what's new in zcm 11.2 and beyond lecture · 2014. 4. 23. · copying all or part of this...

Nove

What's New in ZCM 11.2 and BeyondLecture

www.novel l .comNovell Training Services

AT T L I V E 2 0 1 2 L A S V E G A S

Z E N 1 4

ll, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.

Novel

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2012 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page (http://www.novell.com/documentation).

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

Copying all or part of this manual, or distributing such copies, is strictly prohibited.To report suspected copying, please call 1-800-PIRATES.

Version 12

l, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.

http://www.novell.com/info/exports/

http://www.novell.com/company/legal/patents/

http://www.novell.com/documentation

http://www.novell.com/company/legal/trademarks/tmlist.html

What’s new in ZENworks 11SP2 and Beyond

Jason [email protected]

Novell, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.

© Novell, Inc. All rights reserved.2

Agenda

• New packaging

• What’s new in the ZENworks core?

• What’s new in ZCM?

• What’s new in ZESM?

• What’s new in ZPM?

• Introducing ZFDE

• What about my mobile devices?

• Where do we go from here?



New Packaging

• What’s new in the ZENworks core?



What’s new in the ZENworks Core?

• Platform updates– Database platform changes

– SQL 2008, SQL 2008R2, SQL 2008R2 SP1

– Oracle 11g R1 and R2

– Sybase SQL Anywhere 12 (embedded/oem)

– Browser support extensions– IE 9

– Firefox 4-10 (Recommend FF 10ESR)

– Platform extensions– Macintosh OS-X 10.5-10.7 on Intel hardware

– RHEL 6.1 and 6.2

– Open Enterprise Server 11




• Registration– Now supports using Mac Address in naming convention

– Now supports using Mac Address as a rule condition

– Now supports using CIDR comparisons on IP Addresses

• Dynamic Groups– Allows you to restrict query to a specific subtree of the zone

– Allows Administrator Defined Fields (ADF)

• Login enhancements– Caching of distinguished names after initial login

– CASA threading improvements




• Agent Self Defense for Windows– Now a core setting instead of requiring a ZESM policy

• Nested group support for assignments and administrative groups



What’s new in ZCM?

• What’s new in ZENworks Configuration Management?– High performance NTFS imaging driver support

– Download and inject from ZCC

– Improves Windows 7 image deployment 200-300%

– Macintosh OS X support– Deploy device assigned bundles

– ZENworks Application Window

– Enhanced inventory to support (10.7.x) Lion

– Support for connecting to Mac OS X VNC server from ZCC



What’s new in ZCM?

• What’s new in ZENworks Configuration Management?– Remote Management enhancements

– Cache remote management console settings including “Always use IP address”

– Inventory– Add components to a device from z-icon

– Edit Asset Tag and Serial Number

– Policies– Printer policy can now deploy TCP/IP printers

– Power policies can now set AC and DC power management settings



What’s new in ZAM?

• What’s new in ZENworks Asset Management?– Hyperlink document type

– Contract import via ZMAN



What’s new in ZPM?

• What’s new in ZENworks Patch Management?– DAU now installs/updates the analyze and remediate

components

– Support for Macintosh OS X patch management

– Filter which patches are enabled during subscription by vendor

– Device and Zone Patch Management rights– Restrict specific users to being able to do patch management rights for

only specific devices

– Set distribution and launch schedules for Discover Applicable Updates

– Configurable patch management dashboard



What’s new in ZESM?

• What’s new in ZENworks Endpoint Security?– ZESM scripting policies introduced in ZENworks 11 SP1

– Allows you to use VBScript or Jscript

– Executed securely by the ZES service

– Also provides a scripting API for securely interacting with the ZESM agent



Introducing ZFDE

• What is ZENworks Full Disk Encryption?– A solution for ensure that you don’t end up on the front page

when an employee loses their laptop

– Leverages the same management console, server and agent as all ZENworks 11 products

– Uses FIPS 140-1 certified software encryption module and FIPS-140-2 when used with Seagate FDE drives

– Provides centralized key management for easy recovery in case of corruption

– Provides an easy way to get back in if the user forgets their password

– Provides optional preboot authentication via either username/password or smartcard/pin



What about my mobile devices?

• ZENworks Mobile Management - Coming mid-2012!– A solution that allows you to manage your iOS and Android

devices– Provides policy based management of security and configuration

of the device– Offers the ability to make both app store applications and

corporate developed applications available via the ZENworks agent

– Allows for publishing shared content to mobile devices– Initially requires a separate management server and console– Can also act as an ActiveSync proxy and deploy basic policies to

native ActiveSync clients– Long term goal is to integrate with ZENworks

console/architecture– Will be a separate purchase licensed per device



11SP2 Upgrade Process

1. Run ZDC to verify upgrade readiness

2. Stop ZENworks services on but one Primary Server

3. Run the setup from the media

4. (10.x/11.0) Provide pointer to new database engine if requried

5. Database is upgraded

6. Primary Server software is upgraded

7. Run setup on other Primary Servers

8. Use System Update in ZCC to deploy update to satellites and agents


Looking Ahead



ZENworks Release Strategy

• Release monthly roll-up of any critical customer patches

– These will be made available on download.novell.com as a .zip file

– The zip file can be imported via ‘zman sui’ and deployed via system update

– These roll-ups are cumulative, but require the most recent System Update to be applied




• Release quarterly system updates– These updates will contain all defect fixes from the monthly

updates

– These updates will contain any additional defect fixes made by Novell engineering since the ship of the last System Update/Major Release

– These updates may contain low risk, high value features that continue to move the product forward

– These updates will be available via the ZENworks Control Center and download.novell.com




• Release media releases every 12-18 months– These updates will contain major feature enhancements

– These updates will contain any defect fixes that required more testing than could be accommodated in a System Update release

– These updates will be released as new media

– The upgrade for these products will be similar to the process for ZENworks 11 to SP1 or SP2



Disclaimer

• It’s all subject to change…

• Novell uses agile development, which means some items may move to accommodate more important priorities that appear



ZENworks Roadmap

Configuration Mgmt

2012

Application Virtualization

Patch Mgmt

Novell® Service Desk

“11 SP2”

ZAV 9

“Pennsylvania”

Asset Mgmt

Shipping Targeted

Endpoint Security Mgmt

Full Disk Encryption

NSD 7.0

ZAV 10

2013

11.2.1

Committed

11.2.2

Committed

11.2.3

Committed

ZENworks Media Release

ZENworks System Update

Mobile Management “Sundance” “Butch” “Tango”



ZENworks System Updates

• Features being considered for inclusion in 11.2.x releases (releases are date driven)

– SLES 11SP2 support– ZCM Bundle Ordering– ZESM Application Control Enhancements

– Interrupt already running processes and display custom messages

– Inventory History and Usage Tracking Data Pruning– Snoozable Agent Deployment– Driverless location awareness when ZESM is not in use

– Will reduce BSOD possibility and overall footprint

– Will have some limitations as not all location info is available w/o drivers

– Enhanced file/folder encryption



ZENworks “Pennsylvania”

• Platform changes– Only 64-bit Primary servers will be supported

– Satellites still supported

– No support for hosting Primary server on OES– Satellites still supported

– Windows 8 support

– Macintosh OS X “Mountain Lion” support

– Extended browser support

• Backend updates– Java 1.7 and Tomcat 7 will be used by ZENworks




• Continued focus on engineering excellence to ensure highest quality experience

• New capabilities– Auditing

– Changes to objects via ZCC

– Remote Management

– Managed device security

– Inventory– Improved software identification by integrating with Add/Remove Programs

and MSI

– Multizone Publish and Subscribe– Replicate bundles and policies between zones




• ZENworks Diagnostics– New set of tools to make troubleshooting easier

• Improved Citrix scaling

• Bundle to License Object mapping and enforcement

• Improved patch support for Linux– Create patches from ZCM mirrored subscriptions


This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. Novell, Inc. may make improvements in or changes to the software described in this document at any time.

Copyright © 2011 Novell, Inc. All rights reserved.

All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.


what's new in zcm 11.2 and beyond lecture · 2014. 4. 23. · copying all or part of this...

Documents