Quickstart Guide

Modified on Wed, 10 May 2023 at 01:01 PM

This document will take you through the necessary steps for installing and configuring the five(9)sConsole. If you have any questions please do not hesitate to contact us at support@five9s.de.

Important Note

During the installation process of the five(9)s Console additional tables will be created in your Ivanti Database. As the five(9)s Console is an Ivanti Certified Product, these modifications will neither harm your existing Ivanti system, nor prevent you from further updates. If you have any questions, please contact us at support@five9s.de. We will be happy to help you. 

Prerequisites

Before installing five(9)s Console please ensure five(9)s Console Implementation Prerequisites have been met.

1. five(9)s Console Installation

Run the provided five(9)s Console Exe-file on your core. Use an administrative account as listed in prerequisites in the above chapter. The setup will show the following “Welcome” screen. 

Click on <Next>. 


Accept the EULA and click <Next> to proceed.

Proceed with <Install> and start the installation.

The executable will place an icon on your desktop. When the installer has completed its work, you will see the following screen:


Click <Finish> to complete installation and to close the installer.

2. five(9)s Console Configuration

To open the five(9)s Console, double click the five(9)s Console shortcut, that was copied to the core’s desktop during installation.
If this is done for the first time, the “First Run Wizard” will guide you through the initial configuration steps. We retain several log files, in case something goes wrong during the configuration (either, because one or more prerequisites are not met, or you may have typed in wrong data). You can find them on your Core-Server in the C:\inetpub\wwwroot\five9sWS\logs directory.

Step 1: Activate the five(9)s Console Installation

Enter the requested information to the First Run Wizard screen as shown below. Type in your Proxy Settings (optional) and press <Activate Online> if your core is able to connect to the Internet.
If your core server is completely isolated from the Internet use the <Activate Manually> function. In this case, a wizard will lead you through the offline activation process.


After a successful activation, the next screen will appear.

Step 2: Enter the required Ivanti Database Connection Settings and click <Save>. 
 

Step 3: As email is the five(9)s Console’s main mechanism for providing feedback to users, it is necessary to enter your SMTP Server Connection Settings. Proceed with <Save>.


Step 4: The next screenshot shows how to configure the five(9)s Console to execute actions on your IVANTI Core Server.


Step 5: In this screen you can configure if you want to set all computers in your EPM Environment to status “Active”. The five(9)s Console uses status to provide you with information on the current situation of a client. You can modify the status -values on the admin page later. In addition, you can configure if a user is able to rearrange the Home-Buttons or if you want them to stay with a central layout. Click on the “next” Button to move on.


Step 6: By clicking on “run” all the required initialization of the console on the database will be done. This might take up to 5 minutes. Please stand by and do not close the browser.

You can change the console settings at any time by opening the five(9)s Console <Admin> tab.
To see the <Admin> tab you must be a five(9)s Console admin; the account used to run the installation is admin by default. To add more users to the console, please consult chapter 3.
" Adjusting Your IVANTI Installation" of this document.

To finalize the five(9)s Console installation and to use all of its features, you need to make some adjustments to your IVANTI installation. Please follow the steps explained in the next chapter. 

3. Adjusting your IVANTI Installation

3.1 In the IVANTI Endpoint Manager Console 
3.1.1 Agent Configuration 
Change all agent configurations to have the Real-time Inventory and Monitoring components (both the Baseline and the Extended) included. These components are needed to enable real-time inventory features of your managed devices like showing services, event logs and processes out of the five(9)s Console. 


3.1.2 Create Explicit Scope for your Service Account

This step is required, because the Ivanti MBSDK requires to have an explicit Scope.
The “Default all machines” scope is not allowed for the MBSDK Service.

To create an explicit scope: 


1. Open your Ivanti Management Console 

2. Navigate to “User management” 

3.Right click on Scopes and Select “New Scope”  


4. Scope name: “All devices explicit” and click on “New..” 
5. Select the Machine Component: “ID” and the operator “Exists” click the button “insert”    
Save the Scope with the “OK” button.  

6. Go to the “User and Groups” folder, select your Ivanti service account used in the configuration “Step 4” of the console setup.  Go to “properties” Select the Scopes and check the “All devices explicit” scope and click “OK” 
3.1.3 Device Group for Patch-Management Piloting 

If you are going to use the five(9)s Console to kick of Patch Management process using the build in process, please follow the next steps:
The Console setup created for you a computer group “five9s Console Patch Pilot Group”. Please put at least one device into that group, which can be found under <Devices/Public Devices> in the IVANTI Management Suite console’s network view.

TIP: All internal Console Processes can be extended by custom scripts.

4. Using five(9)s Console

You can use the five(9)s Console on any machine with a supported browser – see the prerequisites list in Chapter 1 – and a network connection to your IVANTI core server’s TCP port 80. The five(9)s Console URL is http://<YourCoreServer>/five9sConsole/

Depending on the browser you are using and its settings, it may be necessary to log in to the five(9)s Console with an account that has been set up as a five(9)s Console user. The next chapter explains how to set up a Console user.

Although using the five(9)s Console is quite self-explanatory, please note the following: All the status information the Console generates, are provided to the console user via email. Status mails are always sent to the console user’s email address configured in the AD record of the user. The email is sent via the email system that was configured during console installation. Therefore, ensure the user can access emails when working with the five(9)s Console. 
 
4.1 Internet Explorer Settings 
 
Enter your core server to the Trusted Sites Zone (on the core server itself, add Localhost to the Trusted Sites Zone, too).  
 
 
 
We suggest doing so by a global group policy. 

4.2 Adding Users to five(9)s Console

There are only a few simple steps for adding five(9)s Console users: 
  1. Ensure the new user is a domain user with a valid email address in your Active directory
  2. Set up this user as IVANTI Management Suite Console user via IVANTI ’s AD connector (only if this is a new user to IVANTI). 
  3. Make the new user a member of at least one IVANTI local security group on your core server (only if this is a new user to IVANTI)
  4. Open Open the five(9)s Console and navigate to the “Admin” module. Click on “Roles & Rights” and define a user role that represents all the rights a certain group of users should have within the five(9)s Console. These rights contain allowed menus (Home, Patch, OSD, SWD, SW Profiles, and so on), Custom Menus, Software Categories and buttons (also Custom Buttons) on the “Home” screen.  
1. Saving such a role will lead to a local security group on your core server. Navigate to “Server Manager -> Computer Management -> Local Users and Groups -> Groups”. You will find a group named “Con-YourRole” here that can be populated with your AD users, now. 
2. The  “Con-Admin” group was created during console installation and is populated with the installation user. Membership of this group overrules all other rights defined via group membership of other five(9)s groups.
3. In the IVANTI Management Suite Console, assign a role to this user and a non-empty scope (only if this is a user that is new to IVANTI). 

Info:
five(9)s Console users inherit the scope assignments from the IVANTI Management Suite Console. 

5. Manage your Operating Systems

Follow the link to manage Operating Systems for OS- and Software Deployment:

Click here

6. Configure Software Packages for Distribution

Follow the link to manage your Software Packages for Distribution:

Click here

7. Access five(9)s Console using HTTPS

The five(9)s Console can be accessed using HTTPS without any additional configuration. However, you might get a certificate error like on the Ivanti own console (https://yourCoreServer/remote):
This is due the fact, that the EPM Core creates a “self-signed” certificate during the installation.This certificate will be used in the “Internet Information Server” for the SSL Ivanti communication.Unfortunately, only one certificate can be used per IP address of the core server.

What you can do: adding the self-signed Certificate of the core server:

A) To your enterprise certificate store

OR

B) Distribute the certificate to your machines, adding it to the “Trusted Root Certification Authorities” by script.

Please note: this only works if you are using the hostname of the server (full DNS names or DNS alias will cause the warning again).


How to get the right Certificate to distribute?

Follow these steps:

1. On your EPM Core open the Internet Information Server, select the “Default Website” right click and select edit bindings:
2. Select https: and click “Edit”
3. Click on “view” of the certificate used for https:
4. Click on “Copy to File…” following the wizard and keep the default settings.

8. FAQ

Q1: During activation, I get a “No Remaining Activations” error message. What does this mean?
A: Your trial version was already activated. If you need to reactivate it on your test system, please contact your five(9)s support at support@five9s.de.

Q2: I am unable to use the <Ping>/<Wake Up>/<Trace Route>/<RDP> command.

A: Please ensure that the computer you are using to open the five(9)s Console has an active Ivanti agent.

Q3: Does the five(9)s Console write any log file ?

A: Yes, you can find them on your core server at the following location:Installation Logfiles: C:\inetpub\wwwroot\five9sWS\logsProcess Logfiles: C:\Program Files (86)\Desired State Manager\Logs

Q4: Policy Sync, Inventory Scan and Security Scan do not work for me.

A: Please check C:\inetpub\wwwroot\five9sWS\logsLog on your Core Server. If you see “error Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))” in the log file, the Core Server cannot connect with the client to initiate the above task. Open the client’s firewall on the client for incoming TCP traffic on the ports 135 and 49152-65535 from your Core Server.

Q5: I cannot see any clients in the five(9)s’ Console.

A: Ensure the Ivanti account you are using to log in to the five(9)s Console has a non-empty scope assigned. 



Document information

Last Modified Date
24.04.2023

Verified versions
five(9)s Console version 4.X

Disclaimer
Even though every care has been taken by five(9)s GmbH to ensure that the information contained in this publication is correct and complete, it is possible that this is not the case. five(9)s GmbH provides the publication "as is", without any warranty for its soundness, suitability for a different purpose or otherwise. five(9)s GmbH is not liable for any damage which has occurred or may occur as a result of or in any respect related to the use of this publication. five(9)s GmbH may change or terminate this publication at any time without further notice and shall not be responsible for any consequence(s) arising there from. Subject to this disclaimer, five(9)s GmbH is not responsible for any contributions by third parties to this publication.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select atleast one of the reasons

Feedback sent

We appreciate your effort and will try to fix the article