Configuring Windows discovery
BMC Atrium Discovery is a Linux-based appliance. Because the methods that are used to access Windows hosts are only available from Windows systems, Windows discovery requires a Windows proxy host.
The Windows proxy scans Windows hosts on behalf of the discovery service on the BMC Atrium Discovery appliance.
Proxy changes in 8.3 SP2 and later versions
In BMC Atrium Discovery 8.3 SP2 and later versions, installation and management of proxies has been improved with the introduction of a new Windows proxy manager tool. It is also possible to install multiple proxies of each type on a single host. For information about the changes, see Windows proxy manager.
You can download the Windows proxies and Windows proxy manager as installation files from the appliance and install onto the local Windows host. For more information, see Installing Windows proxies.
Windows discovery is handled by one of the following ways:
- Credential Windows proxy — It is a BMC Atrium Discovery service that runs on a customer-provided Windows host. To perform discovery, it uses credentials supplied by the BMC Atrium Discovery appliance from the credentials vault.
- Active Directory Windows proxy— It is a BMC Atrium Discovery service that runs on a customer-provided Windows host. To perform discovery, it logs in as an Active Directory user.
- While installing the proxy, you must configure it as a user on the Active Directory domain that can log in and run discovery commands on the hosts to discover.The Active Directory proxies do not use the credentials supplied by the BMC Atrium Discovery appliance from the credentials vault.
- When you install the Active Directory Windows proxy (as the Windows domain administrator), the appliance uses it to discover the Windows hosts in that domain. The proxy can only discover Windows hosts on the domain it is a member of, or other domains trusted by that domain. To discover domains which are not trusted, you must configure another Windows proxy with the appropriate domain permissions.
From BMC Atrium Discovery version 8.2, the Workgroup Windows proxy is no longer supplied with the appliance. All of its functionality has been moved into the Active Directory Windows proxy.
Windows proxy manager
The Windows proxy manager enables you to install and manage proxies on the Windows host on which the manager is installed. The Windows proxy manager is installed when you install a proxy. You can perform the following tasks using the Windows proxy manager:
- Create (install a new proxy service)
- Edit the port that the proxy uses and the user account that the proxy runs as
- Delete (uninstall a proxy service)
- Start a selected proxy
- Stop a selected proxy
- Restart a selected proxy
Windows proxy pool
To balance the load of the proxies, distribute discovery requests, and offer scalability and better performance solutions for Windows discovery, proxies are grouped into proxy pools based on the following criteria:
- Type of proxies: A proxy pool must contain either Credential proxies or Active Directory proxies. A proxy pool must not contain proxies of both the types.
- Version of proxies: A proxy pool must contain either version 9.0 proxies or proxies of earlier versions. A proxy pool must not contain proxies of both version 9.0 and proxies of earlier versions.
Based on the proxy version and version of the Operating System (OS) the proxy runs on, the proxy capability is one of the following:
- Fully IPv6 capable: Can scan IPv6 addresses and retrieve IPv6 data. Where BMC Atrium Discovery version 9.0 or later proxies are running on Windows 2008 or later.
- Cannot scan IPv6 addresses: Can retrieve IPv6 data but the Windows version does not support scanning IPv6 addresses. Where BMC Atrium Discovery version 9.0 or later proxies are running on versions of Windows older than Windows 2008.
- Not IPv6 capable: Cannot scan IPv6 addresses and cannot retrieve IPv6 data. BMC Atrium Discovery proxies from versions older than 9.0.
The proxies in a pool must have identical access to Windows hosts, as only one proxy per pool is tested for access. The appliance's UI displays the pools in the order (from top to bottom) in which you have added them to the appliance. You can change their order. For discovery tasks, the proxies in a Windows proxy pool are selected depending on their loading. If a proxy is overloaded, or unavailable, the discovery task is assigned to the next available proxy in the pool.
Operating System compatibility for IPv6 discovery
To discover IPv6 hosts, the Operating System (OS) and proxy compatibility requirements are as follows:
- The version of the proxy must be of BMC Atrium Discovery 9.0, or later version
- The proxy must run on an OS which is Windows 2008, or later version
- The OS of the target hosts must be Windows 2008, Windows Vista, or a later version
The supported discovery methods are WMI and RemQuery.
Steps to configure Windows discovery
Before you can use a Windows proxy to discover your Windows IT infrastructure, you must perform the following tasks in the given order:
- Download and install the Windows proxy software (including the Windows proxy manager).
For more information, see installing Windows proxies .
- Add Windows proxies to the appliance using the Windows proxy manager.
For more information, see Windows proxy manager.
- Add Windows proxy pools.
For more information, see adding proxy pools.
- Add Windows proxies to the proxy pools.
For more information, see adding proxies to pools.
- Edit the firewall rules to permit communication between the appliance and the Windows proxies.
For more information, see editing the firewall.
- Verify that the Windows proxy service has started.
For more information, see testing Windows credentials and communication.
Potential user lock out
By default, AD accounts have a limited number of login attempts, for example three attempts in fifteen minutes. Access Denied errors from WMI, DCOM, and local commands such as systeminfo are counted as unsuccessful login attempts. Where target hosts are incorrectly configured, this limit can be exceeded and the account locked out.
To avoid this, configure the Discovery account to accept unlimited login attempts.
Windows discovery utilities no longer shipped in BMC Atrium Discovery
From version 8.1 the following utilities are no longer shipped with BMC Atrium Discovery. You can download them freely and install them where required.