1.2 ZENworks Configuration Management

1.2.1 Ondemand Distribution of Content

Up to this release, any content (bundles, policies, system updates, patches) that you wanted on a managed device had to first be replicated to a Content Server (Primary Server or Satellite) accessed by the device. In ZENworks 2020 Update 3, Content Servers can now retrieve content ondemand when a device requests it, meaning that the content no longer needs to be replicated as before. Instead, if a Content Server does not have the content cached locally, it requests the content from an upstream server, and that server streams it back to the requesting Content Server where it is cached for use. Both distribution methods - replication and ondemand - can be used.

This ensures that app installations do not fail with awaiting content, and installations can be triggered without waiting for content to be replicated across the zone.

1.2.2 ZENworks Control Center

Pin Favorites: In the Frequently Used tab in ZCC, you can pin and unpin frequently used objects as favorites.

Monitor Active Sessions: In the Diagnostics page, administrators can monitor the active sessions. The ZENworks Control Center Active Sessions lists the currently logged-on administrators (super administrators and non-super administrators). Administrators can search for active users by entering the name of the user in the Search field.

For more information, see ZENworks Control Center Active Sessions.

Rearranging Dashlets Arranging dashlets with the same height dashlet would cause a blank space. Now, this has been fixed and dashlets can be asymmetrically arranged for optimum utilization of the dashboard.

Session Timeout: Introduced a setting to control ZCC Session timeout. Using this setting administrators can choose a timeout value through UI instead of going through configuration files. Additionally, administrators can configure the setting to display a session timeout prompt and the ability to increase the timeout.

For more information, see Changing the Timeout Value for ZENworks Control Center.

Remove MDM Enrolled Devices: This setting applies only for Win MDM enrolled devices, you can also set the 'remove device' value on the device. If the device does not contact the ZENworks server, the device automatically gets un-enrolled from MDM, without any ZENworks intervention.

For more information, see Windows MDM Reference.

Auditing Logins: The information about the users logged into devices is audited. You can view the current and historical users to find out who is using the devices and also view which user was using which device.

Device Data Collection: ZENworks collects the Last Boot Time, Network Location and Reboot Pending data from the devices and displays it on the Device Summary page. Devices can also be searched using these fields.

Deployment Packages: From ZENworks 2020 Update 3 onwards, the Network (.NET required) and Standalone (.NET required) packages for Windows and Network (JRE required) for Linux are no longer supported. The Network, Standalone, and Web deployment packages for Windows and Linux are supported.

An administrator user can download the packages from the Download ZENworks Tools page in ZENworks Control Center (Home > Download ZENworks Tools > ZENworks Agent > Agent Packages). The three versions of each package are available in version x86, x86_64, and All architectures.

For more information, see Package Types and Architectures.

1.2.3 ZENworks Remote Management

Recording a Remote Management Session: A new session recording icon is added in the viewer toolbar to start the recording of the remove management session. You can view the remote session recordings and download the recording in FBS or MP4 format.

For more information, see Recording a Remote Management Session.

ZENworks Chat: TThe ZENworks Chat feature provides chat capability during a remote session. It allows administrators to communicate with the manage device user on the Remote Management session. It is enabled only when either a Remote Control or a Remote View session is initiated.

For more information, see Managing a Remote View Session.

Reboot Reconnect: If the managed device is shut-down during a remote management session, the viewer will wait for 10 minutes (customizable) for the device to reboot. On successful reboot within the specified time, the viewer session gets reconnected.

For more information, see Reconnecting a session after Reboot.

1.2.4 Mobile Management

Support for Android 13: The ZENworks Agent app version 20.2.1 now supports Android 13.

Android Enterprise App The Android Enterprise App bundle enables you to distribute an app that is available in the Google Play Store. After creating this bundle, assign the bundle to users or devices. On assigning the bundle to a mobile device, the assigned app will be distributed to a device based on the assignment schedule.

For more information, see Distributing Android Enterprise Apps.

1.2.5 Bundle or Policy Management

Show Summary: In the Requirement tab, the Show Summary button is introduced to view the summary of the added filters, which helps administrators to view the applied filter in an equation form.

For more information, see Software Distribution Reference.

Searchability To improve the searchability, in the bundle list page and new filters are introduced for disabled and sandbox bundles.

For more information, see Software Distribution Reference.

Search using GUID: Devices, Bundles, or Policies can be searched using GUID on the respective listing page.

For more information, see Software Distribution Reference.

Summary Page: Bundle and Policy Summary pages include the Original Created Date, the Version Created Date, and the Modified Date. These fields will be updated with month, date, year and time details.

For more information, see Software Distribution Reference.

MSIx The new feature is added to support installing MSIx files on the Windows Agent devices as a bundle action. An MSIx application installer can be created from existing installers such as .exe, .msi, etc., and a valid certificate from a Certificate Authority by using the Microsoft MSIX Packaging tool.

For more information, see Action - Install MSIX.

1.2.6 Advanced Authentication

Introduced multi-factor authentication using Micro Focus NetIQ Advanced Authentication. To enhance security, you can configure advanced authentication while logging into ZENworks Control Center. ZENworks provides a free limited entitlement to Advanced Authentication, which supports the following authentication methods:

  • One-Time Password (OTP via Hard or Soft Token)

  • SMS OTP

  • Email OTP

  • RADIUS Client

  • Emergency Password

  • LDAP Password

NOTE:If required, you can purchase the Full Advanced Authentication from Micro Focus and use all the supported methods.

For more information, see Getting Started with Advance Authentication.

1.2.7 Security Enhancements in ZENworks

Disabling of port 7628 on Primary Server: Port 7628 is disabled on Primary Servers for both Windows and Linux to reduce the attack surface on the primary server.

The following functionalities are achieved via port 7628:

  • ZENworks Agent Status on the Device Summary page

  • Quick task execution

  • Discovery of devices with ZENworks Agent installed

We are now enabling all Quick task Execution and Agent status retrieving for primary servers via ZeUS push notification instead of via port 7628. This is done for both Windows and Linux Primary servers.

Port 80 is Disabled: ZENServer’s non-secure port (80) is disabled by default to ensure that the ZENServer communication is over a secure port (443).

HTTP Strict-Transport-Security: HTTP Strict Transport Security (HSTS) is now enabled to protect web application users against some passive and active network attacks.

For more information, see Disabling HTTP Strict Transport Security (HSTS).

Tomcat Split: In ZENworks 2020 Update 3, Tomcat is split into separate instances, client, and administrative services for enhanced system security and management. The administrative service hosts the ZENworks Control Center and all administrative services which are accessed by zman commands. By default, this process runs on the 7443 port. The other Tomcat process hosts client web services, ZENworks End User Portal, and the ZENworks Setup page. By default, this process runs on the 443 port.

For more information, see Configuring an Update.

Satellite Server Support: From ZENworks 2020 Update 3, the Macintosh devices are no longer supported as Satellite Servers.

Dockerisation of Imaging: As part of ZENworks 2020 Update 3 dockerisation of imaging, all the imaging service, log and conf names have been changed from 'novell' to 'micro focus'.

For more information, see Dockerisation of Imaging.