Informationwaitingforreboot

ZENworks2017Update4What'sNewReferenceJanuary2019LegalNoticeForinformationaboutlegalnotices,trademarks,disclaimers,warranties,exportandotheruserestrictions,U.
S.
Governmentrights,patentpolicy,andFIPScompliance,seehttps://www.
novell.
com/company/legal/.
Copyright2008-2019MicroFocusoroneofitsaffiliates.
TheonlywarrantiesforproductsandservicesofMicroFocusanditsaffiliatesandlicensors("MicroFocus")aresetforthintheexpresswarrantystatementsaccompanyingsuchproductsandservices.
Nothinghereinshouldbeconstruedasconstitutinganadditionalwarranty.
MicroFocusshallnotbeliablefortechnicaloreditorialerrorsoromissionscontainedherein.
Theinformationcontainedhereinissubjecttochangewithoutnotice.
Contents3ContentsAboutThisGuide51What'sNewinZENworks2017Update471.
1PlatformSupport71.
2ZENworksConfigurationManagement81.
2.
1MobileManagement81.
2.
2ClientManagement101.
3ImagingandRemoteManagement101.
4Inventory101.
5AssetManagement111.
6ZENworksApplication111.
7EndpointSecurityManagement111.
8FullDiskEncryption111.
9PatchManagement111.
10Reporting121.
11JavaSoftwareDistribution124AboutThisGuide5AboutThisGuideThisZENworksWhat'sNewReferencedescribesthenewfeaturesintheZENworks2017release.
Theguideincludesthefollowingsections:Chapter1,"What'sNewinZENworks2017Update4,"onpage7AudienceThisguideisintendedforZENworksadministrators.
FeedbackWewanttohearyourcommentsandsuggestionsaboutthismanualandtheotherdocumentationincludedwiththisproduct.
Pleaseusethecommentonthistopicfeatureatthebottomofeachpageoftheonlinedocumentation.
AdditionalDocumentationZENworksissupportedbyotherdocumentation(inbothPDFandHTMLformats)thatyoucanusetolearnaboutandimplementtheproduct.
Foradditionaldocumentation,seetheZENworksDocumentationwebsite.
6AboutThisGuide1What'sNewinZENworks2017Update471What'sNewinZENworks2017Update4ThefollowingsectionsdescribethenewfeaturesandenhancementsinZENworks2017Update4:Section1.
1,"PlatformSupport,"onpage7Section1.
2,"ZENworksConfigurationManagement,"onpage8Section1.
3,"ImagingandRemoteManagement,"onpage10Section1.
4,"Inventory,"onpage10Section1.
5,"AssetManagement,"onpage11Section1.
6,"ZENworksApplication,"onpage11Section1.
7,"EndpointSecurityManagement,"onpage11Section1.
8,"FullDiskEncryption,"onpage11Section1.
9,"PatchManagement,"onpage11Section1.
10,"Reporting,"onpage12Section1.
11,"JavaSoftwareDistribution,"onpage121.
1PlatformSupportZENworks2017Update4supportsthefollowingnewplatforms:AgentandPrimaryServerSLES12SP4AgentandSatelliteServerWindowsServer2019Windows101809Window10enterpriseLTSC2019OES2018SP1RHEL7.
5ScientificLinux7.
5Mac10.
14Mobile:iOS12Android5andlaterFormoreinformationonthesystemrequirements,refertotheZENworks2017Update4SystemRequirements.
8What'sNewinZENworks2017Update41.
2ZENworksConfigurationManagementSection1.
2.
1,"MobileManagement,"onpage8Section1.
2.
2,"ClientManagement,"onpage101.
2.
1MobileManagementFactoryResetProtectionofwork-managedAndroiddevices:Inthisrelease,ZENworksenablesyoutopreventusersfromfactoryresettingtheirworkmanageddevicesfromSettings.
YoucanalsowhitelistoneormorecorporateunlockaccountsthatneedtobeauthenticatedbeforethedevicewillcontinuewithSetup,incaseofunauthorizedfactoryresets,suchas,frombootloaderorfastboot.
Formoreinformation,seeEnablingFactoryResetProtectiononAndroidWork-ManagedDevicesintheZENworks2017MobileManagementReference.
AdditionalinformationonAndroidbundles:TheAppDetailssectionwithintheAndroidBundlesSummarypagehasbeenenhancedtoincludeadditionalinformation,suchas,theappversionandtrack,andthelastpublisheddate.
AdditionalinformationonDeviceSummary:TheDeviceInformationpageofAndroiddevicesnowincludesadditionalsoftwaredetailssuchasthesecuritypatchlevelappliedonthedevice.
Thisinformationcanalsobeviewedinthegeneratedmobileinventoryreports.
Formoreinformation,seeViewingDeviceInformationintheZENworks2017MobileManagementReference.
DeprecationoftheDeviceAdminAPI:Withthisrelease,ZENworkshasstoppedsupportforthebasicmodeofenrollmentthatusestheDeviceAdminAPI,forAndroiddevices.
ThiscomesafterGoogle'sannouncementtodeprecatetheDeviceAdminAPIfromtheAndroidPrelease.
ZENworkswillnowsupportonlytwowaysofenrollmentforAndroiddevices;theworkprofilemodeandthework-manageddevicemode.
Formoreinformation,seehttps://www.
novell.
com/communities/coolsolutions/removal-device-admin-api-android-devices/.
RestartAndroidmobiledevices:YoucannowrestartAndroidworkmanageddevicesbyusingtheexistingRestart/Shutdownquicktask.
Formoreinformation,seeRebootorShutdownDevicesintheZENworks2017MobileManagementReference.
SupportforDirectBoot:Inthisrelease,ZENworkssupportsDirectBootforAndroid7.
0+devices.
ThisfeatureenablestheZENworksAgenttoalwaysbeactiveonanAndroiddeviceevenbeforethedeviceisunlocked.
AdministratorscanenforcepoliciessuchastheCompliancepolicy,removetheWorkProfileorfactoryresetthedevice,evenifthedevicehasnotbeenunlocked.
DistributionofiOSenterpriseapps:UsingtheexistingBundlesfeature,ZENworksnowletsyoudistributecustomin-houseappsthatarenotpubliclyavailablefordistribution,toiOSdevices.
Formoreinformation,seeDistributingiOSEnterpriseAppsintheZENworks2017MobileManagementReference.
DistributionofWi-Ficonfigurationusingbundles:ThisfeatureenablesadministratorstocreateanddeployWi-FiProfilebundlesonusers'devices,therebyenablingtheuserstoconnecttheirdevicestothecorporatenetwork,usingthespecifiedwi-ficonfiguration.
Thisfeatureisavailableforboth,AndroidandiOSdevices.
What'sNewinZENworks2017Update49Formoreinformation,seeDistributingCorporateWi-FiSettingsintheZENworks2017MobileManagementReference.
Office365AndroidAppProtectionpolicy:ZENworksnowenablesyoutosecureAndroidappsbuiltusingtheIntuneSDK(forexample,MicrosoftOffice365apps),withoutusershavingtoenrolltheirdevicesinZENworks.
Formoreinformation,seeCreatingtheAppProtectionPolicy(AndroidIntuneAppProtectionPolicy)intheZENworks2017MobileManagementReference.
SyncbetweenZENworksandAzure:ThisfeatureenablesadministratorstoconfigureascheduletosynctheZENworksIntuneAppProtectionpolicywithMicrosoftAzure.
Formoreinformation,seePolicySyncScheduleintheZENworks2017MobileManagementReference.
SupportfornewAndroidrestrictions:ThelistofAndroidrestrictionshavebeensignificantlyenhancedforbothAndroidworkprofileandworkmanageddevices(includingAndroidPdevices).
Theserestrictionsincludesettingssuchasenablingdevicekeyguardfeatures,mountingofphysicalexternalmedia,sharingofdatausingNFCbeamandrestrictingOSupdates.
Formoreinformation,seeSection12.
5.
2ApplyingDeviceRestrictionsintheZENworks2017Update4MobileManagementReference.
SupportfornewiOS12restrictionsandDEPsettings:NewiOS12restrictions:ThisreleaseincludessupportforadditionaliOS12restrictionssuchasautomaticupdateofthedateandtime,settingupofnewdevicesthatarewithinproximityanddelayingOSupdates.
Formoreinformation,seeEditingaMobileDeviceControlPolicySettingintheZENworks2017MobileManagementReferenceNewDEPsettings:TheDEPsettingsarealsoenhancedtosupportfeaturesthatenableselectionofthedefaultlanguageandregionwhilesettingupAppleTVdevices.
Additionally,tosetupaniOS12DEPdeviceyoucanskipsetupscreenssuchasScreenTime,iMessageandFacetime.
Formoreinformation,seeManagingtheDEPProfileintheZENworks2017MobileManagementReference.
RemotelyresetthepasswordonAndroid8.
0+devices:TheUnlockdevicequicktask,enablesyoutoremotelyresetthepasswordandsetanewpasswordonAndroid8.
0+devices,incasetheuserforgetstheexistingpasswordofthedevice.
Formoreinformation,seeUnlockingaDeviceintheZENworks2017MobileManagementReferenceAuto-fillcredentialsonZENworksappusingQRcode:TheZENworksapploginscreenisenhancedtoincludeaiconthatwillenabletheusertoscantheQRcodetoautomaticallyfillthelogincredentials.
Ontappingthisicon,theuserneedstoscantheQRcodeembeddedwithinthereceivedInviteLetter,afterwhichtheuserisre-directedtotheappandthelogincredentials(excludingthepassword)isautomaticallyfilled.
Formoreinformation,seeEnrollingMobileDevicesintheZENworks2017MobileManagementReference.
AuditofWipeDeviceActionsofIntuneAppProtecteddevices:AdministratorscannowconfigurethechangeeventsforuserstoaudittheinitiationoftheIntuneAppWipeaction.
UpdatetotheAppsCatalogpage:TheAppsCatalogpagenowincludesappsthatarecreatedusingtheiOSAppBundlesandiOSEnterpriseapps.
Formoreinformation,onallthemobilemanagementfeatures,seetheZENworks2017MobileManagementReference.
10What'sNewinZENworks2017Update41.
2.
2ClientManagementLocateWindows10devicesfromtheGeolocationtab:ThisZENworksfeatureusestheWindows10locationservicetogeographicallylocatedevicesthatoperateonWindows10version1709andlaterWindows10operatingsystems.
YoucanaccesstheGeolocationtabwhenyouclickaworkstationdevicelink.
WipeaWindowsdeviceusinganewquicktask:ThenewWipequicktaskresetstheselectedWindowdevice'soperatingsystemtoitsfactorysettingsandremovesallnon-OSfilesandapplicationsfromthedevice.
YoucanimplementthequicktaskwhenyouhaveaWindowsdeviceselectedintheWorkstationslist.
ThisfeatureisonlysupportedforWindows10devices.
NewInstallationSchedulesinBundles:Withthenewbundleinstallationschedule,youcannowdefinethedateandtimewhenbundlesshouldbeinstalledonmanageddevices.
Abilitytocheckforprocessesorservicesthatarerunningonamanageddevice:WithinaZENworksbundle,itisnowpossibletoaddarequirementtocheckforprocessesorservicesthatarerunningonamanageddevice.
ChangeinJavadistribution:Inthisrelease,JavasoftwaredistributionwillbethroughZulu,anopensourceplatform.
TheJavadistributionchangehasbeenintroducedtoenableZENworkstoprovidesecurityfixesonamoreregularbasis.
ThenewJDKplatformwillbeinstalledautomaticallyonallPrimaryServers,SatellitesandagentswhenZENworks2017Update4isdeployedinthezone.
1.
3ImagingandRemoteManagementReferencetoanexistingMDTbundle:ThisfeatureenablesadministratorstocreateMDTbundlesusingWIMfilesthathavealreadybeenuploadedinanexistingbundle.
Formoreinformation,seeSection3.
8:ConfiguringMDTDeploymentBundlesandSection5.
3:Action-MDTDeploymentintheZENworksPrebootServicesandImagingReference.
TLS1.
2SupportforRemoteManagementandImaging:TheremotesessionsaresecuredusingSecuredSocketLayer(TLSv1.
2protocol).
ThisfeatureisonlyavailableonWindowsdevices.
1.
4InventoryAutomaticcleanupofPRUbundles:OldPRUbundles,whicharehiddenandnotused,nowgetcleanedautomatically.
Inventoryscanjustafteradeviceisimaged:Thisfeatureenablesadministratorstoperformafullscanofthedeviceafterthedeviceisre-imaged.
Insteadofwaitingforthescheduledscantocompleteandthedatagettinguploadedtotheserverlater,youwillgettoknowimmediatelyaboutthecurrentinventorydataandyoucantakethenecessaryactionssuchasdeploymentofsoftwarebundles.
Formoreinformation,seeSection2.
2:SchedulinganInventoryScan(PerformFullscanafterimagingadevice)intheZENworksAssetInventoryReference.
MobilehardwareinventorydatainZCCInventoryreports:Hardwareinventoryinformationaboutmobiledevicesisnowbeingstoredininventorytables.
ThisenablestheinformationtobeavailableinZCCinventoryreports.
Newfieldshavebeenaddedininventoryreportstofacilitatethesame.
What'sNewinZENworks2017Update411Manuallyaddinganewdevicemanufacturernameormodeltoinventoryreports:Youcannowmanuallyaddadevicemanufacturernameandmodelnameornumbertoaninventoryreport.
Formoreinformation,seeManuallyAddingNewDeviceManufacturerorModeltotheInventoryReportsintheZENworksAssetInventoryReference.
Thisreleasealsoincludesinventoryprocessingimprovements.
1.
5AssetManagementImportingnetworkdevicesandlinkingtoZAMContracts:NetworkDeviceswithADFdatacanbeimportedintoZENworksControlCenterandthenlinkedtoZENworksAssetManagementcontracts.
Formoreinformation,seeSection4:ImportingDevicesfromCSVFilesintheZENworksDiscovery,Deployment,andRetirementReference.
1.
6ZENworksApplicationThisreleaseincludesanewregistrykeytodisablepoweroptionswhenZAPPistheshell.
1.
7EndpointSecurityManagementWildcardenhancementintheApplicationControlPolicy:EnhancementsmadetotheApplicationControlPolicyenablewildcardentriesinapplicationcontrollists,whichprovidemorecomprehensiveaccesscontrolswithlessconfigurationoverhead.
UpdatedStorageDevicecontrolPolicy:EnhancementsmadetotheStorageDeviceControlPolicysimplifypolicycreationandmaintenanceandpavethewayformorecontrolsinthenextrelease.
1.
8FullDiskEncryptionBypassingPBAforspecifiedreboots:Whenusingpre-bootauthentication(PBA)withaDiskEncryptionpolicy,youcanusethiscommandoptiononencryptedagentdevicestotemporarilybypasspre-bootauthenticationforaspecifiednumberofdevicestartsorrestarts.
ThisfeaturecanbeexecutedonclientdevicesfromtheCommandsoptionintheFullDiskEncryptionAgentorfromtheCommandPromptonthedeviceusingzescommandbypassPbaWithRebootCount.
Formoreinformation,seeBypassingPBAforSpecifiedRebootsintheZENworksFullDiskEncryptionAgentReference.
1.
9PatchManagementReleasedevicepatchesfromquarantineusingaquicktask:Scheduledpolicyorremediationinstallationsofpatchesonadevicewillnotexecuteforquarantinedpatches.
Ifyouresolvedanissuethatprohibitedapatchfrominstalling,butthepatchisquarantined,youcanusetheReleaseQuarantinedPatchesquicktasktoreleasequarantinedpatchesonadevice.
Patchesthatarereleasedfromquarantineremaininareleasedstateuntilaninstallationattemptisexecuted.
12What'sNewinZENworks2017Update4Formoreinformation,seeReleaseQuarantinedPatchesintheZENworks2017PatchManagementReference.
PatchManagementSystemvariables:TwonewSystemvariableswereaddedtoPatchManagementtofurthercontrolpatchrebootbehaviorandtocontrolstorageofpatchtrendingdatathatwasconfiguredinanearlierversionofZENworksPatchManagement.
PATCH_ALWAYS_SHOW_REBOOT_PROMPTThisvariabledisplaysthepatchrebootprompttouserswhenthePatchPolicyRebootBehavioroptionforSuppressrebootissettoYes.
PATCH_TREND_DATA_DAYSThisvariablecontrolsthenumberofdaysthatpatchDashboardandTrendingdata,whichwasconfiguredinanearlierversionofZENworks,isstoredinthedatabase.
Setthevaluetoxdaysofstoringdataorsetitto0todisablestoringthedata.
1.
10ReportingAdministratorscannowuseZENworksReportingtoreportonazonewithPostgreSQLasthedatabase.
1.
11JavaSoftwareDistributionChangeinJavadistribution:Inthisrelease,JavasoftwaredistributionwillbethroughZulu,anopensourceplatform.
TheJavadistributionchangehasbeenintroducedtoenableZENworkstoprovidesecurityfixesonamoreregularbasis.
ThenewJDKplatformwillbeinstalledautomaticallyonallPrimaryServers,SatellitesandagentswhenZENworks2017Update4isdeployedinthezone.