Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - ... User manual

Novell®
www.novell.com
novdocx (en) 7 January 2010
AUTHORIZED DOCUMENTATION
Novell ZENworks 7.3 Linux Management Installation Guide
ZENworks ® Linux Management
7.3 IR2
February 12, 2010
Installation Guide

novdocx (en) 7 January 2010
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See
the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on
exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export
approvals.
Copyright © 2008-2010 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the online documentation for this and other Novell products, and to get
updates, see the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 7 January 2010
Novell Trademarks
For Novell Trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html)
Third-Party Materials
All third-party trademarks are the property of their respective owners.

4Novell ZENworks 7.3 Linux Management Installation Guide
novdocx (en) 7 January 2010

Contents 5
Contents
novdocx (en) 7 January 2010
About This Guide 9
Part I Overview 11
1 About ZENworks Linux Management 13
1.1 Management Capabilities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
1.1.1 Software Package Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
1.1.2 Policy-Based Device Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
1.1.3 Automated Install and Imaging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1.1.4 Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1.1.5 Inventory Collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1.1.6 ZENworks Linux Management Features Specific to Dell PowerEdge Servers . . . . . 14
1.2 System Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
1.3 System Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
1.4 ZENworks Terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Part II Preparation 21
2 System Requirements 23
2.1 ZENworks Server Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
2.2 Database Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
2.3 Managed Device Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.4 Administration Workstation Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Part III Installation 31
3 Preparing the Database for the ZENworks Data Store 33
3.1 Creating the Database Instance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
3.2 Installing the Oracle Database Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.2.1 Linux x86 32-Bit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.2.2 Linux x86 64-Bit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.3 Configuring Oracle 10g Release 2 or Oracle 11g Release 1 as a Remote Database Server . 35
3.3.1 Configuring Oracle 10g R2 or Oracle 11g R1 as a Remote Database Server on
Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
3.3.2 Configuring Oracle 10g R2 or Oracle 11g R1 as a Remote Database Server on
Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
3.4 Migrating the Data from one Oracle Database to another Oracle Database . . . . . . . . . . . . . . 35
3.5 Gathering the Database Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4 Verifying the RPM Package Signatures 39
5 Installing the ZENworks Primary Server 41
5.1 What the Installation Program Does . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

6Novell ZENworks 7.3 Linux Management Installation Guide
novdocx (en) 7 January 2010
5.2 Installing the ZENworks Server Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
5.3 Supplying Your Product License Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
6 Installing a ZENworks Secondary Server 47
6.1 Determining If a Secondary Server is Needed. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
6.2 Installing the ZENworks Server Software as Secondary Server . . . . . . . . . . . . . . . . . . . . . . . 48
6.3 Defining a Content Replication Schedule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
7 Setting Up Managed Devices 53
7.1 Installing ZENworks Linux Management on SLES 10 IA 64 . . . . . . . . . . . . . . . . . . . . . . . . . . 53
7.2 Installing the ZENworks Agent and Registering the Device. . . . . . . . . . . . . . . . . . . . . . . . . . . 54
7.2.1 Manually Installing the ZENworks Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
7.2.2 Installing the ZENworks Agent by Using the YaST Add-on . . . . . . . . . . . . . . . . . . . . 57
7.2.3 Installing the ZENworks Linux Management Agent by Using AutoYaST. . . . . . . . . . 59
7.2.4 Using the Default ZENworks Linux Management Agent to Install the ZENworks
Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
7.3 Setting Up the Open Enterprise Server 1 after Installing ZENworks Linux Management . . . . 61
7.4 Enabling Dell PowerEdge Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
8 What's Next 67
Part IV Security 69
9 Understanding the Security of ZENworks Linux Management System 71
9.1 Clear Text Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
9.2 Server Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
9.3 ZENworks Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
9.4 Database Connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
9.5 Device Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
9.5.1 Agent Listening Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
9.5.2 Server Listening Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
9.6 Denial-of-Service Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
9.7 Root . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Part V Upgrade 75
10 What’s New in ZENworks Linux Management 77
10.1 What’s New in ZENworks 7.3 Linux Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
10.1.1 Support for New Platforms as Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
10.1.2 Support for New Platforms as Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
10.1.3 Cleaning Up Inactive Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
10.1.4 Setting Bundle Lock from the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
10.1.5 Support for the Oracle 11g Release 1 Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
10.1.6 System Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
10.1.7 Adding a Third-Party Certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
10.1.8 Retaining the Bundle GUID while Mirroring Bundles . . . . . . . . . . . . . . . . . . . . . . . . . 79
10.1.9 Discover Operating System Support Pack Version . . . . . . . . . . . . . . . . . . . . . . . . . . 79
10.2 What’s New in ZENworks 7.3 Linux Management with Interim Release 1. . . . . . . . . . . . . . . . 79
10.2.1 ZENworks Linux Management Server Support for SLES 10 SP3 . . . . . . . . . . . . . . . 79

Contents 7
novdocx (en) 7 January 2010
10.2.2 Support for New Platforms as Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
10.2.3 Mirroring Red Hat Updates from the NU Repository . . . . . . . . . . . . . . . . . . . . . . . . . 80
10.3 What’s New in ZENworks 7.3 Linux Management with Interim Release 2. . . . . . . . . . . . . . . . 80
10.3.1 Support for New Platforms as Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
10.3.2 Support for New Platforms as Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
11 Upgrading to ZENworks 7.3 Linux Management 81
11.1 Upgrading the ZENworks Servers and the Managed Devices to ZENworks 7.3 Linux
Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
11.1.1 Performing an In-Place Upgrade on the ZENworks Primary Server . . . . . . . . . . . . . 83
11.1.2 Performing an In-Place Upgrade on a ZENworks Secondary Server . . . . . . . . . . . . 84
11.1.3 Upgrading Managed Devices Manually . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
11.1.4 Upgrading Managed Devices by Using Upgrade Bundles. . . . . . . . . . . . . . . . . . . . . 85
11.2 Increasing the Security Level After Upgrading a ZENworks Server from ZENworks 7 Linux
Management with IR1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
11.3 Changes to Bundle Schedules in ZENworks 7.3 Linux Management . . . . . . . . . . . . . . . . . . . 90
11.4 Upgrade Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
11.5 Upgrading from ZENworks 7 Linux Management with IR1 or ZENworks 7 Linux Management -
Dell Edition to ZENworks 7.3 Linux Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
11.5.1 Upgrading the Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
11.5.2 Upgrading the Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
11.6 Upgrading from ZENworks 7.2 Linux Management with IR1 or ZENworks 7.2 Linux Management
with IR1 - Dell Edition to ZENworks 7.3 Linux Management . . . . . . . . . . . . . . . . . . . . . . . . . . 95
11.6.1 Upgrading the Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
11.6.2 Upgrading the Managed Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
11.7 Upgrading from ZENworks 7.2 Linux Management with IR2 or ZENworks 7.2 Linux Management
with IR2 - Dell Edition to ZENworks 7.3 Linux Management . . . . . . . . . . . . . . . . . . . . . . . . . . 96
11.7.1 Upgrading the Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
11.7.2 Upgrading the Managed Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
12 Upgrading to ZENworks 7.3 Linux Management with IR1 99
12.1 Upgrading from ZENworks 7.3 Linux Management or ZENworks 7.3 Linux Management - Dell
Edition to ZENworks 7.3 Linux Management with IR1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
12.1.1 Upgrading the Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
12.1.2 Upgrading the Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
12.2 Upgrade Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
13 Upgrading to ZENworks 7.3 Linux Management with IR2 109
13.1 Upgrading from ZENworks 7.3 Linux Management or ZENworks 7.3 Linux Management - Dell
Edition to ZENworks 7.3 Linux Management with IR2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
13.1.1 Upgrading the Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
13.1.2 Upgrading the Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
13.2 Upgrade Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Part VI Appendixes 119
A Additional Installation Information 121
A.1 Installation Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
A.2 Automating Installation of the ZENworks Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
A.3 Installing ZENworks Linux Management on a SLES 9 Server with a Minimal Installation . . . 123

8Novell ZENworks 7.3 Linux Management Installation Guide
novdocx (en) 7 January 2010
A.4 Installing ZENworks Linux Management on a SLES 10 Server with a Customize Installation 123
A.5 Installing ZENworks Linux Management on a SLES 11 Server with a Customize Installation 125
A.6 Installing a ZENworks Server on a Device Configured with DHCP . . . . . . . . . . . . . . . . . . . . 127
A.7 Adding a Third-Party Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
A.7.1 Generate a New Certificate and a New Certificate Signing Request. . . . . . . . . . . . 128
A.7.2 Generate Certificate Signing Request (CSR) from the Existing Keystore . . . . . . . . 128
A.7.3 Import the Signed Certificate into the Keystore . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
A.7.4 Import New PKCS12 Certificate into the Keystore . . . . . . . . . . . . . . . . . . . . . . . . . 128
A.7.5 Import a CA Certificate into the Keystore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
A.7.6 Exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
A.8 Converting a Signed Certificate into PKCS12 Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
B Documentation Updates 131
B.1 February 12, 2010 (Interim Release 2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
B.1.1 Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
B.1.2 Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
B.2 November 4, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
B.3 October 12, 2009 (Interim Release 1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
B.3.1 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
B.3.2 Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
B.3.3 Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
B.3.4 Appendixes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
B.4 July 28, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
B.4.1 Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

About This Guide 9
novdocx (en) 7 January 2010
About This Guide
This Novell ZENworks Linux Management Installation Guide includes information to help you
successfully set up a ZENworks®system. The information in this guide is organized as follows:
Part I, “Overview,” on page 11
Part II, “Preparation,” on page 21
Part III, “Installation,” on page 31
Part V, “Upgrade,” on page 75
Part IV, “Security,” on page 69
Part VI, “Appendixes,” on page 119
Audience
This guide is intended for Novell®ZENworks Linux Management and Dell* PowerEdge* server
administrators.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation, or go to the Novell Documentation Feedback site (http://www.novell.com/
documentation/feedback.html) and enter your comments there.
Additional Documentation
ZENworks Linux Management is supported by other documentation (in both PDF and HTML
formats) that you can use to learn about and implement the product:
Novell ZENworks 7.3 Linux Management Administration Guide
Novell ZENworks 7.3 Linux Management Troubleshooting Guide
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux* or UNIX*, should use forward slashes as required by your software.

10 Novell ZENworks 7.3 Linux Management Installation Guide
novdocx (en) 7 January 2010