Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

[Contents][Glossary][Index][Back][Next]


6.8.1 Adding a judgment item to a user definition

To add a judgment item to a user definition in the Edit Judgment Policy (Judgments for user definition) window:

  1. In the Edit Judgment Policy (Judgments for user definition) window, click the Add button.
    The Add (judgment item information) dialog box appears.

    [Figure]

  2. Enter the name of the judgment item.
    Type the judgment item name as a character string of no more than 255 bytes. This item is mandatory.
  3. Define the user-defined judgment condition.
    Add, delete, or change the judgment condition. Click the appropriate button, and then edit the information in the displayed dialog box.
  4. Select a security level.
    Select a security level from the pull-down menu. The default is Caution.
  5. Click the OK button.
    The Add (judgment item information) dialog box closes, and you are returned to the Edit Judgment Policy (Judgments for user definition) window.

The following table lists the names of the dialog boxes and message boxes displayed when the corresponding buttons are clicked in the Add (judgment item information) dialog box.

Table 6-28 Names of the dialog boxes and message boxes displayed from the Add (judgment item information) dialog box

No. Button Dialog box name or message box name
1 Add Add (judgment condition) dialog box
2 Change Update (judgment condition) dialog box
3 Delete Delete (judgment condition) message box

The following explains the procedures for adding, changing, or deleting a user-defined judgment condition, and describes how to set judgment conditions for these items.

Organization of this subsection
(1) Adding a user-defined judgment condition
(2) Changing a user-defined judgment condition
(3) Deleting a user-defined judgment condition
(4) Example of setting a judgment condition judging client compliance with power-saving initiatives

(1) Adding a user-defined judgment condition

To add a user-defined judgment condition:

  1. In the Add (judgment item information) dialog box, click the Add button.
    The Add (judgment condition) dialog box appears.

    [Figure]

  2. Enter the user-defined judgment condition.
    The following table lists the items to set.

    Table 6-29 Setting items for the Add (judgment condition) dialog box

    No. Window item name Description Default
    1 Class From the drop-down lists, select the class and property containing the information to be used in judging the user definition. For the available options, see Table 6-30 List of classes and properties that can be used in user-defined judgments.
    These items are mandatory.
    Asset information
    2 Property User property Area-1
    3 Comparison condition Numeric property Select a comparison condition from the pull-down menu. Four options are available:
    • Match
    • Do not match
    • Not greater than
    • Not less than
    Match
    String property Select a comparison condition from the pull-down menu. Seven options are available:
    • Match all the words
    • Match part of the words
    • Match beginning of the words
    • Match end of the words
    • Do not match
    • Not greater than
    • Not less than
    Match all the words
    Date/time property Select a comparison condition from the pull-down menu. Four options are available:
    • Match
    • Do not match
    • Not greater than
    • Not less than
    Match
    4 Comparison value Numeric property Type a numeric value to compare with the property. You can enter a positive number of 1 to 19 digits, or a negative number of no more than 20 digits beginning with a hyphen (-).
    A value must be set.
    --
    String property Type a character string to compare with the property. Enter any string (other than a line feed code) no larger than the property size.
    For details about property sizes, see Table 6-30 List of classes and properties that can be used in user-defined judgments.
    A value must be set.
    --
    Date/time property Set one or more of the following items to compare with the property:
    Year: 1 to 9999
    Month: 1 to 12
    Day: 1 to 31
    Hour: 0 to 23
    Minute: 0 to 59
    Second: 0 to 59
    Time at which the Add (judgment condition) dialog box was opened.
    5 Treatment when value is not set for property Select Treatment when value is not set for property from the pull-down menu. Four options are available:
    • Treat the judgment condition as met
    • Treat the judgment condition as not met
    • Do not judge this condition
    • Treat the security level as unknown
    Treat the security level as unknown

    Legend:
    --: No default provided.

     
    Note
    • You cannot add a judgment condition that duplicates the class, property, comparison condition, and comparison value of another judgment condition.
    • You cannot add a judgment condition that duplicates the class, property, and comparison condition (other than Match part of the words) of another judgment condition.
    • You cannot add a judgment condition that duplicates the class, property, and comparison value (other than a value for Match beginning of the words or Match end of the words for a string property) of another judgment condition.
     
    The display items in the Add (judgment condition) dialog box depend on the type of property. For property types, see Table 6-30 List of classes and properties that can be used in user-defined judgments.

    Figure 6-16 Property of numeric type

    [Figure]

    Figure 6-17 Property of string type

    [Figure]

    Figure 6-18 Property of date/time type

    [Figure]

     
    The table below lists the classes and properties that can be used in the user-defined judgment.

    Table 6-30 List of classes and properties that can be used in user-defined judgments

    Asset information name
    (Class)
    Property name Property display name# Type Size
    (bytes)
    Asset information
    (AssetInfo)
    AssetID Asset ID Numeric 10
    AssetKind Asset type String 3
    AssetNo Asset No. String 60
    AssetStatus Status String 3
    AssetWorkKind Usage management String 3
    DMLastUpdateTime Inventory last update date/time Date/time 8
    DMStatus SD installed status String 3
    EndDate End date of use Date/time 8
    GroupID Group ID String 64
    GroupName Group name String 512
    HrdInvUpdateDate Update date of System information Date/time 8
    InsPkgUpdateDate Update date of installed package information Date/time 8
    InventoryKey Assignment key String 128
    LocationID Location ID String 64
    LocationName Location name String 512
    ManagerialGroup Managed group String 512
    ManagerialGroupID Managed group ID String 64
    ManagerialUser Administrator String 255
    ManagerialUserID User ID of administrator String 64
    NNMUpdateDate Update date of NNM Date/time 8
    Note Notes String 255
    PurchasePrice Purchase price String 15
    Purpose Purpose String 255
    RegistrationDate Reg. date Date/time 8
    SoftInvUpdateDate Update date of Software inventory information Date/time 8
    SoftwareStatus Software status String 3
    StartDate Start date of use Date/time 8
    StocktakingDate Stocktaking date Date/time 8
    UpdateUser Update user name String 255
    UserID User ID String 64
    UserName User name String 255
    UserPropertyArea_n (n is 1-2) User property Area-n (n is 1-2) String 255
    UserPropertyCode_n (n is 1-6) User property Code-n (n is 1-6) String 64
    UserPropertyDate_n (n is 1-6) User property Date-n (n is 1-6) Date/time 8
    UserPropertyField128_n (n is 1-2) User property Field 128-n (n is 1-2) String 128
    UserPropertyField255_n (n is 1-2) User property Field 255-n (n is 1-2) String 255
    UserPropertyField32_n (n is 1-6) User property Field 32-n (n is 1-6) String 32
    UserPropertyField64_n (n is 1-2) User property Field 64-n (n is 1-2) String 64
    UserPropertyUint_n (n is 1-6) User property Uint-n (n is 1-6) Numeric 10
    UsrInvUpdateDate Update date of user inventory information Date/time 8
    Hardware information
    (HardwareInfo)
    AssetID Asset ID Numeric 10
    CircuitSpeed Line speed Numeric 10
    ComputerID Computer ID String 200
    CPUClock Processor speed Numeric 10
    CPUNumber Number of processors Numeric 5
    CPUType Processor String 5
    Developer Developer String 60
    HostName Host name String 64
    IPAddress IP address String 15
    MACAddress MAC address String 17
    MachineKind Device type String 5
    MBSAVersion MBSA version String 200
    MemorySize Memory Numeric 19
    Model Model String 60
    ModelKind Composition String 3
    MonitorKind Monitor type String 3
    MonitorResolution Monitor resolution String 3
    MonitorSize Monitor size Numeric 5
    Name Device name String 255
    NNMSelectionName NNM selection name String 255
    NumberOFPort Number of ports Numeric 10
    OSInfo OS String 200
    OSVersion OS version String 200
    RemainHDSize Hard drive free space Numeric 19
    SerialNo Serial No. String 30
    Specification Specification String 255
    TotalHDSize Hard drive sizes Numeric 19
    UserPropertyArea_n (n is 1-4) User property Area-n (n is 1-4) String 255
    UserPropertyCode_n (n is 1-12) User property Code-n (n is 1-12) String 64
    UserPropertyDate_n (n is 1-6) User property Date-n (n is 1-6) Date/time 8
    UserPropertyField128_n (n is 1-8) User property Field 128-n (n is 1-8) String 128
    UserPropertyField255_n (n is 1-8) User property Field 255-n (n is 1-8) String 255
    UserPropertyField32_n (n is 1-8) User property Field 32-n (n is 1-8) String 32
    UserPropertyField64_n (n is 1-8) User property Field 64-n (n is 1-8) String 64
    UserPropertyUint_n (n is 1-6) User property Uint-n (n is 1-6) Numeric 10

    #
    The above property display names are the defaults. You can modify these display names in the Customize Managed Items window of AIM (by choosing System Definition and then Customize Managed Items in the job menu). For details about the Customize Managed Items window, see the manual Job Management Partner 1/Asset Information Manager Planning and Setup Guide.

     
    Note
    Information about the properties that can be specified in user-defined judgment conditions must be set in advance. Use the Assign Inventory window of AIM (choose System Definition and then Assign Inventory in the job menu) or use the jamimport command (import command for reading asset information as a batch to the asset management database from a CSV file).
    For details about assigning inventory information and about the jamimport command, see the manual Job Management Partner 1/Asset Information Manager Planning and Setup Guide.
     
  3. Click the OK button.
    The Add (judgment condition) dialog box closes and you are returned to the Add (judgment item information) dialog box. The entered judgment condition is added to the list.

(2) Changing a user-defined judgment condition

To change a user-defined judgment condition:

  1. In the Add (judgment item information) dialog box, select a user-defined judgment condition you want to change, and then click the Change button. Alternatively, double-click the user-defined judgment condition you want to change.
    The Update (judgment condition) dialog box appears.
    Note that the Change button is disabled if you select multiple user-defined judgment conditions.

    [Figure]

  2. Change the user-defined judgment condition.
     
    Note
    • You cannot change a judgment condition to one that duplicates the class, property, comparison condition, and comparison value of another judgment condition.
    • You cannot change a judgment condition to one that duplicates the class, property, and comparison condition (other than Match part of the words or Do not match) of another judgment condition.
    • You cannot change a judgment condition to one that duplicates the class, property, and comparison value (other than a value for Match beginning of the words or Match end of the words for a string property) of another judgment condition.
     
  3. Click the OK button.
    The Update (judgment condition) dialog box closes and you are returned to the Add (judgment item information) dialog box. The entered judgment condition is changed.

(3) Deleting a user-defined judgment condition

To delete a user-defined judgment condition:

  1. In the Add (judgment item information) dialog box, click to select the user-defined judgment condition you want to delete.
    You can select multiple user-defined judgment conditions.
  2. Click the Delete button.
    The Delete (judgment condition) message box appears.

    [Figure]

  3. Click the OK button if you are sure you want to delete the judgment condition.
    The Delete (judgment condition) message box closes and you are returned to the Add (judgment item information) dialog box. The selected judgment condition is deleted.

(4) Example of setting a judgment condition judging client compliance with power-saving initiatives

By setting a user-defined judgment condition based on asset information of a client, you can judge whether the client is complying with power-saving initiatives.

(a) Checking whether a power-saving CPU is present

The following table shows an example of setting a judgment condition for checking whether the client has a power-saving CPU.

Table 6-31 Example of setting a judgment condition for checking whether a power-saving CPU is present

No. Item Setting value
1 Class Hardware information
2 Property CPU
3 Comparison condition Do not match
4 Comparison value (string) Type code for the power-saving CPU#
5 Treatment when a value is not set for the property Treat the security level as unknown

#
You can specify more than one CPU type by setting multiple judgment conditions.
For details about the type codes that identify different CPU types, see the manual Job Management Partner 1/Asset Information Manager Planning and Setup Guide.

(b) Checking whether automatic power-off is enabled for the monitor

The following table shows an example of setting a judgment condition for checking whether client monitor power is turned off after a certain length of time (10 minutes). Note that this judgment requires JP1/Software Distribution Client 08-51 or later.

Table 6-32 Example of setting a judgment condition for checking whether the monitor is turned off after the time of 10 minutes

No. Item Setting value
1 Class Name of the class to which the following inventory information is to be assigned:

If the monitor power is AC:
  • Turn off monitor (AC)

If the monitor power is DC:
  • Turn off monitor (DC)
2 Property Name of the property to which the following inventory information is to be assigned:

If the monitor power is AC:
  • Turn off monitor (AC)

If the monitor power is DC:
  • Turn off monitor (DC)
3 Comparison condition Not less than
4 Comparison value (string) 0000000600#
5 Treatment if a value is not set for the property Treat the security level as unknown

#
Specify a 10-digit numeric value, in seconds, that indicates the time when the monitor is turned off.

Reference note
As with monitor power judgment, the following items can also be used as judgment conditions for the client power-saving settings. Note, however, that the following items can be used as judgment conditions only if the JP1/Software Distribution Client version is 09-00 or later.
  • Time after which the hard disks are turned off
  • Time after which the system is placed in standby or sleep status
  • Time after which the system hibernates
For details about setting the corresponding judgment conditions, see Table 6-31.

(c) Checking whether power-saving settings are specified for the CPU (processor)

The following table shows an example of setting a judgment condition for checking whether the processor power management settings specify power saving. Note that this judgment requires JP1/Software Distribution Client 08-51 or later.

Table 6-33 Example of setting a judgment condition for checking whether the processor power management settings specify power saving

No. Item Setting value
1 Class Name of the class to which the following inventory information is to be assigned:

If the processor power is AC:
  • Processor Throttle (AC)

If the processor power is DC:
  • Processor Throttle (DC)
2 Property Name of the property to which the following inventory information is to be assigned:

If the processor power is AC:
  • Processor Throttle (AC)

If the processor power is DC:
  • Processor Throttle (DC)
3 Comparison condition Do not match
4 Comparison value (string) Value to set the processor adjustment you allow#
5 Treatment if a value is not set for the property Treat the security level as unknown

#
To specify more than one value, you must set more than one judgment condition.
The following explains the values you can set:
NONE: The processor always runs at its highest performance level.
ADAPTIVE: The performance level is selected based on the CPU status.
DEGRADE: The processor starts at its lowest performance level, after which its Linear Performance Reduction mechanism (stop clock throttling function) operates governed by the amount of battery discharge.
CONSTANT: The processor always runs at its lowest performance level.

[Contents][Back][Next]


[Trademarks]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated