Creating BigFix® Remote Control target configuration tasks

For example, http://trcserver.example.com/trc.

1. Open the certificate file in a text editor.
2. Select the certificate and copy it to the clipboard.
   Note: You must select everything and include the BEGIN CERTIFICATE and END CERTIFICATE lines.
3. Click Save.

Never

A peer-to-peer session cannot be established between a controller and this target. If a ServerURL is provided, the targets can take part only in remote control sessions that are initiated from the server.

Only if server is unreachable.

A peer-to-peer session can be established between a controller user and this target only when the BigFix® Remote Control server is down or unreachable.

Always

A peer-to-peer session can be established between a controller user and this target.

Note: If this option is selected and a server url is provided, the targets can take part in both peer-to-peer sessions and sessions that are initiated from the server.

The log level determines the types of entries and how much information is added to the log file. Default value is 2.

0 - Logging is set to a minimal level.

1 - Logging is set to ERROR level.

2 - Logging is set to INFO level.

4 - Logging is set to DEBUG level.

Controls the period after which a new log file is started. This period must be shorter than the LogRotation period, therefore not all combinations are valid. LogRollover cannot be disabled. Default value is Daily.

Hourly

Start a new log file on the hour. Recommended if the log is written to frequently or when you use a log level higher than 2.

Daily

Start a new log file every day.

Controls the period after which an older log file is overwritten. Log rotation can be disabled. Default value is Weekly.

Daily

Overwrite log files after 1 day. When LogRollover is set to Hourly, the suffix that is added to the log file name is 00H to 23H.

Weekly

Overwrite log files after 1 week. When LogRollover is set to Hourly, the suffix that is added to the log file name specifies the day and hour. Value can be Mon-00H to Sun-23H. When LogRollover is set to Daily, the suffix that is added to the log file name specifies the day. The value can be Mon to Sun.

Monthly

Overwrite log files after 1 month. 01-00H to 31-23H. When LogRollover is set to Hourly, the suffix that is added to the log file name specifies the numeric day of the month and the hour. Value can be 01-00H to 31-23H. When LogRollover is set to Daily, the suffix that is added to the log file name specifies the numeric day of the month. The value can be 01 - 31.

Disabled

LogRotation is disabled. When LogRollover is set to hourly, the suffix that is added to the log file name specifies the current date and time. Value can be YYYY-MM-DD-hh. When LogRollover is set to Daily, the suffix that is added to the log file name specifies the current date. The value can be YYYY-MM-DD.

selected

The target can take part in monitor peer-to-peer sessions. The Monitor option is available for selection in the session type list in the controller window. The Open connection window also lists a Monitor option.

not selected

The target cannot take part in monitor peer-to-peer sessions. The Monitor option is not available in the session type list in the controller window.

selected

The target can take part in guidance peer-to-peer sessions. The Guidance option is available in the session type list in the controller window. The Open connection window also lists a Guidance option.

not selected

The target cannot take part in guidance peer-to-peer sessions. The Guidance option is not available in the session type list in the controller window.

selected

The target can take part in active peer-to-peer sessions. The Active option is available in the session type list in the controller window. The Open connection window also lists an Active option.

not selected

The target cannot take part in active peer-to-peer sessions. The Active option is not available in the session type list in the controller window.

selected

If Chat Only is chosen as the connection type on the open connection screen, the session is refused. During the session, the chat icon is not available in the controller window.

not selected

A Chat Only session can be initiated from the open connection window. During the session, the chat icon is available in the controller window.

selected

Files can be transferred from the target to the controller.

not selected

Files cannot be transferred from the target to the controller.

selected

Files can be transferred from the controller to the target.

not selected

Files cannot be transferred from the controller to the target.

selected

The clipboard transfer menu is available during the session to transfer the clipboard content to and from the target.

not selected

The clipboard transfer menu is not available during the session.

selected

The record option is available in the controller window.

not selected

The record option is not available in the controller window.

selected

The collaboration icon is available in the controller window.

not selected

The collaboration icon is not available in the controller window.

selected

The Handover button is displayed in the collaboration control panel.

not selected

The Handover button is not displayed in the collaboration control panel.

selected

The disconnect button is displayed in the message window.

not selected

The disconnect button is not displayed in the message window.

selected

Session is started with the target.

not selected

Session is not started and the following message is displayed. Session rejected because there is no user logged to confirm the session

selected

When a remote control session is requested, the defined script is run before the controller user has access to the target.

not selected

No script is run before the session.

selected

When a remote control session ends, the user-defined script is run.

not selected

No script is run after the session.

selected

If the pre-script or post-script run fails, the session continues.

not selected

If the pre-script or post-script run fails, the session does not continue and ends.

0

The workaround is disabled. This value is the default value.

1

Reset the session automatically when a remote control session is started.

Note: The Windows® session takes a couple of minutes to initialize and the controller sees a blank desktop until the initialization is complete. A message informs the controller user that the session is being reset and it might take a few minutes.

2

Reset the session automatically when the Remote Desktop user logs out.

selected

The user acceptance window is displayed and the target user can accept or refuse the session.

not selected

The user acceptance window is not displayed and the session is established.

selected

The user acceptance window is displayed each time a session mode change is requested and the target user must accept or refuse the request.

not selected

The user acceptance window is not displayed and the session mode is changed automatically.

selected

The acceptance window is displayed in the following two cases. The target user must accept or refuse the file transfer.

• The controller user selects pull file from the file transfer menu on the controller window. The target user must select the file that is to be transferred after they accept the request.
• The controller user selects send file to controller from the Actions menu in the target window.

Not selected

The acceptance window is not displayed and files are transferred automatically from the target to the controller system when requested.

selected

When the controller user clicks System information in the controller window, the user acceptance window is displayed. The target user must accept or refuse the request. If the target user clicks accept, the target system information is displayed in a separate window on the controller system. If they click refuse, a message is displayed on the controller and the system information is not displayed.

not selected

The target system information is displayed automatically when the controller user clicks the system information icon.

selected

When the controller user clicks the record icon on the controller window, a message window is displayed. If the target user clicks Accept, the controller user can select a directory to save the recording to. If the target user clicks Refuse, a recording refused message is displayed to the controller.

Note: After the target user accepts the request for recording, if the controller user stops and restarts local recording, the acceptance window is not displayed.

not selected

When the controller user clicks the record icon on the controller window, the message window is not displayed. The controller user can select a directory to save the recording to.

selected

When the controller user tries to join the collaboration session, the user acceptance window is displayed. The target user must accept or refuse the request to allow the additional controller to join the session. If the target user clicks accept, the additional controller joins the collaboration session. If they click refuse, a message is displayed on the controller system and the additional controller cannot join the collaboration session.

not selected

The additional controller automatically joins the collaboration session when they try to connect to the master controller of the session.

• Acceptable values 0 - 60. If set to 0, the target user is not asked to respond to the session request.

selected

Session is established.

not selected

Session is not established.

selected

The Hide windows check box is displayed on the user acceptance window.

not selected

The Hide windows check box is not visible on the user acceptance window.

Yes

The logon window is displayed and the controller user must log on with a valid Windows™ operating system ID and password. If the logon credentials are invalid, the target refuses the session.

No

The logon window is not displayed and the peer-to-peer session is established.

Windows® systems

BUILTIN\Administrators

Linux® systems

wheel

When Authorized user group has a value set, the user name that is used for authentication must be a member of one of the groups that are listed. If the user is not a member, the session is refused. Multiple groups must be separated with a semicolon. For example, wheel;trcusers

selected

Entries are logged in the application event log of the target corresponding to each action that is carried out during the session.

not selected

No entries are logged to the application event log.

selected

The chat text is saved as an html file. The file is chat-username-date.html, where username is the display name of the logged on user on the controller machine in a peer-to-peer session. In managed mode username is the display name for the controller user that is on the server. The date is in the format YYYYMMDD. The file is saved in the working directory of the target. The location of the working directory is defined by the target property WorkingDir. For example, on Windows™ systems, the file is saved to

c:\ProgramData\IBM\Tivoli\Remote Control.

On Linux systems the file is saved to /var/opt/ibm/trc/target/.

not selected

The chat text is not saved to a file.

selected

The file transfer session uses System privileges (Windows) or root privileges (Linux) on the target file system.

not selected

The file transfer session uses the privileges of the logged on user on the target file system.

When you set the value to lock, the target computer is automatically locked at the end of the session. If the property is blank or set to another value, the target computer is not automatically locked at the end of the session.

selected

The Enable Privacy option is available in the Perform Action in target menu in the controller window.

not selected

The Enable Privacy option is not available in the Perform Action in target menu in the controller window.

selected

The lock target input menu item is enabled, in the Perform action in target menu in the controller window. Select lock target input to lock the target users mouse and keyboard during a remote control session. The target screen is still visible to the target user.

not selected

The lock target input menu item is not enabled in the Perform action in target menu in the controller window.

selected

The target screen is blanked out by the privacy bitmap when the session starts, preventing the target user from interacting with the screen while in the session. The target desktop is still visible to the controller user in the controller window.

not selected

The target screen is not blanked out when the session is started and the target user can interact with the screen.

selected

The target screen is visible to the target user during the session, while in privacy mode but their mouse and keyboard control is locked.

not selected

The target screen is not visible to the target user. The privacy bitmap is displayed on the target during the session. The target users mouse and keyboard input is also disabled.

selected

The target user cannot use the Pause Break key to automatically end the remote control session.

not selected

The target user can use the Pause Break key to automatically end the remote control session.

selected

The semi-transparent overlay is displayed on the target screen with the text BigFix® Remote Control and what type of remote control session is in progress. For example, BigFix® Remote Control - Active Mode. The overlay does not intercept keyboard or mouse actions, therefore the user is still able to interact with their screen.

not selected

No overlay is displayed on the target computer.

selected

The target GUI is not visible on the target and the target user is not aware that the session is started. The BigFix® Remote Control target icon is not visible in the Windows® system tray.

not selected

The target GUI is displayed on the target as the session is starting and is available to the target user during the remote control session.

Determines whether the target desktop is displayed in high-quality colors in the controller window at the start of a session. Used together with Lock color quality.

selected

The target desktop is displayed in true color 24-bit mode at the start of the session. Partial screen updates are also enabled.

not selected

The target desktop is displayed in 8-bit color mode at the start of the session. Partial screen updates are also enabled. This value is the default value.

Determines whether the color quality that a remote control session is started with can be changed during the session. Used together with Enable high quality colors.

selected

The initial color quality, for the remote control session, is locked and cannot be changed during the session. The Performance settings icon is disabled in the controller window. The controller user cannot change settings to improve the session performance if their network is slow.

not selected

The color quality can be changed during the session. The Performance settings icon is enabled in the controller window.

selected

The desktop background image, on the target, is not visible during a remote control session.

not selected

The desktop background image, on the target, is visible during a remote control session.

selected

While the screen saver is active on the target system, the target stops transmitting screen updates. A simulated screen saver is displayed on the controller computer so that the controller user knows that a screen saver is active on the remote screen. The controller user can close the screen saver by pressing a key or moving the mouse.

not selected

No simulated screen saver is displayed in the session window. The target screen is displayed as normal and the target continues to transmit screen updates.