilities Reference.

NOTE:You must import the external certificate each time you promote the Satellite to Authentication role.

Configuring the Authentication Role on a Satellite

(Optional) To configure the Authentication role on a Satellite, select the check box next to Authentication, click Configure to display the Configure Authentication dialog box.
Specify the authentication port.
Select a user source from the User Source drop-down list.
Click Add to display the Add User Source Connections dialog box.

Fill in the fields:

Connection Name: (Optional) Specify all or part of the name for the connection to the LDAP directory, then click Filter to display the list of connections that match the criteria.

If you have many connections in your ZENworks Management Zone, you can use the Connection Name field to display only those connections that match the criteria. For example, to display all connections that contain the word “London,” type London in the Connection Name field, then click Filter.

Connection Address: (Optional) Specify part of the IP address or DNS hostname of the connection to the LDAP directory, then click Filter to display all connections with that IP address.

If you have many connections in your ZENworks Management Zone, you can use the Connection Address field to display only those connections that match the criteria. For example, to search for and display all connections that have an IP address starting with 172, type 172 in the Connection Address field, then click Filter.

User Source Connections: Select the check box next to the connection you want to add.
Click OK to return to the Configure Authentication dialog box.
(Optional) Reorder the connections in the User Source Connection list by selecting a connection’s check box, then clicking Move Up or Move Down.

The device uses the connections in the order they are listed to authenticate the device to the ZENworks Management Zone.
Click OK to return to the Add Satellite Server or Configure Satellite Server dialog box.
Continue with Step 4.

10.2.2 Collection Role

This role causes the device to collect inventory information, messages (errors, warning, informational, and so forth), and policy and bundle statuses, then rolls that information up to its parent Primary Server, which in turn either writes to the database directly or passes the information to its parent Primary Server, which does the database writing.

Select the check box next to Collection, then click Configure.
Fill in the field:

Collection Roll-Up Schedule: Specify the number of days, hours, and minutes for how often you want the collected data to be rolled up from the devices that use it as a collection server.

The Collection Roll‑Up schedule determines how often the collected inventory information is rolled up to the parent Primary Server for inclusion in the ZENworks database. When the information is in the database, it is viewable in ZENworks Control Center.
Click OK.
Continue with Step 4.

10.2.3 Content Role

This role enables the managed device to distribute content (bundles, policies, system updates, and patches) to other devices.

When you set up a device to function with a Content role, you must specify a Primary Server as its parent. The device with the Content role receives all content from its parent Primary Server. Any content you want hosted on a Satellite with the Content role must also be hosted on its parent Primary Server. If the content is not hosted on the new Primary Server, it is added.

Select the check box next to Content, click Configure, then click Add.

Fill in the fields:

Content Type: Select a Content Type (for example, Policy, Non-Patch Bundles, or System Update Server).

NOTE:If you choose Imaging as the Content Type and configure the settings to replicate the Imaging content, these settings are automatically reflected in the Configure Imaging Content Replication dialog box invoked while configuring the Imaging role to the device. Similarly, the Imaging content replication settings configured while configuring the Imaging role to a device are automatically reflected in the Configure Content Type Replication dialog box invoked while configuring the Content role with the Imaging content type to the device.

Throttle (in KB/sec): Select the throttle rate. This rate specifies the maximum rate at which content is replicated. The actual rate can be lower, depending on other factors, including the number of downloads.

Duration: Click the up-arrow or down-arrow to set the content update duration period in minutes. Depending on the Schedule Type and its options you select, you need to be aware of the following:
- The End Time setting in all three scheduling types (Days of the Week, Month, and Fixed Interval) is not the true end time when the content update stops processing. The end time specifies the end of the time period during which an update can start.
  
  If you select Days of the Week or Month and set a random start and end time, the update starts between these times and continues for the specified duration. For example, if the Duration is set at the default of 60 minutes and the update starts 10 minutes before the specified end time, content is updated for the entire 60 minutes. The same concept applies for the Fixed Interval schedule. If Duration is set at the default of 60 minutes and the end time does not allow enough time for the specified duration, content is updated for the entire 60 minutes.
- If the Primary Server contains too much content to update during the specified duration, the update continues at the next regularly scheduled time. Content that already exists on the Satellite device is not updated again. Content that was not updated during the previous update and any new content added to the Primary Server is updated.
Schedule Type: Select a schedule for how often you want the Satellite’s content to be updated from the parent Primary Server:
- No Schedule: If you select No Schedule, content is never automatically updated from the parent Primary Server. To manually replicate the content run the zac wake-cdp (cdp) command on the Satellite.
- Recurring: Select Days of the Week, Monthly, or Fixed Interval, then fill in the fields. For more information, see Section C.4, Recurring.
  NOTE:
  We recommend you to set the schedule to 12 hours.
Be aware that the cleanup action for content occurs every night at midnight.

If you do not set a schedule for a particular type of content, the <Default> schedule applies to all content of that type.
Click OK twice to return to the Add Satellite Server or Configure Satellite Server dialog box.
Continue with Step 4.
(Optional) Specify the content to host on the Content Server. For more information, see Section 13.2.4, Including or Excluding Content.

If you want to specify the content that the Satellite hosts, you can include or exclude content from being replicated to it.

If you want to include content that its parent Primary Server does not have, you must first add the content to the parent Primary Server.

10.2.4 Imaging Role

Selecting this option installs the Imaging services and adds the Imaging role to the device. With this role, the device can be used as an Imaging server to perform all the Imaging operations, such as taking an image, applying an image, and multicasting an image. However, the ZENworks images are not replicated from the Primary Server to Imaging Satellites.

NOTE:The Imaging role is tied to the state of your ZENworks Configuration Management license. If your license state is deactivated, the Imaging role is disabled. For example, if you have a licensed copy of ZENworks Asset Management and you are evaluating ZENworks Configuration Management, the Imaging role is disabled if your ZENworks Configuration Management license expires. For more information, see Section 5.5, Possible License State Changes.

Select the check box next to Imaging, then click Configure.
(Conditional) Select the check box next to Enable PXE Services to automatically start the Proxy DHCP service on the device to which the Imaging Server role has been assigned.

To check whether the Proxy DHCP service has been started on the device, review the message log of the device (Devices tab > Workstations folder > click the workstation > Summary > Message Log panel).
(Conditional) Select the check box next to Delete Image Files from the Server if Imaging Role is Removed if you want the ZENworks image files to be automatically deleted from the device when the Imaging role is removed from the device.

The messages are logged in the Message Log panel if the severity level of the local file and the system log is set to Information and Above on the Local Device Logging page. (Configuration tab > Device Management > Local Device Logging).

This option is available only when you want to remove the Imaging Server role from the device.
Click Options next to Configure Imaging Content Replication to launch the Configure Imaging Content Replication dialog box.

The Configure Imaging Content dialog box lists a default configuration that applies to the imaging content, with a fixed interval schedule of every five minutes, no throttling, and a 60-minute content replication period.
Configure the Imaging content replication settings.
1. Select a throttle rate (in KB/sec). This rate specifies the maximum rate at which content is replicated. The actual rate can be lower, depending on other factors, including the number of downloads.
2. Select the duration of the content replication.
  
  When you set the duration, be aware of the following:
  - The End Time setting in all three scheduling options in the Recurring schedule type (Days of the Week, Month, and Fixed Interval) is not the end time when the content stops replicating. The start and end time settings specify the time period during which a replication can start.
    
    If you select Days of the Week or Month and set a random start and end time, the replication starts between these times and continues for the specified duration. For example, if the Duration is set at the default of 60 minutes and replication starts 10 minutes before the specified end time, content is replicated for the entire 60 minutes. The same concept applies for the Fixed Interval schedule. If Duration is set at the default of 60 minutes and the end time does not allow enough time for the specified duration, content is replicated for the entire 60 minutes.
  - If the Primary Server contains too much content to replicate during the specified duration, the replication continues at the next regularly scheduled time. Content that already exists on the Satellite device is not replicated again. Content that was not replicated during the previous replication session and any new content added to the Primary Server is replicated.
3. Select a schedule (No Schedule or Recurring).
  
  The Imaging Content Replication schedule determines how often the imaging content is sent down from the parent Primary Server to its child Satellite. Be aware that the cleanup action for content occurs every night at midnight.
  
  If you do not set a schedule, the <Default> schedule applies to the Imaging content.
4. Click OK to save the changes.
  
  NOTE:You can also configure the Imaging content replication settings while configuring the Content role to a device. These settings are automatically reflected in the Configure Imaging Content Replication dialog box invoked while configuring the Imaging role to the device. Similarly, the Imaging content replication settings configured while configuring the Imaging role to a device are automatically reflected in the Configure Content Type Replication dialog box invoked while configuring the Content role with Imaging content type to the device.
Click OK.
(Conditional) If you configure the Imaging role, the role is immediately added to the device. If the role is not immediately added, it is added only during the next device refresh schedule. If you want to immediately apply the role to the device, manually refresh the device in one of the following ways:
- In the ZENworks Control Center, click the Configuration tab > the Server Hierarchy, select the check box next to the devices you want to refresh, then click Action > Refresh Device.
- On a managed device, do one of the following:
  - Right-click the icon, then click Refresh.
  - Execute the zac ref command from the console prompt.
To check whether the Proxy DHCP service has been started on the device, review the message log of the device (Devices tab > Workstations folder > click the workstation > Summary > Message Log panel or Devices tab > Servers folder > click the server > Summary > Message Log panel).

The messages are logged in the Message Log panel only if the severity level of the local file and the system log is set to Information and Above on the Local Device Logging page. (Configuration tab > Device Management > Local Device Logging).
(Conditional) If the Linux Satellite has the Imaging role configured, turn off the firewall on the device before performing imaging operations.