Symantec ALTIRIS DEPLOYMENT SOLUTION 7.1 - FOR DELL SERVERS... User manual

Altiris™Deployment Solution
for Dell Servers from
Symantec
Version 7.1

Altiris™Deployment Solution for Dell Servers from
Symantec User Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Documentation version 7.1
Legal Notice
Copyright © 2010 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo are trademarks or registered trademarks of Symantec
Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks
of their respective owners.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED
IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in
Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release,
performance, display or disclosure of the Licensed Software and Documentation by the U.S.
Government shall be solely in accordance with the terms of this Agreement.

Symantec Corporation
20330 Stevens Creek Blvd.
Cupertino, CA 95014
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group works with Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.
Symantec’s maintenance offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■Telephone and Web-based support that provides rapid response and
up-to-the-minute information
■Upgrade assurance that delivers automatic software upgrade protection
■Global support that is available 24 hours a day, 7 days a week
■Advanced features, including Account Management Services
For information about Symantec’s Maintenance Programs, you can visit our Web
site at the following URL:
www.symantec.com/techsupp/
Contacting Technical Support
Customers with a current maintenance agreement may access Technical Support
information at the following URL:
www.symantec.com/techsupp/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■Product release level
■Hardware information
■Available memory, disk space, and NIC information
■Operating system

■Version and patch level
■Network topology
■Router, gateway, and IP address information
■Problem description:
■Error messages and log files
■Troubleshooting that was performed before contacting Symantec
■Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/techsupp/
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/
Customer Service is available to assist with the following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates, such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade assurance and maintenance contracts
■Information about the Symantec Buying Programs
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs or manuals

Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
[email protected]Asia-Pacific and Japan
[email protected]Europe, Middle-East, and Africa
[email protected]North America and Latin America
Additional enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
These solutions provide early warning of cyber attacks, comprehensive threat
analysis, and countermeasures to prevent attacks before they occur.
Symantec Early Warning Solutions
These services remove the burden of managing and monitoring security devices
and events, ensuring rapid response to real threats.
Managed Security Services
Symantec Consulting Services provide on-site technical expertise from
Symantec and its trusted partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include assessment, design,
implementation, monitoring, and management capabilities. Each is focused on
establishing and maintaining the integrity and availability of your IT resources.
Consulting Services
Educational Services provide a full array of technical training, security
education, security certification, and awareness communication programs.
Educational Services
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.symantec.com
Select your country or language from the site index.

Technical Support ............................................................................................... 4
Chapter 1 Introducing Deployment Solution for Dell
Servers .............................................................................. 9
About Deployment Solution for Dell Servers ....................................... 9
Chapter 2 Getting started with Deployment Solution for Dell
Servers ............................................................................. 11
Using Deployment Solution for Dell Servers ...................................... 11
Creating a PXE pre-OS image for a Dell server ................................... 13
Installing WinRM ......................................................................... 15
Chapter 3 Provisioning Dell servers ................................................... 17
About zero-touch provisioning ....................................................... 17
Creating provisioning credentials ................................................... 18
Provisioning a Dell server .............................................................. 19
Adding a certificate trust list to IIS .................................................. 21
Chapter 4 Creating tasks and jobs on Dell servers ......................... 23
About deployment tasks and jobs for Dell servers ............................... 23
About DTK tasks for Dell servers ..................................................... 24
About Lifecycle Controller tasks for Dell servers ................................ 25
Creating a deployment task for a Dell server ..................................... 26
Viewing a log file for a task ............................................................ 27
Chapter 5 Configuring BIOS, DRAC, and RAID ................................. 29
About configuration files ............................................................... 29
Configure BIOS - Advanced task type ............................................... 30
Configure BIOS - Simple task type ................................................... 31
Configure DRAC - Advanced task type .............................................. 32
Configure DRAC - Simple task type .................................................. 32
Configure RAID - Advanced task type .............................................. 33
Defining rules for RAID configurations ............................................ 34
Contents

Chapter 6 Performing a scripted OS installation ............................ 37
Performing a scripted OS installation without PXE ............................. 37
Open access to drivers task type ..................................................... 39
Copy Dell WinPE ISO to Vflash task type .......................................... 40
Boot to ISO on Vflash task ............................................................. 40
Boot to Dell ISO on network task ..................................................... 41
Copy Windows 2008 SOI drivers task ............................................... 41
Close access to drivers task ............................................................ 42
Modifying the answer file .............................................................. 42
Index .................................................................................................................... 45
Contents8

Introducing Deployment
Solution for Dell Servers
This chapter includes the following topics:
■About Deployment Solution for Dell Servers
About Deployment Solution for Dell Servers
You can remotely manage and automate the administration of your Dell servers
using Deployment Solution for Dell Servers.
See “Using Deployment Solution for Dell Servers”on page 11.
This software addition to Deployment Solution lets you manage your Dell servers.
You can create tasks from the predefined task types that Deployment Solution
for Dell provides. These tasks can configure your BIOS interfaces, DRAC (Dell
remote access controller) cards, and RAID systems. You can also create a task to
define dynamic types of RAID configurations. You can install an operating system
using a scripted install or image and update hardware configurations.
See “About deployment tasks and jobs for Dell servers”on page 23.
You can also use Deployment Solution for Dell to remotely provision servers using
zero-touch functionality. You can remotely install servers out of the box and
manage those servers across their life cycle.
See “Provisioning a Dell server”on page 19.
You should already be familiar with Deployment Solution and how to use its
features, such as:
■Creating a deployment task
■Scheduling a deployment task
1
Chapter

■Checking the state of a task
■Combining tasks into jobs
For more information, see the Deployment Solution Help. You can access this guide
from the Symantec Management Console on the Help > Documentation Library
menu.
Introducing Deployment Solution for Dell Servers
About Deployment Solution for Dell Servers
10

Getting started with
Deployment Solution for
Dell Servers
This chapter includes the following topics:
■Using Deployment Solution for Dell Servers
■Creating a PXE pre-OS image for a Dell server
■Installing WinRM
Using Deployment Solution for Dell Servers
You can use Deployment Solution for Dell in many ways to manage your Dell
servers.
You can also perform a scripted OS installation.
See “Performing a scripted OS installation without PXE”on page 37.
Table 2-1 describes one way you can use Deployment Solution for Dell to manage
your Dell servers.
2
Chapter

Table 2-1 Process for using Deployment Solution for Dell Servers
DescriptionActionStep
You can use PXE to boot your Dell servers
using a network interface. You use a pre-OS
configuration to create a PXE image. Tasks can
then access and use that specific image.
See “Creating a PXE pre-OS image for a Dell
server”on page 13.
(Optional) Create a PXE
pre-OS image for a Dell
server.
Step 1
You don’t have to use PXE to set up your Dell
servers for the first time. You can use
provisioning. Provisioning lets you
communicate with each server to direct what
tasks to run. You can use zero-touch
functionality to boot into a network ISO, set
up your hardware, or perform a scripted OS
installation. Provisioning lets you complete all
of these tasks without using PXE.
See “About zero-touch provisioning”
on page 17.
If you don’t want to provision your Dell
servers, skip to Step 5.
(Optional) Use
provisioning to set up your
servers.
Step 2
WinRM lets you communicate with the DRAC
card on each of your servers. It is Microsoft’s
standard for remote management and allows
administrators to remotely execute and
manage Windows computers. You must install
WinRM to use some of the provisioning tasks
that are provided in Deployment Solution for
Dell.
See “Installing WinRM”on page 15.
Install WinRM.Step 3
You need to create the credentials that you
want to use with all of the tasks that require
authentication.
WS-MAN is the protocol that the DRAC card
uses to communicate. By creating the WS-MAN
credentials, you can log on to the DRAC and
boot to a network ISO or manage other features
of the server.
See “Creating provisioning credentials”
on page 18.
Create the provisioning
credentials.
Step 4
Getting started with Deployment Solution for Dell Servers
Using Deployment Solution for Dell Servers
12

Table 2-1 Process for using Deployment Solution for Dell Servers (continued)
DescriptionActionStep
You can manage your Dell servers using tasks
and jobs. Tasks are individual processes, such
as booting to a network ISO or configuring a
DRAC card. Each task can then be scheduled
and run.
Deployment Solution for Dell includes a
number of predefined tasks types that you can
use to create tasks.
See “About deployment tasks and jobs for Dell
servers”on page 23.
Create Dell tasks.Step 5
You can combine your Dell tasks into a
comprehensive job that handles the setup and
maintenance of your Dell servers.
As one of the Dell jobs, you can use
provisioning to set up your brand new servers,
without using PXE. By communicating with
the server’s DRAC card, you can use zero-touch
functionality to remotely set up any servers
in your environment.
See “About zero-touch provisioning”
on page 17.
See “Provisioning a Dell server”on page 19.
For more information, view topics about
combining tasks into jobs in the Deployment
Solution Help.
Combine your tasks into
jobs.
Step 6
Creating a PXE pre-OS image for a Dell server
Pre-boot eXecution Environment (PXE) is an environment that you can use to boot
computers using a network interface. This process is independent of your hard
disks or installed operating systems. The site server components in Deployment
Solution include PXE.
For more information, view topics on site server components and PXE in the
Deployment Solution Help.
The Preboot Configuration page lets you add a new policy for a pre-OS
configuration. After you create a configuration policy, you can use it to create a
13Getting started with Deployment Solution for Dell Servers
Creating a PXE pre-OS image for a Dell server

PXE image. Tasks can then access and use that pre-OS configuration-based image.
The pre-OS configuration can also be used to create installation files.
This process also creates a resource that can be used to reboot to a task. You can
use the resource to reboot to any job that requires you to reboot to PXE.
If the pre-OS policy is enabled, the server starts building the PXE image after the
server requests an updated configuration. Be aware that new policies or newly
scheduled policies can take up to an hour to load. After the policies are loaded,
the process to create a PXE image takes approximately 20 minutes.
Before you run this task, you need to boot the server into the pre-OS environment.
Make sure that your PXE server is configured to respond to unknown computers.
For more information on PXE server configuration, see the Deployment Solution
Help.
See “Using Deployment Solution for Dell Servers”on page 11.
To create a PXE pre-OS image for a Dell server
1In the Symantec Management Console, on the Settings menu, click All
Settings.
2In the left pane, expand the Settings>DeploymentandMigration>Symantec
Boot Services (PXE) folders.
3Click Preboot Configurations.
4In the right pane, click Add.
5On the Add Preboot Configuration page, enter a name and description for
your pre-OS configuration.
6Select the WinPE operating system from the drop-down menu.
7Select the x86 architecture.
8Select the Dell OEM extension from the drop-down menu.
9Select the pre-OS environment to build.
■PXE - This pre-OS configuration can be accessed only from the PXE server.
Only the client computers that are configured to boot to and from their
network card can access the configuration.
■Automation folder - This pre-OS configuration can be installed on the
client computer by using policies. Be careful when using Automation
folders with RAID configurations. When you perform a RAID configuration,
you clear the Automation folder.
See “Configure RAID - Advanced task type”on page 33.
See “Defining rules for RAID configurations”on page 34.
Getting started with Deployment Solution for Dell Servers
Creating a PXE pre-OS image for a Dell server
14

■Both PXE and Automation folder - This option builds both types of
configurations.
10 Click OK.
11 Ensure that the policy is enabled.
A green On symbol shows in the top right corner.
12 Click Save changes.
Installing WinRM
WinRM is short for Windows Remote Management, which is freely available from
Microsoft. It is the Microsoft standard for remote management and allows
administrators to remotely execute and manage Windows computers.
You must install WinRM 1.1 or later to run the provisioning tasks. WinRM should
be installed on the same computer that your Notification Server is installed on.
It also needs to be installed on any task servers that are associated with that
Notification Server.
For more information about installing WinRM on site servers, see
https://kb.altiris.com/article.asp?article=52114&p=1.
WinRM sends tasks or commands to your server’s DRAC using the WS-MAN
protocol.
See “Creating provisioning credentials”on page 18.
For example, WinRM tells the DRAC to reboot to a network ISO and unpack and
attach drivers for an OS scripted installation.
See “Provisioning a Dell server”on page 19.
See “Using Deployment Solution for Dell Servers”on page 11.
To install WinRM
1In your browser, go to
http://www.microsoft.com/downloads/details.aspx?FamilyID=845289ca-
16cc-4c73-8934-dd46b5ed1d33&displaylang=en.
2Download the correct WinRM executable file or your operating system.
3Run the executable file to install WinRM.
4Run the following command:
winrm set winrm/config/client/auth @{Basic="True"}
15Getting started with Deployment Solution for Dell Servers
Installing WinRM

Getting started with Deployment Solution for Dell Servers
Installing WinRM
16

Provisioning Dell servers
This chapter includes the following topics:
■About zero-touch provisioning
■Creating provisioning credentials
■Provisioning a Dell server
■Adding a certificate trust list to IIS
About zero-touch provisioning
Zero-touch provisioning is a method that you can use to set up your brand new
servers, without using PXE. By communicating with the server’s DRAC card, you
can use this functionality to remotely set up any servers or perform other tasks.
See “Using Deployment Solution for Dell Servers”on page 11.
See “Creating provisioning credentials”on page 18.
See “Provisioning a Dell server”on page 19.
Zero-touch provisioning works in the following manner:
■You plug in your server.
■The DRAC card on your server starts up, finds the Deployment Solution for
Dell provisioning Web site, and identifies itself as a new DRAC.
■The Web site sends commands back to the DRAC.
■The DRAC is added to the CMDB and assigned a task or a job.
The DRAC can then be booted to a network ISO without using PXE. You can also
provision your hardware, perform a scripted OS installation, and complete other
tasks without using PXE.
3
Chapter

Creating provisioning credentials
WS-MAN (Web Services for Management) is the protocol that the DRAC card uses
to communicate. The DRAC card sits on your Dell server and contains the DRAC
functionality. It lets you boot to a network ISO and handles features such as power
control, temperature control, remote management, and others. The DRAC runs
independently of the server; it can be on while the system is off. You can
communicate with the DRAC through its own Ethernet jack.
See “About zero-touch provisioning”on page 17.
You can use the First Time Setup page to create the WS-MAN credentials that
you want to use with the tasks that require authentication.
The credentials that you create are added to the DRAC. You can log on to the DRAC
later and complete all of your tasks that require authentication. These tasks
include booting to a network ISO and provisioning your servers.
See if core documentation talks about enabling the WSMan task handler policy
-?
See “Using Deployment Solution for Dell Servers”on page 11.
To create provisioning credentials
1In the Symantec Management Console, on the Home menu, click Notification
Server Management > First Time Setup.
2Under Deployment Solution for Dell Servers, click Create a WS-Man
credential.
3On the Credentials Management page, click Add Credentials.
You can use the pencil icon to edit existing credentials. The X icon lets you
delete the credentials that you select.
4On the AddCredential page, select the WS-MANCredentials as the credential
type.
5Enter a name.
6Enter the user name for the credentials.
7Enter the password, and then re-enter the password in the ConfirmPassword
box.
8Select if you want to establish an expiration date for your credentials, and
then choose an expiration date.
9Select who should be allowed to use the credentials:
■Only me
Provisioning Dell servers
Creating provisioning credentials
18

■Let me select which users
10 To select the users that can use the credentials, click the Let me select which
users option, select or add the users that you want, and then click OK.
You can click View to select the permissions that each user has.
11 Click OK.
On the Credentials Management page, the name you entered for your new
credentials appears in the list of credentials.
Provisioning a Dell server
You can use zero-touch provisioning to set up your brand new servers. This
functionality is included in the Dell Server Provisioning task.
See “About zero-touch provisioning”on page 17.
The main goal of this task is to set the default behavior for new servers. You define
the tasks that should run on every server, as long as you don’t specify tasks based
on every service tag.
If a server’s service tag is in the Predefined Service Tags list, you can specify
what credentials are assigned to that server and what tasks it runs. For example,
service tag X gets credentials Dell and runs the new server job task. When that
server starts up, Deployment Solution already knows about it and can assign it
the proper credentials and run the specified tasks on it.
You can define the default behavior for every new server or specify a different
behavior for every service tag.
After you define the provisioning behaviors, a table displays in the middle of the
task page and contains the following information:
■Service Tag - A list of service tags that you defined or imported. Service tags
identify Dell servers and are the same as the serial number of the server.
■iDRAC Credential - The credentials that are needed to access the iDRAC.
■Deployment Job - The tasks or job to run.
If you have remote site servers in your environment, you must enable the WSMan
task handler policy on those site servers. The policy must be enabled before you
can provision all of your servers. You can access this policy from the Settings >
All Settings > Agents/Plug-ins > Deployment and Migration > Windows > Dell
Provisioning WSMan Task Handlers Install menu.
See “Using Deployment Solution for Dell Servers”on page 11.
19Provisioning Dell servers
Provisioning a Dell server

To provision a Dell server
1From the Symantec Management Console, on the Settings menu, click All
Settings.
2In the left pane, expand the Deployment and Migration folder.
3Click Dell Server Provisioning.
4In the right pane, select any of the following options:
■Provision only servers with trusted certificates
The certificate on the DRAC should match the Dell certificate on Symantec
Management Platform . If the certificates don’t match, your Dell server
is not provisioned.
If you select this option, you must manually add your certificate trust list
(CTL) in IIS.
See “Adding a certificate trust list to IIS”on page 21.
■Provision only servers that have not been provisioned previously
If the server has been provisioned once, it is not provisioned again.
■Provision only servers authorized by predefined service tags
You can select the specific servers that you want provisioned. You can
select different credentials for each server and the different tasks that
run on each server. For example, service tag X gets credentials Y and runs
the Windows OS installation task. If the service tag of a new server doesn’t
match a service tag on the list, it is ignored and not provisioned.
5Enter the default DRAC credentials.
You can select existing credentials from the drop-down list or click the ellipses
icon to view additional information about those credentials. You can also
click the pencil icon to edit existing credentials or click the plus icon to add
credentials.
These are the same credentials that you specified in the First Time Setup
page.
See “Creating provisioning credentials”on page 18.
6Browse to the default deployment job that you want to run on new servers.
7Click OK.
8If you want to define specific service tags, click Add to add a service tag to
the list.
You can click Import from file to select the service tag from an XML file. You
can also click the pencil icon to edit an entry in the list or click the X icon to
delete the selected service tag.
Provisioning Dell servers
Provisioning a Dell server
20