ZENworks 11 SP4 - Auditing Full Disk Encryption Events

October 2016

You can use the ZENworks Audit feature to capture Full Disk Encryption change events that occur in your zone. Change events are configuration changes made to the zone through ZENworks Control Center or the zman command line utilities.

1.0 Auditing Change Events

You use change events to capture changes that ZENworks administrators make to Disk Encryption policies. You can capture any of the following events:

  • Policy created

  • Policy published

  • Policy deleted

  • Policy modified

  • Policy moved

  • Policy copied

  • Policy renamed

  • Policy shared or unshared

  • Policy assignment modified

  • Sandbox policy reverted to previous policy

Generated events provide information about the ZENworks administrator who performed the action, the affected policy, and the date the change occurred.

Enabling Change Events

You enable Full Disk Encryption change events at the Management Zone.

  1. In ZENworks Control Center, click Configuration > Management Zone Settings > Audit Management > Events Configuration to display the Events Configuration page.

  2. On the Change Events tab, click Add to display the Add Change Events dialog box.

  3. In the Change Events tree, expand the Full Disk Encryption section, then select the Disk Encryption policy change events you want to audit.

  4. Configure the event settings, then click OK to add the events to the list of audited change events.

For more detailed information and instructions, see Enabling a Change Event in the ZENworks 11 SP4 Audit Management Reference.

Viewing Generated Change Events

  1. In ZENworks Control Center, click Dashboard.

  2. In the Zone Audit panel, use the Dashboard and Events tabs to view the audited events:

    • Dashboard: Shows a summary of the audited events. You can see key indicators about top events and impacted objects, and can drill into the specific events. By default, the dashboard shows you an overview of events in the last 4 hours. If you want to see more data, you can change the time period.

    • Events: Shows the change events being audited and the generated events. You can click a generated event to see its details. By default, the list shows the events generated in the last 4 hours. If you want to see more data, you can change the time period.

For more detailed information and instructions, see Viewing a Generated Change Event in the ZENworks 11 SP4 Audit Management Reference.

3.0 Third-Party Material

All third-party trademarks are the property of their respective owners.