Posted in General Info | No Comments »

For clients that have Managed Licenses

For Clients that are Standalone Licensed

Many customers have requested that Smart Shield have functionality to work with System Control Center Manager (SCCM). We have found that Smart Shield’s entire disk protection makes running updates in protected mode impossible to manage. The solution we have devised for SCCM managed machines is to stop all SCCM updates from running while protected, then allow SCCM updates when unprotected. This will allow users to schedule a maintenance window via the Smart Control so that updates can run. This eliminates the possibility of updates being run then removed on protected client machines.

888.265.6055
support@centuriontech.com

Hogan Haake
Support Manager

As we continue to add features to the Smart Shield and Smart Control Products, we have found that some customers have a requirement to limit some features on a set of machines, while allowing said feature on others. For example, an organization may only allow desktop monitoring on public access computers. Controlling licensing at this granular level previously required the client to license with a standalone key or a separate Smart Control. Standalone licensing can be restrictive and may not be suited for all environments. In order to give administrators the flexibility of Smart Control Managed Licensing and control over the clients features, we have created Advance License Discreteness.

With Advance License Discreteness, the Smart Control exposes license groups to the administrator allowing him/her to organize machines into the license group that work with the specific set of permissions required for that client. Once the client is added to a group it will be assigned a license with that group’s feature set on every license request. Advance License Discreteness does require that one of the license types be set as the default license type. The default license type is assigned to clients that are not specifically added to a license group.

Setting up Advance License Discreteness is no more complicated than a normal installation. When the Smart Control detects that the client licenses have different license types the License Group form pops up.

Using the drop down list, select the group that will be the default license type.

After selecting the default license type you will be prompted to restart the Smart Control panel. When the panel reconnects, the tree panel on the left side will include a new set of nodes called “Licensing”.

For each type of license there will be a key icon with a description of the features for that license type. These nodes are used just like groups. Add machines to a license group by dragging and dropping or cutting and pasting the machines into the group.

Once the machine is assigned to a group it will request that specific license type on all subsequent license requests. It is a good idea to reboot immediately so that the client can request a new license. The license group in bold, is the default group. To change the default group, right click the “License” node and the License Group form will appear.

888.265.6055
support@centuriontech.com

Hogan Haake
Support Manager

Previous versions of Smart Series products did not always work correctly when subnets were involved. Many network administrators were able to configure their networks to work around this issue, but not all customers have network administrators available to modify their network.
How do you know if this is a problem for you?

The simplest way to know if this issue affects you is to look at your Smart Control. If there are multiple computers reporting to the Smart Control that have the same IP address, then you would be affected by the subnet issue. This is easily reproduced by adding a home router to your existing network and connecting two machines up to it. The machines will display the same IP address and appear to be connected to the Smart Control, but they cannot be controlled by the Smart Control.

How did we fix it?
Centurion’s software engineers looked at the communication methods of our legacy products and tried to reproduce those as closely as possible for this version. Starting with this version, clients can communicate with the server using the previous proven method, or a newer method that lets us work with subnets to provide a constant reliable connection to the server. In all of our in-house and remote tests, the new communication method provides reliable cross subnet communication.

How do I get the new communication?
There is a new preference in the Smart Control that users must enable. It is located in the Smart Control preferences under the “Network” tab. The checkbox has a long description reminding users what it does. It is important to note that Smart Shield clients must be on version 2.1.9 or higher to take advantage of this new feature.

888.265.6055
support@centuriontech.com

Hogan Haake
Support Manager

A common question asked is, “What ports do your products use?”. Centurion products use the following ports:

25552
25553
25554
25555

The ports listed above must be open on the Smart Shield Client and the Smart Control machines. In addition, any network device such as a router or firewall must also allow the ports to be open. If these ports are not open, the software will not be able to communicate correctly.

If you are having issues setting up your software, please contact technical support. They have software tools to test that the correct ports are open between two machines.

888.265.6055
support@centuriontech.com

Hogan Haake
Support Manager

Advantages for Smart Control Managed Licensing:

1. The only license key that is needed is for Smart Control.
   No client license keys to enter at install or track/document.
2. Allows for a generic image to be installed on numerous computers.
3. Hardware changes on the client computer will not affect the license status.
4. Client attempts to renew license and update permissions on each reboot.
5. The license lease is transferable allowing for client computers to be easily replaced or temporary taken off line in the event of hardware failure or maintenance.
6. Allows the client to be installed using the answer file install.

Drawbacks to Smart Control Managed Licensing:

1. Clients must connect to their licensing Smart Control every 30 days for license lease renewal. Interruptions in the network communication can cause licensing issues.
2. Licensing with Smart Control may require some network, firewall and port configuration
3. Clients that leave the local network, like laptops, may go suspended if they cannot reach the licensing Smart Control.
4. The Smart Control must be powered on at all times.
5. If the Smart Control license status changes, the clients will also change.

Advantages for Standalone Client Licensing:

1. Once the client has been licensed at install, the license is permanent and will stay active regardless of Internet/Smart Control connectivity. This is best for laptop programs.
2. Clients can still be controlled by the Smart Control even if they have a standalone license.

Drawbacks for Standalone Client Licensing:

1. License keys must be entered into each client install manually. Does not allow for answer file install and makes imaging more difficult. In versions after 2.1.8 the key can be assigned from the Smart Control.
2. Licenses must be tracked/documented. In versions after 2.1.8 the standalone key will be a part of the client record and can be exported to CSV file.
3. Multiple hardware changes on the client may cause the license to be invalid.
4. License can only be reused if Smart Shield is fully and properly uninstalled, otherwise the license maybe invalid.
5. Updates to license permissions will be propagated monthly by calling to our licensing server. This requires active Internet connection. If the client is unable to contact the server the license remains in its current state.

Due to many improvements made to speed up the TCP/IP communication in Smart Control Resource Manger the service is now loading much faster. Unfortunately, we have found that in some cases when rebooting, Smart Controls running version 2.1.8 on Windows 7 our service may be loading faster that the TCP/IP connection can handle. There is a simple solution to this problem. Windows 7 Smart Controls may need to slow down the service start up type to allow for the IP address to be registered in the service. To do this open the Service Control manager and change the Centurion Smart Control service startup type from Automatic toAutomatic (Delayed Start). Changing the service to Automatic (Delayed Start) will give the machine time register its IP address before listening for clients on all subsequent reboots.

We received a technical support phone call regarding the use of the command line functionality in Smart Shield. The customer had some issues getting command line to work when there was no user logged into the client machine. Once the user was logged in, the command line portion worked as they expected. Many times, the way we use and design our software is not the same as the way that our customers use and understand our software. Because of this mix up, we’re writing to explain changes to command line and expand on its use.

Starting with release 2.1.5 (released in October of 2010), the command line functionality was separated from the primary application into a separate application.

Before 2.1.5 release
c:\program files\centurion technologies\client\ctsrgui.exe
2.1.5 and After
c:\program files\centurion technologies\client\ctsrcmd.exe

For a list of commands available, navigate to the folder and type “ctsrcmd /h”

You may notice that some functionality for command line still works with the previous executible (ctsrgui.exe), however, going forward it will not be supported. Giving command line its own application makes it faster and allows us to include more functionality.

As always, call, email, or comment so we can know what you think or to clarify.

Hogan Haake
Support Manager

Centurion Technologies has identified the underlying need for automatic updates to our software. Until now, Smart Control and the Smart Series of products had to be manually updated with an update file. While this process is as simple as possible, requiring just a single click, it was tedious to manually update each machine.

By incorporating the new automatic updating functionality in the 2.1.7 release of the Smart Control and Smart Series software, the need for manual updates is nonexistent. Once this update is installed, the software will intelligently ask the Centurion Update Server if there are any updates available. If updates are available, they can be installed via several different processes. Each option is outlined below in detail.

The availability of the automatic update functionality depends on customers’ paid maintenance contract with Centurion Technologies. If your contract has expired, you will be notified when a new version is available, but will not be able to download it. If you feel you receive this message in error, please call Technical Support and they can validate the standing of your account.

Smart Series Client Updater
We will assume that if you are reading this section, you have standalone Smart Series clients and would like to understand how they will update themselves. Screenshots of Smart Shield will accompany our instructions. If you have a different Smart Series product, the functionality will be the same, but the screen will look slightly different. If you have any questions, please contact Technical Support for assistance.

The image below shows the interface with the new “Product Updates” functionality. To find this tab, click on the “Miscellaneous” button and then select the “Product Updates” tab. All of the changes to this functionality can be made while protected or unprotected.

There are three distinct options for updating a standalone Smart Shield client.

1. Disable Client Updates
2. Download Updates and Notify
3. Schedule Updates Check

Disable Client Updates
This option prevents Smart Shield from automatically searching for updates. It was designed for users that like our software exactly the way it is and do not want any updates. It is also a great choice for users that are behind a proxy or in an environment where they do not have access to the Internet.

Download Updates and Notify
This option allows Smart Shield to download the newest update and notify the user that an update is ready to be installed. When an update is available, a balloon notification will display in the system tray. The first notification is that Smart Shield is searching for the update.

Once the update has been downloaded, a notification will display in the system tray that the file is available for installation.

To install the update, first unprotect the computer. Once you are unprotected, navigate to the “Product Updates” tab under “Miscellaneous Configuration” and click “Run Now”.

Schedule Updates Check
Use this functionality for standalone clients to schedule product update checks. When the specified day and time arrives per the schedule set, the following steps will occur:

• The keyboard and mouse will be blocked
• Protection will be disabled, if it was enabled
  • The computer will reboot
• Product updates will run
  • If an update is run, the machine will reboot
• If the machine was protected before updates, it will enable protection
  • The computer will reboot
• If keyboard and mouse were not blocked before this started, they will be unblocked

During the scheduled update process, your computer screen should look like the screen below, if it automatically logs into Windows:

If your machine does not log into Windows automatically and requires a password, you will see the login screen, but your keyboard and mouse input will be disabled. This protects your machine while applying updates.

Smart Control Resource Manager Updater

The Smart Control Resource Manager (SCRM) controls all clients assigned to it. It maintains the clients, as well as itself. SCRM has the ability to update clients, along with a self-update mechanism, built into the program. This section discusses all of the update features held within the SCRM, which will be separated into the self-updater and the client updater functions.

Self Updater
Since SCRM has an update feature built into the program, it will periodically monitor the Internet for updates. When an update is available, a notification will be displayed to the user. However, if an administrator wants to check for updates before the periodic check happens, they just need to click on the “Check for Updates” button, as shown in the image below:

The update window looks like the screen below:

Release notes are provided for the update so you can better understand what has changed with the SCRM and Smart Series client. There are now three choices for the update:

1. Download Update
2. Run Update Now
3. Remind Me Later

Download Update – This choice acquires the update from our server. You will find download the updates for both 32 and 64 bit installs.

Run Update Now – This selection applies the current update to the SCRM. If the files are not downloaded yet, a warning will be given that files must be downloaded before they can be run. If the files are downloaded, then run and install. After the install, the server will restart, so this option is recommended only within a maintenance window.

Remind Me Later – This option delays further notification of updates for two weeks.

If your SCRM is unable to connect to the Internet, you will have to manually run updates. This requires going to the Centurion website:http://www.centuriontech.com/support. From there, you will have to log in to your account and download the updater. It is recommended that you download the 32 and 64 bit versions of the updater (they will be used by the next section of the documentation). Run the correct version of the updater during a maintenance window.

Client Updating
SCRM now has the capacity to update the clients Smart Series software remotely. In order to update clients to the latest version, SCRM should first be updated to the latest version. This ensures that the controller is ready for any new information the clients provide. It also ensures that the update files are downloaded and ready to send to client machines. In the event that your SCRM cannot access the Internet, it is possible to import updates into the SCRM so they may be applied to Smart Series clients. To access this functionality, use the File menu “File” –> “Import Update File” menu options.

Each file must be imported separately. The update files must be named correctly. There are three parts to the file name; update, build number, and architecture. In the example above, the parts are

Once you have downloaded or imported the update files, you are ready to commence updating client machines.

Applying updates to Clients
Client machines are set by default to download their updates from the Internet. While this is a safe method, it is not the fastest update method. Smart Series clients can also be configured to get their updates from SCRM. This allows fast transfer speeds provided by your company’s existing network infrastructure. Changing clients to get their updates from SCRM will also conserve limited Internet bandwidth. To make this change, select the clients and use the right click menu “Update Management” –> “Update Via Smart Control” setting.

Once the update location is set, it is time to apply updates to clients. The settings are the same as the client functionality. Please refer to the standalone client documentation for a description of the methods available.

The final method for updating Smart Series clients is through the scheduling functionality. There is a new schedule action “Update Client Software”, which will run the client update functionality on a client machine during a schedule interval. You will need to make sure the machine is unprotected and we always recommend blocking the keyboard and mouse when a machine is unprotected in a schedule. Below is a sample schedule put together to run product updates once a month:

As always, call, email, or comment so we can know what you think or to clarify.

Hogan Haake
Support Manager