© 2015 IBM Corp. OSD development team 22 October, 2015 BigFix OS Deployment 3.9 Sprint 1 DEMO Oct 22nd, 2015

IBM Confidential. Unless specifically advised otherwise, you should assume that all information contained in these presentations is IBM Confidential. Content Authority. The workshops, sessions and materials have been prepared by IBM or the session speakers and reflect their own views. They are provided for informational purposes only, and are neither intended to, nor shall have the effect of being, legal or other guidance or advice to any participant. While efforts were made to verify the completeness and accuracy of the information contained in this presentation, it is provided AS-IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this presentation or any other materials. Nothing contained in this presentation is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. Availability. References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. IBM’s statements regarding its plans, directions and intent are subject to change or withdrawal at IBM’s sole discretion. Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion. Disclaimer

not for distribution IBM Security © 2015 IBM Corp. 3 OSD 3.9 content Sprint 1 : completed - Agent in manually captured WIM image - USMT fixlets - Linux custom settings - Linux partition editor - BM deployment Sprint 2 : development ongoing - Linux Clone Bare Metal - Improve Target Parameters - Linux Boot media (setup image) - Improve startup parameters

not for distribution IBM Security © 2015 IBM Corp. 4 OSD 3.9 content Sprint 3 - Linux Bare Metal – no HTTP (including multicast) - Linux Boot media (cloned image) - Linux Offline  - Linux partition editor - Reimage deployment - Improve Target Parameters – Target UI Sprint 4 - Linux Clone Reimage - *Linux Reimage – no HTTP - *HW rules – kernel parameters

not for distribution IBM Security © 2015 IBM Corp. 5 Agenda Sprint 1 Demo - Agent in manually captured WIM image - USMT fixlets - Linux custom setting - Linux partition editor – Bare Metal deployment - Beta Program Kick Off 

© 2015 IBM Corp. OSD development team 22 October, 2015 Agent in manually captured wim Basic concepts

not for distribution IBM Security © 2015 IBM Corp. 7 BigFix OSD provides a dedicated dashboard for capturing a live Windows image. The captured windows image properties include the version of the BigFix Client that it contains. When the image is used in a bare metal deployment, the agent is retained. Manually captured wim: background

not for distribution IBM Security © 2015 IBM Corp. 8 Manually captured wim: current behavior BigFix OSD allows the user to import a manually captured Windows image. In this scenario, at import time the information about whether the image contains a BigFix client or not is still unknown. When the image is installed during a bare metal deployment, if it does not contain a BigFix client, a default version is installed. (Version 9.0 if the MDT Bundle is 3.7 or later).

not for distribution IBM Security © 2015 IBM Corp. 9 Manually captured wim: solution In the bare metal profile properties wizard tab, the user can select the version of the BigFix client to be installed during a Bare Metal deployment. If at deployment time, the image already contains a BigFix client, the dashboard selection will be ignored.

© 2015 IBM Corp. OSD development team 22 October, 2015 USMT fixlets Basic concepts

not for distribution IBM Security © 2015 IBM Corp. 11 USMT Fixlets ● USMT (User State Migration Tool) has different operating system level support for capturing and restoring Windows user state ● To have a good coverage of the different operating systems, two pairs (capture/restore) of fixlets are available: 1. Capture user state (ScanState.exe) for Windows clients XP sp3, Vista, and 7, leveraging on USMT v5 from WADK 8.0 -> Task Restore user state (LoadState.exe) for Windows clients 7 and 8, leveraging on USMT v5 from WADK 8.0 -> Task Capture user state (ScanState.exe) for Windows clients 7, 8, 8.1, and 10, leveraging on USMT v10 from WADK 10 -> Task Restore user state (LoadState.exe) for Windows clients 8, 8.1, and 10, leveraging on USMT v10 from WADK 10 -> Task 176 The required USMT will be extracted from MDT Bundle containing that version. If not available, a warning will be displayed to the user. Typical scenario is operating system migration with hardware change → User state capture of initial OS, bare metal deployment of new OS to a different hardware, user state restore to new OS

not for distribution IBM Security © 2015 IBM Corp. 12 USMT Fixlets details ● You can customize default parameters for capture/restore commands ● You can provide additional file extensions to capture and/or an additional input xml file (following USMT syntax, max 4000 characters) at capture time. Additional captured content will be automatically restored on the destination computer at restore time. ● Captured data and logs are stored in the destination folder on a network path specified, together with its credentials, at fixlet submission time ● You can capture/restore different User State content on a set of computers with a single fixlet submission: capture folder is specific for each computer, restore folder can be unique for all sets of computers or specific for each one. ● You can restore the captured User State with the same version of USMT and on the same or later version of Windows. A check is performed by the restore fixlet.

not for distribution IBM Security © 2015 IBM Corp. 13 USMT fixlet Video

© 2015 IBM Corp. OSD development team 22 October, 2015 Computer Custom Settings Basic concepts and video

not for distribution IBM Security © 2015 IBM Corp. 15 Computer custom settings

not for distribution IBM Security © 2015 IBM Corp. 16 Client settings: Software Distribution task

not for distribution IBM Security © 2015 IBM Corp. 17 Custom Settings: action

not for distribution IBM Security © 2015 IBM Corp. 18 Custom settings: relevance

not for distribution IBM Security © 2015 IBM Corp. 19 Linux Bare Metal profile dashboard: client settings

not for distribution IBM Security © 2015 IBM Corp. 20 Linux Reimage dashboard: client settings

not for distribution IBM Security © 2015 IBM Corp. 21 Linux Custom Settings Video

© 2015 IBM Corp. OSD development team 22 October, 2015 Linux Partition Editor - BM deployment Basic concepts and video

not for distribution IBM Security © 2015 IBM Corp. 23 Linux Partitioning in BigFix OSD 3.8 In OSD 3.8, users could specify a partition layout in the Bare Metal Profile through the “Manual” tab of the Bare Metal Profile creation wizard. This implied:  a deep knowledge of RedHat and SUSE automatic installers (Anaconda, AutoYast)  The settings were hard to read and modify  Greater risk of introducing syntax or logic errors

not for distribution IBM Security © 2015 IBM Corp. 24 Linux Partitioning in BigFix OSD 3.8 This is an example of a partition layout with LVM manually specified for a RedHat Bare Metal Profile

not for distribution IBM Security © 2015 IBM Corp. 25 Linux Partition Editor With OSD 3.9, the Linux Partition Editor is included in the Bare Metal Profile creation wizard. The editor will support: ● ext2, ext3, ext4, Xfs file systems ● primary and logical partitions ● BIOS and UEFI Bare Metal Targets ● customizable mapping of storage devices ● Logical Volume Mapping (LVM)

not for distribution IBM Security © 2015 IBM Corp. 26 Linux Partition Editor

not for distribution IBM Security © 2015 IBM Corp. 27 Linux Partition Editor The demo will show the creation and deployment of a Linux Bare Metal Profile, with the following partition and logical volume layouts: Partition Layout: Logical Volume Layout:

not for distribution IBM Security © 2015 IBM Corp. 28 Linux Partition Editor Video

© 2015 IBM Corp. OSD development team 22 October, 2015 Beta program

not for distribution IBM Security © 2015 IBM Corp. 30 Register to IBM developerWorks with your IBM ID to get started (You can use the IBM ID and password that you designate below across IBM) Then access IBM Endpoint Manager for OSD v3.9 - Beta Program wiki page and follow the instructions. How to join the Beta Program