Getting started

Everything you need to know about getting Endpoint Automation installed and running in your network.

Uploading Integrated Product Packs

1E provides a number of Endpoint Automation policies and Instructions with the 1E release on the support portal. Integrated Product Packs are loaded into 1E using the 1E Product Pack deployment tool. For more details please refer to 1E product pack deployment tool.

After installation, Endpoint Automation has no immediately available policies, you will first need to load some from the tachyonproductpacks.<version>.zip file - this can be done using the 1E Product Pack deployment tool. The following steps describe how this is done:

Checking the status of Endpoint Automation just after installation

Log on to the 1E portal as a Guaranteed State administrator and navigate to the Endpoint Automation > Overview page.

Before running the 1E Product Pack deployment tool, you will see at the top of the Overview page that there are 0 Policies available.

Running the 1E Product Pack deployment tool

1. Navigate to the directory where the tachyonproductpacks.<version>.zip file has been unzipped.

2. You will see two directories: Classic and Integrated.

3. Navigate to the Integrated directory.

4. Double-click on Tachyon.ProductPackDeploymentTool.exe.

5. Click on Yes in any UAC dialog displayed.

6. The 1E Product Pack deployment tool dialog will appear.

You must specify the URL of the 1E Consumer API in the Server field and then click on Test Connection to verify that you have entered the correct value. The Style column of the Available Product Packs table indicates whether each Product Pack is Classic or Integrated. The Available Product Packs table will be populated with all the Product Pack zip files encountered in the directory the tool was launched from and all its sub-directories.

The Select all box can be used to select or deselect all the items in the Available Product Packs table.

There are five Integrated Product Packs provided with the release and these are listed, and also selected, in the Available Product Packs table:

• Endpoint Performance.

• Microsoft SCCM Client Health.

• Nomad Client Health Policy

• 1E Core Utilities

• Windows Client Health Policy

Uploading Product Packs is done by clicking the Upload selected button, which uploads all the selected items in the Available Product Packs table.

The progress of the upload is displayed in the Results field. When the upload has finished the word Done. will be displayed in the Results field.

After uploading has completed you can click the Close button on the deployment tool.

-url "<ConsumerAPI>" for example: -url "https://tachyon.acme.local/Consumer".-log <level>

Configuring Endpoint Automation

1. You need to configure users with the following roles to use and administer Endpoint Automation:

   • Guaranteed State user: Who can view the dashboards or an administrator.

   • Guaranteed State Administrators: To upload, create, approve and manage policies.

   • Guaranteed State Approver: To use Endpoint Automation, and approve rule changes.

   • Guaranteed State Policy Approver: Assign Policies to Management Groups (does not allow use of Endpoint Automation).

     Refer to 1E Platform Roles and Securables

2. To configure Endpoint Automation, you will need the following:

   • An appropriate 1E License to permit using Endpoint Automation. This is normally included in a standard 1E license.

   • A domain security group representing Guaranteed State Administrators who will use Endpoint Automation.

The steps below describe how a 1E user will be created for this group, and a role which grants access to the Endpoint Automation pages and instructions.

1. A 1E user with the following role permissions:

   • Permissions Administrators role in order to create the above 1E user for the security group.

   • Guaranteed State Administrators role to upload, create and manage policies (optionally member of the above security group).

   • Instruction Set administrator role to upload instructions.

   • Log Viewers role to aid troubleshooting (optional).

2. One or more Integrated Product Packs.

Assigning users to the Guaranteed State Administrators role

To optionally create a new user:

1. Navigate to the Settings > Permissions > Users page.

2. Click the Add button to start the add user process.

3. In the Add user popup subsequently displayed, type the name of an Active Directory account or security group in the Select user field.

4. Select a name from the search results list and click the Add button.

5. The new user will be added to the Users table.

To assign the new user to the Guaranteed State Administrators role in the:

1. Users table, locate the row for the new user and click on the link in its Name column.

2. User : <user/group> page, click the Edit button.

3. Edit roles assigned to user popup, scroll down the list and check the checkbox for the Guaranteed State Administrators role.

4. Click Save.

To verify:

1. Logon to the 1E Portal using a 1E user account with the new Guaranteed State Administrators role.

2. Navigate to the Endpoint Automation > Overview page.