Lenovo Commercial Deployment Readiness Team

https://docs.lenovocdrt.com
Admin
Lenovo Commercial Deployment Readiness Team documentation library providing technical guidance on...
Tokens:161,003
Snippets:2,279
Trust Score:6.9
Update:6 months ago
Show doc for...
Tokens:
Raw
### Configure DASH settings via XML

Source: https://docs.lenovocdrt.com/ref/dash

Example XML structure for defining management targets, including HTTP/HTTPS port settings and user account provisioning.

```xml
    <?xml version="1.0" encoding="utf-8"!!! note ""

    <DASHPROVISIONSETTINGS>
      <MANAGEMENTTARGET>
      <GLOBAL>
              <HTTPS>
                <ENABLESUPPORT>true</ENABLESUPPORT>
                 <TCPIPPORT>664</TCPIPPORT>
              </HTTPS>
              <HTTP>
                <ENABLESUPPORT>true</ENABLESUPPORT>
                <TCPIPPORT>623/TCPIPPORT>
              </HTTP>
      </GLOBAL>
      <USERS>
              <USER>
                <USERID>Administrator</USERID>
                <PASSWORD>password</PASSWORD>
                <ENABLE>true</ENABLE>
                <ROLES>
                <ROLE>Administrator Role</ROLE>
                </ROLES>
              </USER>
            </USERS>
      </MANAGEMENTTARGET>
    </DASHPROVSIONSETTINGS>
```

--------------------------------

### Example DASH Provisioning XML Configuration

Source: https://docs.lenovocdrt.com/ref/dash/index

This XML file defines the provisioning settings for a DASH-capable system, including global HTTP/HTTPS port configurations and user account details with assigned roles. Ensure the XML structure is valid for DASHConfigRT to process.

```xml
<?xml version="1.0" encoding="utf-8"!!! note ""

    <DASHPROVISIONSETTINGS>
      <MANAGEMENTTARGET>
      <GLOBAL>
              <HTTPS>
                <ENABLESUPPORT>true</ENABLESUPPORT>
                 <TCPIPPORT>664</TCPIPPORT>
              </HTTPS>
              <HTTP>
                <ENABLESUPPORT>true</ENABLESUPPORT>
                <TCPIPPORT>623/TCPIPPORT>
              </HTTP>
      </GLOBAL>
      <USERS>
              <USER>
                <USERID>Administrator</USERID>
                <PASSWORD>password</PASSWORD>
                <ENABLE>true</ENABLE>
                <ROLES>
                <ROLE>Administrator Role</ROLE>
                </ROLES>
              </USER>
            </USERS>
      </MANAGEMENTTARGET>
    </DASHPROVSIONSETTINGS>
```

--------------------------------

### Example DASHConfig Provisioning XML

Source: https://docs.lenovocdrt.com/ref/dash

This XML structure defines settings for DASH provisioning, including management targets, user accounts, and Active Directory integration. Ensure all placeholder values like [Administrator Password] are replaced with actual credentials.

```xml
<?xml version="1.0" encoding="utf-8"?>

<DASHPROVISIONSETTINGS>
  <MANAGEMENTTARGET>
  <GLOBAL>
    <HTTPS>
         <ENABLESUPPORT>true</ENABLESUPPORT>
         <TCPIPPORT>664</TCPIPPORT>
   </HTTPS>
    <HTTP>
        <ENABLESUPPORT>true</ENABLESUPPORT>
        <TCPIPPORT>623</TCPIPPORT>
    </HTTP>
    </GLOBAL>
  <USERS>
     <USER>
        <USERID>Administrator</USERID>
        <PASSWORD> [Administrator Password]</PASSWORD>
        <ENABLE>true</ENABLE>
        <ROLES>
            <ROLE>Administrator Role</ROLE>
        </ROLES>
      </USER>
  </USERS>
    <ACTIVEDIRECTORY>
        <ENABLESUPPORT>true</ENABLESUPPORT>
          <ACTIVEDIRECTORY_SPNACCOUNT> [DASH SPN Account] </ACTIVEDIRECTORY_SPNACCOUNT>
       <SPNACCOUNT_PASSWORD> [Password] </SPNACCOUNT_PASSWORD>
    <ACTIVEDIRECTORY_GROUPS>
           <ACTIVEDIRECTORY_GROUP>
            <GROUPNAME> [DASH Admins Group] </GROUPNAME>
        <OBJECTSID>S-1-5-21-0123456789-0123456789-0123456789-1118<OBJECTSID>
              <ROLES>
                  <ROLE>Administrator Role<ROLE>
               </ROLES>
  </ACTIVEDIRECTORY_GROUP>
  </ACTIVEDIRECTORY_GROUPS>
  </ACTIVEDIRECTORY>
  </MANAGEMENTTARGET>
 </DASHPROVISIONSETTINGS>
```

--------------------------------

### Example DASHConfig.xml Structure

Source: https://docs.lenovocdrt.com/ref/dash/index

This XML structure shows how to add Active Directory group information, including group name and Object SID, to the DASHConfig.xml file for provisioning.

```xml
<?xml version="1.0" encoding="utf-8"?>

        <DASHPROVISIONSETTINGS>
          <MANAGEMENTTARGET>
          <GLOBAL>
            <HTTPS>
                 <ENABLESUPPORT>true</ENABLESUPPORT>
                 <TCPIPPORT>664</TCPIPPORT>
           </HTTPS>
            <HTTP>
                <ENABLESUPPORT>true</ENABLESUPPORT>
                <TCPIPPORT>623</TCPIPPORT>
            </HTTP>
            </GLOBAL>
          <USERS>
             <USER>
                <USERID>Administrator</USERID>
                <PASSWORD> [Administrator Password]</PASSWORD>
                <ENABLE>true</ENABLE>
                <ROLES>
                    <ROLE>Administrator Role</ROLE>
                </ROLES>
              </USER>
          </USERS>
            <ACTIVEDIRECTORY>
                <ENABLESUPPORT>true</ENABLESUPPORT>
                  <ACTIVEDIRECTORY_SPNACCOUNT> [DASH SPN Account] </ACTIVEDIRECTORY_SPNACCOUNT>
               <SPNACCOUNT_PASSWORD> [Password] </SPNACCOUNT_PASSWORD>
            <ACTIVEDIRECTORY_GROUPS>
                   <ACTIVEDIRECTORY_GROUP>
                    <GROUPNAME> [DASH Admins Group] </GROUPNAME>
                <OBJECTSID>S-1-5-21-0123456789-0123456789-1118<OBJECTSID>
                      <ROLES>
                          <ROLE>Administrator Role<ROLE>
                       </ROLES>
              </ACTIVEDIRECTORY_GROUP>
              </ACTIVEDIRECTORY_GROUPS>
          </ACTIVEDIRECTORY>
          </MANAGEMENTTARGET>
         </DASHPROVISIONSETTINGS>
```

--------------------------------

### Execute DASHConfigRT Manually

Source: https://docs.lenovocdrt.com/ref/dash

Run the utility from an administrative command prompt to apply configuration settings. The -dxf switch is recommended to remove the configuration file containing passwords.

```text
DASHConfigRT -xf:DASHConfig.xml -dxf -mif
```

--------------------------------

### Configure SPNs using Setspn utility

Source: https://docs.lenovocdrt.com/ref/dash

Use these commands to register Service Principal Names for DASH systems when managing large groups.

```batch
    Setspn –S -U HTTP/MACHINENAME spnacctname
    Setspn –S -U HTTP/FQDN spnacctname
```

--------------------------------

### Add SPNs for DASH Systems using SETSPN

Source: https://docs.lenovocdrt.com/ref/dash/index

Use the SETSPN utility in a script or batch file to add Service Principal Names for DASH systems when dealing with a large group. This command line is executed for each client.

```batch
Setspn –S -U HTTP/MACHINENAME spnacctname
Setspn –S -U HTTP/FQDN spnacctname
```

--------------------------------

### Retrieve Group SID using PowerShell

Source: https://docs.lenovocdrt.com/ref/dash

Use this command to obtain the Security Identifier (SID) for the DASH Administrators group.

```powershell
  Get-ADGroup -Identity [DASHADMINS]| select SID
```

--------------------------------

### Obtain AD Group SID using PowerShell

Source: https://docs.lenovocdrt.com/ref/dash/index

Use the Get-ADGroup cmdlet in PowerShell to retrieve the Security Identifier (SID) for a specified Active Directory group. Replace '[DASHADMINS]' with the actual group name.

```powershell
Get-ADGroup -Identity [DASHADMINS]| select SID
```
Tokens:
Raw