1. Implementing ZENworks® for Servers Policies and Distribution Services
Novell BrainShare 2002
Implementing ZENworks® for Servers Policies and Distribution Services
Ann Marie Miller
Project Manager
Novell, Inc.
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

2. What Is Novell ZENworks®?
Novell BrainShare 2002
What Is Novell ZENworks®?
The Novell ZENworks family of products…
Automates and personalizes content and applications to increase productivity for end users and network managers alike
Allows you to minimize costs by reducing redundancies, effectively leveraging your resources and precisely tracking their use
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

3. The Novell ZENworks Family
Novell BrainShare 2002
The Novell ZENworks Family
ZENworks for Desktops
Manages the complete workstation lifecycle and provides personalized workstation service to end users
ZENworks for Servers
Provides cross-platform server consistency, content distribution, and management of critical resources, alarms, SNMP, and inventory assets
ZENworks Preboot Services
Enables PXE integration for ZENworks for Desktops workstation disk imaging
ZENworks for Handhelds
Automates management for wireless and handheld devices
ZENworks OnDemand Services
Automates digital asset provisioning to users wherever they are; tracks and reports usage; manages and personalizes terminal services
ZENworks Synergy
Extends the managed, personalized work environment to any location from any Windows machine
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

4. Session Outline Introduction to Policy and Distribution Services
Novell BrainShare 2002
Session Outline
Introduction to Policy and Distribution Services
Architecture
Features
Server Management without ZENworks® for Servers
Tasks common to managing server content
Tasks common to server configuration and behavior management
Server Management with ZENworks for Servers (demonstration)
Using Distributions to automate Server Content Management
Using Policies to automate Server Configuration Management
Question and answer
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

5. Policy and Distribution Services
Novell BrainShare 2002
Policy and Distribution Services
Components of ZENworks for Servers 3 (ZfS)
ZfS 3 also includes
Server inventory
Remote management
Management console
Focus of this session is Policy and Distribution Services
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

6. Policy and Distribution Services
Novell BrainShare 2002
Policy and Distribution Services
Provides the ability to distribute content (simple files to complex applications)
Provides ability to control server configuration and behavior
With ZfS these tasks can be accomplished
With minimal manual process
At scheduled intervals
On servers throughout your enterprise
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

7. Session Outline Introduction to Policy and Distribution Services
Novell BrainShare 2002
Session Outline
Introduction to Policy and Distribution Services
Architecture
Features
Server Management without ZENworks for Servers
Tasks common to managing server content
Tasks common to server configuration and behavior management
Server Management with ZENworks for Servers (demonstration)
Using Distributions to automate Server Management
Using Policies to automate Server Management
Question and answer
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

8. ZfS3—Architecture Three primary elements of Policy and Distribution
Novell BrainShare 2002
ZfS3—Architecture
Three primary elements of Policy and Distribution
Novell eDirectory™ objects
Manage servers throughout the network from objects in a single eDirectory Tree
eDirectory objects contain configuration and distribution information
Software—installed and runs on servers
Distributor—builds and sends distributions
Subscriber—receives and extracts (installs) distributions
Policy Agent—schedules and enforces Policies
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

9. ZfS3—Architecture Three primary elements (cont.) Management
Novell BrainShare 2002
ZfS3—Architecture
Three primary elements (cont.)
Management
Web-based administration
Manage eDirectory Objects
Graphic representation of distribution path to all Subscribers
Color-coded status of a distribution on each Subscriber
Ability to remotely manage distributions and policies on any server
ConsoleOne®
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

10. ZfS3—Architecture Policy and Distribution Basics—Objects in eDirectory
Novell BrainShare 2002
ZfS3—Architecture
Policy and Distribution Basics—Objects in eDirectory
Distributor
External Subscriber
Subscriber
Distributed Policy Package
Distribution
Channel
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

11. ZfS3—Architecture Channels Distributors Subscribers
Novell BrainShare 2002
ZfS3—Architecture
Distributors
Channels
Virus Pattern Channel
Send Immediately Channel
Subscribers
Distribution belongs to a specific Distributor
Distribution may be associated to one or more Channels
Subscribers can subscribe to one or more channels
Distributions
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

12. ZfS3—Architecture Novell BrainShare 2002 Channels Distributors
Virus Pattern Channel
External Subscribers
Send Immediately Channel
Subscribers
Distributions
Distribution belongs to a specific Distributor
Distribution may be associated to one or more Channels
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

13. ZfS3—Architecture Novell eDirectory
Novell BrainShare 2002
ZfS3—Architecture
Novell
eDirectory
When build schedule starts the distributor builds the distribution
Firewall
Port 1223
Distributor reads eDirectory
When send schedule starts the distribution is sent to subscribers
Subscriber returns distribution status information to distributor
Configuration information
Subscriber receives (accepts) the distribution
Subscriber extracts (installs) distribution
thereby scheduling policies for enforcement or copying files
Subscriber may act as a “parent” subscriber
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

14. ZfS3—Architecture Important aspects of TED architecture Tiered Design
Novell BrainShare 2002
ZfS3—Architecture
Important aspects of TED architecture
Tiered Design
Allows servers receiving distributions to pass them on to other servers
Scaleable
Reduces WAN traffic
Store and Forward
A subscriber will begin forwarding a distribution as soon as it has received the first packet of that distribution which eliminates distribution latency
Checkpoint/Restart
If a distribution is interrupted during send, when it restarts it will pick up where it left off
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

15. ZfS3—Architecture Important aspects of TED architecture Security
Novell BrainShare 2002
ZfS3—Architecture
Important aspects of TED architecture
Security
Signed Certificates
Digests
Encrypted Distribution
NAT support
Supports sending distributions across the Internet
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

16. ZfS3—Routing Distributions
Novell BrainShare 2002
ZfS3—Routing Distributions
TED Distributor
Going across the Internet to the London Office
Chicago
NYC
London
Across the internte to Hong Kong
Los Angeles
Hong Kong
Mexico City
Across a WAN Link to Melbourne
Melbourne
Melbourne Tree
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

17. ZfS3—Architecture Secure Server Management Web Browser
Novell BrainShare 2002
ZfS3—Architecture
Secure Server Management
Web Browser
Port 1223
Subscriber
Distributor
Authenticate to
eDirectory
Firewall
Port 1223
Web Server with ZfS3 Web
Plug-ins and Security Feature Activated
Subscriber
Subscriber
Subscribers
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

18. ZfS3—Architecture Screenshots of Tiered Distribution View
Novell BrainShare 2002
ZfS3—Architecture
Screenshots of
Tiered Distribution View
Remote Web Console
Managing Policy and Distribution Objects
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

19. ZfS3—Architecture In summary Two primary elements of TED
Novell BrainShare 2002
ZfS3—Architecture
In summary
Two primary elements of TED
eDirectory Objects—used to configure and manage Policies and Distributions
Software—installed and runs on the servers
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

20. ZfS3—Architecture In summary Distributions… Channels…
Novell BrainShare 2002
ZfS3—Architecture
In summary
Distributions…
Distributions are defined in eDirectory via distribution objects
Many types of distributions (flexible, powerful)
Schedules control when distributions are built, sent, installed
Each Distribution belongs to a single distributor (builds and sends)
Channels…
eDirectory objects used to link subscribers with distributions
Distributors and Subscribers…
Objects in eDirectory that contain configuration information
One distributor and/or subscriber object in eDirectory representing
each server running the distributor and/or the subscriber software
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

21. ZfS3—Architecture In summary Distributors (software on the server)
Novell BrainShare 2002
ZfS3—Architecture
In summary
Distributors (software on the server)
Read configuration information from eDirectory
Build distributions
Distributors ‘push’ distributions to subscribers
Log distribution status information to the database
Subscribers (software on the server)
Receive distributions
Extract (install) the distributions
Schedule and enforce policies
Subscribers can forward distributions on to other subscribers
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

22. ZfS3—Architecture In summary Management Model
Novell BrainShare 2002
ZfS3—Architecture
In summary
Management Model
Can select a single eDirectory Tree from which to manage Policy and
Distribution objects
Servers running Policy and Distribution software can have their server
objects
In the same tree as the TED Objects that represent them
In another eDirectory Tree
In a Microsoft Domain
None of the above
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

23. ZfS3—Architecture In summary
Novell BrainShare 2002
ZfS3—Architecture
In summary
Important aspects of Distribution Architecture
Tiered design
Store and forward
Checkpoint/restart
Security
DNS and NAT support
Web-based administration
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

24. Session Outline Introduction to Policy and Distribution Services
Novell BrainShare 2002
Session Outline
Introduction to Policy and Distribution Services
Architecture
Features
Server Management without ZENworks for Servers
Tasks common to managing server content
Tasks common to server configuration and behavior management
Server Management with ZENworks for Servers (demonstration)
Using Distributions to automate Server Management
Using Policies to automate Server Management
Question and answer
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

25. Distribution Features
Novell BrainShare 2002
Distribution Features
Distribution Types
Files (distributor’s local file system)
FTP
HTTP (any file gathered via HTTP protocol)
RPM
Desktop application (integration with ZENworks for Desktops)
Software packages
Policy packages
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

26. Distribution Features
Novell BrainShare 2002
Distribution Features
Distribution options
Install prerequisites
Pre-install tasks
Post install tasks
Directory Synchronization
Link build and send
Distribution verification
Prioritization of distributions
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

27. Distribution Features
Novell BrainShare 2002
Distribution Features
Distribution options (cont.)
Control send/receive rate (also based on priority)
Disk space conservation
Distribution encryption
Maintain attributes of files and folders
Use variables to determine the directory structure to which a distribution will be installed
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

28. Distribution Features
Novell BrainShare 2002
Distribution Features
Distributions are supported on
NetWare®
Windows NT/2000 Servers
Red Hat Linux
Solaris
Servers can be
In a Microsoft domain
eDirectory (tree to tree is supported)
Inside or outside the firewall
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

29. Distribution Features
Novell BrainShare 2002
Distribution Features
Tiered Electronic Distribution can be used to
Automate distribution of content (simple text files to complex applications)
Keep applications updated on all servers
Simplify deployment of ZENworks for Desktops using the Desktop Application Distribution
Deliver at scheduled intervals time sensitive information
Update UNIX server file systems using RPM files
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

30. Distribution Features
Novell BrainShare 2002
Distribution Features
New versions of distributions are created automatically
Scheduling allows you to control network resources
The “tiered” aspect allows servers receiving distributions to pass them on to other servers
Scaleable
Reduces WAN traffic
“Tree to tree” allows sending distributions across trees
Desktop Application Distributions provide integration with ZENworks for Desktops
Web-based administration provides easy to use graphical interface for distribution management
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

31. Policies Features Policies are supported on
Novell BrainShare 2002
Policies Features
Policies are supported on
NetWare
WIN NT/2000 Servers
Red Hat Linux
Solaris
Policies are distributed (via Tiered Electronic Distribution) to the servers on which they will be enforced
Policies are enforced based on a schedule that can be specific to each policy or global to each package of policies
Web-based administration provide easy to use graphical interface for Policy management
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

32. Policies Features Text File Script Policy
Novell BrainShare 2002
Policies Features
Available Policies include
Text File
Use simple programming logic to edit a text file, adding to, removing from or modifying the existing content
Script Policy
Create scripts using PERL, NetBasic, UNIX Shell Script, NCF or Batch file to perform server maintenance or configuration tasks, select the servers on which the scripts will run, and schedule the time and frequency that they will be run
Start and Stop Services and NLMs
Automate the process of loading and unloading NLMs on NetWare, Services on Windows NT/2000 and deamons/processes on Unix platforms
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

33. Policies Features Server Down Process Server Down Schedule
Novell BrainShare 2002
Policies Features
Available Policies include
Server Down Process
define the process to be followed and conditions to be met when downing a servers
Server Down Schedule
defines the schedule by which the server is taken down using the process defined in the “Server Down Process Policy”
NetWare Set Parameters
enforce specific values for the server set parameters
Copy File Policy
Copy files from one location on a server to another location
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

34. Policies Features Policies can be used to manage servers
Novell BrainShare 2002
Policies Features
Policies can be used to manage servers
Keep startup files consistent from server to server
Run PERL, NetBasic, Shell, Batch and NCF scripts that are used to perform server maintenance or configuration tasks
Schedule NetWare NLMs or Windows Services to start and stop
Enforce Set Parameter settings on a group of NetWare servers
Define shutdown procedures
Shutdown servers at planned intervals
Refresh the content of a directory at scheduled intervals
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

35. Management Features Web-based management
Novell BrainShare 2002
Management Features
Web-based management
Both policies and distributions can be managed from a web browser
Manage eDirectory objects
Tiered Distribution view
Remote web console
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

36. Management Features Web-based administration Browser Web server
Novell BrainShare 2002
Management Features
Web-based administration
Port 443
Browser
Subscriber
Distributor
Authenticate to
eDirectory
Firewall
Port 443
Web server
Subscriber
Subscriber
Subscribers
DNS table
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

37. Session Outline Introduction to Policy and Distribution Services
Novell BrainShare 2002
Session Outline
Introduction to Policy and Distribution Services
Architecture
Features
Server Management without ZENworks for Servers
Tasks common to managing server content
Tasks common to server configuration and behavior management
Server Management with ZENworks for Servers (demonstration)
Using Distributions to automate Server Management
Using Policies to automate Server Management
Question and answer
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

38. Server Management Tasks
Novell BrainShare 2002
Server Management Tasks
Server content management
Virus Pattern Files—keeping servers updated with the most current virus pattern software and files, these are high priority distributions that must be sent as soon as new files are detected—load/unload virus protection software after virus files are copies
Synchronizing application directories with “Golden Server”—keep application directories on all servers up to date so that all users have access to the same version of each application
Distribute new applications files to ZfD application servers, create required application objects and associations to users that need access to that application
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

39. Server Management Tasks
Novell BrainShare 2002
Server Management Tasks
Server content management
Backup directories to offsite server(s) nightly and verify that backup was successful
Schedule at off peak hours
Important that it be done every day
Ensure sufficient disk space before backup begins
Keep more than one copy of the backup
Success must be confirmed each morning
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

40. Session Outline Introduction to Policy and Distribution Services
Novell BrainShare 2002
Session Outline
Introduction to Policy and Distribution Services
Architecture
Features
Server Management without ZENworks for Servers
Tasks common to managing server content
Tasks common to server configuration and behavior management
Server Management with ZENworks for Servers (demonstration)
Using Distributions to automate Server Management
Using Policies to automate Server Management
Question and Answer
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

41. Server Management Tasks
Novell BrainShare 2002
Server Management Tasks
Server configuration and behavior management
Downing servers
Servers must be downed weekly to optimize performance and reliability
When downing selected servers it is critical to follow well-defined process
Backup eDirectory dib set
Run a program each night that backups the eDirectory dib set
Server Configuration to improve performance
Enforce values to selected set parameters that improve server performance
Start and Stop Services
Text File modifications to maintain consistency in startup files
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

42. Session Outline Introduction to Policy and Distribution Services
Novell BrainShare 2002
Session Outline
Introduction to Policy and Distribution Services
Architecture
Features
Server Management without ZENworks for Servers
Tasks common to managing server content
Tasks common to server configuration and behavior management
Server Management with ZENworks for Servers (demonstration)
Using Distributions to automate Server Management
Using Policies to automate Server Management
Question and Answer
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

43. Server Content Management
Novell BrainShare 2002
Server Content Management
Updating Virus Pattern Files
Keeping servers updated with the most current virus pattern software and files—these are high priority distributions that must be sent as soon as new files are available
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

44. Server Content Management
Novell BrainShare 2002
Server Content Management
Distributing Virus Pattern Files
Create an FTP distribution
Identify it as a high priority distribution
Schedule the frequency to check for updates
Link build and send so that distribution is sent immediately when a new version is created
Load/unload virus protection software after new virus pattern files are installed
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

46. Virus Pattern Files Results
Novell BrainShare 2002
Virus Pattern Files
Results
Distributor automatically checks at designated intervals for updates to the virus pattern files
If any updates are detected, a new version of the distribution is automatically built
Distribution will be sent as soon as it is built
High priority insures that no other distribution will pre-empt sending
Load/unload virus protection software after new virus pattern files are installed
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

47. Server Content Management
Novell BrainShare 2002
Server Content Management
Synchronizing application directories on several servers
I have a group of web servers that provide access to the company’s innerweb—the content of certain directories on these servers must be kept consistent with a master server that is updated periodically with new gadgets, UI modifications, etc.
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

48. Server Content Management
Novell BrainShare 2002
Server Content Management
Synchronization of Application Directories
Create a File distribution type
Select the “synchronize” option to ensure that the directories on each of the subscriber servers will always be in sync with the directories on the source server
Set the schedule for building and sending the distribution to the desired interval
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

50. Server Content Management
Novell BrainShare 2002
Server Content Management
Backup Directories Offsite
Backup directories to offsite server(s) nightly and verify that backup was successful
I have remote offices that do not have full tape backup capabilities—need to copy entire end directory structure to data center in main office for backup
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

51. Server Content Management
Novell BrainShare 2002
Server Content Management
Backup Directories Offsite
Schedule at off peak hours
Important that it be done every night
Ensure sufficient disk space before backup begins
Keep more than one copy of the backup
Success must be confirmed each morning
TUT216—Implementing ZENworks for Servers Policies and Distribution Services

53. Vision…one Net Mission
A world where networks of all types—corporate and public, intranets, extranets, and the Internet—work together as one Net and securely connect employees, customers, suppliers, and partners across organizational boundaries
Mission
To solve complex business and technical challenges with Net business solutions that enable people, processes, and systems to work together and our customers to profit from the opportunities of a networked world