Creating and assigning update-compliance policies

You can create an update-compliance policy based on the acquired updates in the updates repository. You can then assign the policy to one or more resource managers or managed servers.

Procedure

To create and assign an update-compliance policy, complete the following steps.

1. Create an update-compliance policy.
   1. From the XClarity Orchestrator menu bar, click Provisioning () > Updates and then click Policy Management to display the Policy Management card.
      
      
   2. Click the Create icon () to display the Create compliance policy dialog.
   3. Specify the name and optional description for the policy.
   4. Specify the trigger for the policy. This can be one of the following values.
      • Flag if not exact match. If the software or firmware version that is installed on resource is earlier or later than the target firmware version in the update-compliance policy, the resource is flagged as not compliant. For example, if you replace a network adapter in a server, and the firmware on that network adapter is different than the target firmware version in the assigned update-compliance policy, the sever is flagged as Not Compliant.
      • Do not flag. Resources that are out of compliance are not flagged.
   5. Click the Rules tab to add compliance rules for this policy.
      1. Select the type of resource for this policy.
      2. Specify the compliance target for the applicable resource and components.
         For resources with components, you can choose one of the following values.

         • Custom. The compliance target for each resource component defaults to the current latest version in the repository for that component.
         • Do not update. The compliance target for each resource component defaults to Do not update. Note that if you change the default value for any component, the compliance target for the overall resource changes to Custom.
           For resources without components and for each component, you can choose one of the following values.

           • {firmware_level}. Specifies that the firmware on the component must be at the selected baseline firmware version.
           • Do not update. Specifies that the firmware on the component is not to be updated. Note that firmware on the backup (secondary) management controller is not updated by default.
      3. Click the Add icon () to add additional rules, and click the Delete icon () to delete rules.
   6. Click Create.
2. From the XClarity Orchestrator menu bar, click Provisioning () > Updates and then click Apply and Activate to display the Apply and Activate card.
3. Assign the update-compliance policy to resources.
   • To a single resource

     For each resource, select a policy from the Assigned Compliance Policy column drop-down list.

     You can select from a list of compliance policies that are applicable to the resource. If a policy is not currently assigned to the resource, the assigned policy is set to No Assignment. If no policies are applicable to the resource, the assigned policy is set to No applicable policies.

   • To multiple resources
     1. Select one or more resources to which you want to assign the policy.
     2. Click the Assign icon () to display the Assign Policy dialog.
     3. Select the policy that you want assign.

        You can select from a list of compliance policies that are applicable to all selected resources. If a policy is not currently assigned to the resource, the assigned policy is set to No Assignment. If no policies are applicable to the resource, the assigned policy is set to No applicable policies. If resources were not selected before opening the dialog, all policies are listed.

        Note

        Select No Assignment to remove the policy assignment from the selected resource.
     4. Select one of the following scopes for the policy assignment.
        • All applicable devices that are…
        • Only selected applicable devices that are …
     5. Select one or more policy criteria.
        • Without an assigned policy
        • Non-compliant (overwrite current assigned policy)
        • Compliant (overwrite current assigned policy)
     6. Click Apply.

        The policy that is listed in the Assigned Policy column on the Firmware Updates: Repository page changes to the name of the selected firmware-compliance policy.

   • To groups of resources
     1. Click the Assign icon () to display the Assign Policy dialog.
     2. Select the policy that you want assign.

        You can select from a list of compliance policies that are applicable to all resources in the group. If a policy is not currently assigned to the resource, the assigned policy is set to No Assignment. If no policies are applicable to the resource, the assigned policy is set to No applicable policies.

        Note

        Select No Assignment to remove the policy assignment from the resources in the group.
     3. Select one or more groups of resources to which you want to assign the policy.
     4. Select one of the following scopes for the policy assignment.
        • All applicable devices that are…
        • Only selected applicable devices that are …
     5. Select one or more policy criteria.
        • Without an assigned policy
        • Non-compliant (overwrite current assigned policy)
        • Compliant (overwrite current assigned policy)
     6. Click Apply.

        The policy that is listed in the Assigned Policy column on the Firmware Updates: Repository page changes to the name of the selected firmware-compliance policy.