DSM Web
DSM Web is a web-based application you can employ to analyze the status of your infrastructure and software rollout in your company quickly and easily. DSM Web accesses the central databases directly (DSMDB) and performs 'real time' snapshots of the software rollouts. The snapshot informs you of the current status of your environment and allows you to clearly focus on managing computers and software. DSM Web is especially suited for patch management where you want to control the rollouts of patch packages and find potential security vulnerabilities.
The main features of DSM Web are:
•Web Console: The Web Console displays the compliance status of individual computers and allows you to execute simple software installations on user and computer objects in your environment. You can repair failed software installations and manage computers and users in DSM.
•Software Rollout Monitoring: The Software Rollout Monitoring feature helps your software managers create evaluations and reports of the current status of the company's software installations quickly and easily.
•Infrastructure Monitoring: The Infrastructure Monitoring feature provides important information on all depots in your environment and on all the distribution activities. Detailed messages about errors that occurred on servers help you detect the difficulties in your environment directly. The Service Events view allows you to closely monitor and control the performed actions.
Getting Started
DSM Web provides numerous options for an individual configuration and offers an extensive functionality. Please refer to the following chapters for detailed information on the complete functionality of DSM Web, its installation requirements and permissions.
Installation Requirements
DSM Web is a DSM Management application; it is installed on Management Points with Business Logic Server automatically.
For all areas of the DSM Web, a user needs specific rights to employ it. Assign the required rights on ORG level with the Manage Permissions task.
In order to use the Web Console on the computer from which you will start DSM Web, you need Silverlight 5. Please enter the following link in your browser to get the required plugin: http://www.microsoft.com/silverlight/
Dependent on the operating system, you can use the following browsers:
http://www.microsoft.com/getsilverlight/locale/en-us/html/installation-win-SL5.html
Silverlight is no longer supported by new versions of browsers such as Microsoft Edge.DSM Web will therefore be transmitted to a new platform in one of the next releases.
Installing DSM Web
The binaries of the DSM Web are available after the installation of the DSM Suite in the central depot. If you are planning to install the DSM Web during the DSM setup (update or initial installation) on a Management Point with Business Logic Server, please select the option for installing the application when configuring the Management Point. You can also install the application later on any other Management Point with Business Logic Server.
You can only provide the DSM Web in a DSM environment on one single Business Logic Server.
If you want to move the DSM Web to another Business Logic Server, or to install it the first time, please proceed as follows:
Install the DSM Web
1.Unlock the database.
2.In the site structure, select the Management Point where you want to install the DSM Web application.
3.Select Properties.
4.In the Properties dialog, select the DSM Web application and install it.
5.Lock the database.
Uninstall the DSM Web
1.Start the DSM Console.
2.Open the Infrastructure view.
3.Unlock the database.
4.In the site structure, select the Management Point where the DSM Web application is installed.
5.Select Properties.
6.In the Properties dialog, select the DSM Web application and uninstall it.
7.Lock the database.
Assigning Permissions To Users
Users are only allowed to see certain views in the DSM Web or to evaluate the data they have access permissions for. A standard user only has Read access to the objects in the organization tree and in the Software Library. It is not possible to limit or extend the individual access permissions. Please make sure to assign the required permissions to the users before software managers will use DSM Web. DSM provides specific rights and roles for this purpose.
Web Console
In the Web Console, the existing rights to view and manipulate objects in the site structure apply.
Software Rollout Monitoring and Infrastructure Monitoring
The following rights have to be assigned explicitly for Software Rollout Monitoring and Infrastructure Monitoring:
•View Infrastructure Monitoring: With this right, the user can use infrastructure monitoring. This right is included in the correspondent View Infrastructure Monitoring role.
•View Management Reports: This right allows the user to start Software Rollout Monitoring, to use the Dashboard, to display data and to issue reports. This right is included in the correspondent View Management Reports role.
•Manage Monitoring Definitions: This right allows the user to create, change or delete individual monitors (monitoring definitions). This right is included in the correspondent Manage Monitoring Definitions role. In addition, this role contains the View Management Reports right.
The mentioned rights can only be assigned in the Managed Users and Computers domain.
Make sure that the user of Software Rollout Monitoring has Read access to the Software Library. The system only evaluates software folders the user has Read access to. Assign the Read system role to all users that are not supervisors.
How to assign roles to the domain users
1.Start the DSMC.
2.Select a domain in the Organization Tree and then choose the Manage permissions command.
3.Select New Role Assignment.
4.Assign the role to a group or a user.
Starting DSM Web
You can start DSM Web from two different locations:
•Start the DSM Console and start Tools > DSM Web from the menu bar.
•Start the web browser on a computer that is connected over the Internet to the Management Point server where DSM Web is installed. Enter the following link in the address line: http://<NameOfManagementPoint>:<Port>/blsWeb/Reporting/Default (e.g. http://dsmservde:8080/blsWeb/Reporting/Default)
DSM Web User From Untrusted Domains
Each time a user accesses DSM Web from an untrusted domain, correct authentication is required with the access data known to the DSM environment.
If a user does not have valid access data or does not want to enter the data every time DSM Web is accessed, the following requirements must be met to be authenticated automatically:
•The untrusted domain must have a Management Point with Relay Proxy. The URL for calling DSM Web points to the Management Point Server with the Relay Proxy: http://<NameOfRelayProxyServer>:<Port>/blsWeb/Default.htm?culture=de
If a firewall is protecting the connections from the untrusted domain to the DSM environment, please make sure to configure the Management Point's Transport Layer accordingly. The Transport Layer ensures communication across the firewall.
•Add the user from the untrusted domain as user in DSM and assign the respective permissions for using DSM Web.
When the user opens DSM Web as described above, the Relay Proxy transfers the user's access data to a Management Point with DSM Web and opens DSM Web without asking for the credentials.
User Interface
The web browser interface is the central interface where you define and view monitors or create reports. Here you can evaluate the status of the installed software or installed security patches and create reports.
The tabs in the menu bar open different management areas. Each tab provides specific tasks in the task bar which you can execute there. Every data window contains a list of results and a diagram of the monitor you defined before. When you start Management Reporting the first time, two data windows open which have been added to the dashboard as monitors. You can either click to hide these data windows or you can add them to the dashboard again. You may also change the order of the data windows.
Tabs and Tasks
•Dashboard tab: Add Monitor to Dashboard
•Monitor tab: Create Software Monitor, Create Patch Monitor, Delete Selected Monitor, Add Monitor to Dashboard
•Reports tab: Create Report, Delete Report, Print Report, Add Report Items, Delete Report Item, Move Report Item Up, Move Report Item Down
•Vulnerabilities tab: Export List
•Background Job tab: Export Job List
•Getting Started tab: No tasks defined
Other Commands
•Print Report: Provides the data in a pdf document which you can print later.
•Show Historic Data: Opens the Rollout Process dialog that shows the development of the software rollout of the specific monitor.
•Delete Data Window: Removes the data window from the dashboard. If you want to restore the data window, select the respective monitor and add the data window to the dashboard again.
•Update: Updates the data window display. The time is displayed in the above right corner.
•Update Data: Updates now the snapshot data for the selected monitor definition.