Introduction
What's new in Integrity X v26.1
Supported platforms
Supported hardware appliances
Supported cloud platforms
Supported VM hypervisors
Getting started
Integrity overview
About DDI
The Integrity DDI platform
Configurations and objects
Initial appliance configuration
Using the Administration Console
Logging in to or out of the Administration Console
Getting helpful command information
Interface settings
Setting an IPv4 address
Setting an IPv6 address
Removing an IPv4/IPv6 address
Setting the default gateway
Adding static routes
Updating the license
Logging in to Address Manager
Changing your password
Creating your first configuration
Overview of the Address Manager main window
My IPAM overview
Opening the My IPAM page
Customizing My IPAM dashboards
Using widgets
Adding widgets
Types of widgets
Tag groups widget
Workflow requests widget
Tasks widget
BAM infrastructure widget
IP infrastructure widget
Tasks widget
Favorites
Adding favorites
Server statistics widget
Configuring the Server statistics widget
Quick actions
Configuring the Quick actions widget
Adding host records using Quick actions
Assigning a static IPv4 address using Quick actions
Assigning a static IPv6 address using Quick actions
Assigning a DHCP reserved IPv4 address using Quick actions
Assigning a DHCP reserved IPv6 address using Quick actions
Adding an alias record (CNAME) using Quick actions
Adding a text record (TXT) using Quick actions
Working with Address Manager data tables
Sorting tables
Customizing tables
Exporting table data
Table filtering
Searching in Address Manager
Performing quick searches
Performing advanced searches
Reference: Object search categories
Data visualization
Appliances overview
Appliance metrics
Infrastructure metrics
Database metrics
APIv2 metrics
DNS metrics
DHCPv4 metrics
DHCPv6 metrics
Notification metrics
Events metrics
Address Manager configuration
Configurations
Adding or editing a configuration
Configurations
Configuring global settings
Making change control comments mandatory
Setting user session time out values
Adding a disclaimer to the login page
Setting Quick actions behavior
Enabling global custom reverse zone format
Global header customization
Displaying breadcrumbs
Configuring external application links
Enabling dark mode
Setting system language
Address Manager system configuration
Viewing general system information
Enabling network redundancy on Address Manager
Feature modules
Feature modules management
Configuring services
BlueCat Services Manager
Configuring Address Manager API for failover
Configuring the Address Manager firewall
Configuring the Address Manager license
Configuring the Address Manager metrics service
Configuring the Address Manager metrics exporter service
Address Manager host system metrics
Address Manager IPAM metrics
Address Manager database metrics
Address Manager RESTv2 metrics
Address Manager notification metrics
Configuring NTP on Address Manager
Configuring SNMP on Address Manager
Enabling SNMP service
Enabling SNMP trap service
Configuring SSH on Address Manager
Configuring syslog on Address Manager
Configuring the Address Manager DNS resolver service
Managing Address Manager software
Address Manager software updates
Prerequisites
Checking the available disk space
Deactivating deployment schedules
Disabling the backup service
Preserving custom scripts
Performing database backups
Applying software hotfixes, patches, and updates
Resolving upgrade warnings and failures
Dual boot partitions
Address Manager disk partitions
Reverting to the previous software version
Accessing the GRUB command-line
Viewing version history
Tag groups and tags
Creating tag groups and tags
Tagging Address Manager resources
Managing device types and devices
Creating device types and subtypes
Adding and editing devices
Adding devices using the Assign IP address page
Location support
Adding a custom location object
Naming policies
Creating naming policy values
Creating naming restrictions
Creating naming policies
Reference: Regular expressions
Object types and user-defined fields
Adding a user-defined field (UDF)
Reference: Object types
User-defined links
Adding a user-defined link definition
Editing a user-defined link definition
Adding a user-defined link (linking resources)
Best practices for UDF and UDL names
Using the Address Manager / BlueCat Gateway Cross-jump
Prerequisites
Configuring the Workflow UDF type in Address Manager
Creating an object and enabling the Workflow UDF
Data migration
Selecting the migration engine
Migrating data
Downloading or deleting migration log files
Configuring DHCP alert settings
Viewing DHCP alert notifications
Workflow change requests
Working with workflow change requests
Adding user tasks
HTTP and HTTPS support
Configuring HTTPS with a self-signed certificate
Configuring HTTPS with custom certificates
Configuring HTTPS with an existing custom certificate
Configuring HTTPS with a new custom certificate
Generating a Certificate Signing Request
Submitting the CSR to the Certificate Authority
Loading the signed server certificate into Address Manager
Re-applying certificates
Disabling HTTP or HTTPS
X.509 authentication
How X.509 authentication works
Adding an X.509 authenticator
Enabling X.509 authentication
Setting X.509 user access
Re-applying certificates to an existing X.509 authenticator
Managing Address Manager user security
Enabling a password policy
Configuring a login policy
Configuring API authentication settings
Address Manager SSH hardening
Restoring deleted objects
Viewing and restoring deleted objects
Users, groups, and access rights
User types and access types
User authentication
Security and history privileges
Managing Address Manager users
Adding or editing users
Locking and unlocking user accounts
Locking or unlocking a user account
Viewing user session details
Address Manager user groups
Creating a new user group
Managing users in user groups
Removing users from a user group
Adding LDAP user groups
Configuring Global Catalogue for Active Directory Authentication
Adding TACACS+ user groups
Access rights
Security privilege
History privilege
Address Manager object hierarchy and access right rules
Setting and changing default access rights
Editing access rights and overrides
Setting local object access rights
Viewing all access rights in the system
Setting global access rights for users and groups
Editing global access rights
Setting feature access rights for users and groups
Deleting access rights and overrides
Adding external authenticators
LDAP
Enabling SSL on LDAP
Kerberos and Active Directory
RADIUS and RSA SecurID
TACACS+
Configuring TACACS+ shell authentication
Testing authenticator service availability
Identity and Access Management
Single Sign-On
Setting up Single Sign-On
Setting up Single Sign-On after performing a new installation of Address Manager
Configuring HTTPS in Address Manager
Configuring Address Manager as a Service Provider
Configuring Address Manager as a Relying Party
Creating SSO groups
Converting LDAP groups into SSO groups
Converting TACACS+ groups to SSO groups
Configuring the IdP metadata and enabling the SSO connection
Testing the Single Sign-On Connection
Enabling SSO Enforced Mode
Setting up Single Sign-On on an Existing Address Manager
Converting User groups into SSO groups
Configuring Address Manager as a Service Provider
Configuring Address Manager as a Relying Party
Configuring the IdP metadata and enabling the SSO connection
Testing the Single Sign-On Connection
Enabling SSO Enforced Mode
OAuth API authorization
Enabling OAuth in Address Manager
Configuring the Authorization Server
Testing the OAuth Environment
Single Sign-On with Database Replication
Single Sign-On and OAuth Troubleshooting
IP address space
Working with IPv4 blocks
Creating or editing an IPv4 block
Deleting IPv4 blocks
Resizing, splitting, and moving IPv4 blocks
Adding a parent IPv4 block
Merging IPv4 blocks
Finding the first available IPv4 block
Finding the first available IPv4 network in an IP block
Finding the first unassigned IPv4 address
Creating IPv4 block partitions
Assigning an IPv4 template to an IPv4 block
Unassigning an IPv4 template from an IPv4 block
Applying an IPv4 template to an IPv4 block
Working with IPv4 networks
Creating a new IPv4 network
Resizing an IPv4 network
Splitting IPv4 networks
Moving and merging IPv4 networks
Assigning an IPv4 template to an IPv4 network
Unassigning an IPv4 template from an IPv4 network
Applying an IPv4 template to an IPv4 network
Refreshing the DHCP lease state for a network
Working with IPv4 templates
Creating IPv4 templates
Adding an IPv4 DHCP range template item
Adding an IPv4 group template item
Adding an IPv4 reserved range template item
Editing IPv4 templates
Setting access rights for an IPv4 template
Assigning IPv4 templates
Unassigning IPv4 templates
Applying IPv4 templates to IPv4 objects
Deleting IPv4 templates
Importing IP blocks and networks
Managing IPv6
IPv6 address space
IPv6 Unique Local Address Space
IPv6 Global Unicast Address Space
Creating the Global ID in the Local Address Space
Creating the Global Routing Prefix in the Global Unicast Address Space
Creating 127-bit networks in the Global Unicast Address Space
Creating IPv6 addresses in /127 network
Working with IPv6 blocks and networks
Adding, editing, and deleting IPv6 blocks
Adding a parent IPv6 block
Adding IPv6 networks
Splitting IPv6 blocks and networks
Resizing IPv6 blocks and networks
Moving IPv6 blocks and networks
Partitioning an IPv6 block
Managing IP addresses
Address types
IP grouping
Managing IPv4 groups
IP groups and access rights
Assigning IPv4 addresses
Changing the state of IP addresses
Assigning a host name to a network gateway
Moving IPv4 addresses
Clearing an IPv4 address assignment
Managing abandoned IPv4 addresses
Editing abandoned IPv4 addresses
Changing the state of abandoned IPv4 addresses
Deleting abandoned IPv4 addresses
Assigning IPv6 addresses
Editing and moving IPv6 address assignments
Importing IP addresses
IP address discovery and reconciliation
Managing IP reconciliation policies
Specifying DNS servers for IP address discovery and reconciliation
Specify DNS servers at the configuration level
Specifying DNS servers in IP reconciliation policies
Creating IP reconciliation policies
Removing IP reconciliation policies
Running, activating, and deactivating IP reconciliation policies
Viewing discovered IP addresses
Reconciling IP addresses
Managing IP reconciliation logs
Setting the IP reconciliation logging levels
Downloading the IP reconciliation log file
Reference: IPv4 reconciliation info
SSH discovery
Using the SSH discovery utility
Reconciling the discovered device information into Address Manager
Refreshing the DHCP lease state for a server
Overlapping IP space
Enabling and disabling IP overlap detection
DNS
Managing DNS views
Creating or editing DNS views
Deleting DNS views
Creating an internal root zone
View deployment order and access control lists
Access control lists
Creating or editing access control lists
Applying a DNS access control list
Viewing the objects linked to a DNS access control list
Deleting a DNS access control list
Managing DNS zones
Creating DNS zones
Editing DNS zones
Deleting a DNS zone
Moving a DNS zone
DNS zone templates
Creating zone template
Setting options in a zone template
Applying the template to a DNS zone
Importing DNS zones
Multi-primary DNS zones
Adding DNS/DHCP Servers to Address Manager
Creating or editing a server group
Adding servers to a server group
Creating DNS zones
Adding DNS deployment roles
Deploying multi-primary DNS service to a server group
DNS reverse zones
Creating reverse zones
Setting reverse zone name format
Changing reverse zone name format
Setting deployment roles at IP block or network levels
Setting a DNS server to be authoritative for reverse zones only
Delegating reverse zones
Creating a partial Class C reverse zone
How Address Manager deploys classless IPv4 space
DNS deployment roles
Adding DNS deployment roles
Reference: DNS deployment roles
DNS deployment options
Managing DNS deployment options
Reference: DNS deployment options
Update Policy DNS deployment option
Adding deployment options in DNS raw format
Configuring DNS response rate limiting
Defining DNS option inheritance settings
Secondary Zone Notifications deployment option
How it works
Prerequisites
Using the Secondary Zone Notifications deployment option in Address Manager
Configuring the Secondary Zone Notifications deployment option in Address Manager
Disabling Secondary Zone Notifications
Replacing the server sending Secondary Zone Notifications
Deleting a configured Secondary Zone Notifications deployment option
Managing resource records
Adding a host (A/AAAA) record
Editing a host (A/AAAA) record
Deleting a Host (A/AAAA) record
Adding an Alias (CNAME) record
Adding an Alias (CNAME) record from the host or alias record details page
Editing an Alias (CNAME) record
Adding a Text (TXT) record
Editing a Text (TXT) record
Adding a Host Info (HINFO) record
Editing a Host Info (HINFO) record
Adding a Service (SRV) record
Editing a Service (SRV) record
Adding a mail exchange (MX) record
Editing an MX record
Adding a Naming Authority Pointer (NAPTR) record
Editing a NAPTR record
Adding a generic record
Reference: Generic resource record types
Editing generic records
Adding a Hypertext Transfer Protocol Secure (HTTPS) record
Editing a Hypertext Transfer Protocol Secure (HTTPS) record
Adding a Service Binding (SVCB) record
Editing a Service Binding (SVCB) record
Adding a Uniform Resource Identifier (URI) record
Editing a Uniform Resource Identifier (URI) record
Duplicate a resource record
Dynamic resource records
Importing resource records
Adding Start of Authority records
Reference: How SOA serial numbers are calculated
Reference: SOA serial numbers limitation
Reference: Changing the SOA primary server
Importing DNS records
Creating external hosts
Deleting external hosts
Bulk DNS updates
Performing a bulk DNS update
Reference: Bulk DNS update CSV file
Naming policies and DNS views and zones
Linking a naming policy to a DNS view or zone
Unlinking a naming policy from a DNS view or zone
Creating resource records with a naming policy
Zone transfers
Configuring zone transfer deployment options
Allow Zone Transfers
Allow Notify
Notify and Notify Additional Servers
Notifying specific servers
ENUM zones
Creating or editing an ENUM zone
Deleting an ENUM zone
Working with ENUM zone prefixes
Adding or editing numbers in an ENUM zone
Deleting an ENUM number
DNS64
Configuring DNS64 support
DNS64 and reverse mapping
Dynamic DNS
Multi-threaded DDNS updates
DDNS conflict resolution
TSIG keys
Adding a TSIG key
Viewing objects linked to a TSIG key
Rolling over a TSIG key
Rotating TSIG keys associated with a view
DHCP zone groups and zones
Adding a DHCP zone group
Setting the deployment servers for a DHCP zone group
Adding a DHCP forward zone
Adding DHCP reverse zones
DNS forwarding
Configuring DNS forwarding
Setting a forwarding DNS deployment option
Defining a forwarding policy DNS deployment option
Disabling forwarding for child zones
Configuring DNS zone forwarding
Configuring forwarding zones
Stub zones
Configuring stub zones
Recursive DNS
DNS cache management
DNS zone delegation
DNS zone delegation scenarios
Dynamic network configuration
Streamlined DHCP
DHCPv4
Adding DHCPv4 ranges
Merging DHCP ranges
Resizing DHCPv4 ranges
Assigning an IPv4 template to a DHCPv4 range
Unassigning an IPv4 template from a DHCPv4 range
Applying an IPv4 template to an DHCPv4 range
Assigning an IPv4 template to a DHCPv4 reserved address
Unassigning an IPv4 template from a DHCPv4 reserved address
Applying an IPv4 template to an DHCPv4 reserved address
Viewing DHCPv4 lease history
DHCPv4 deployment options
Adding DHCPv4 client deployment options
Reference: DHCPv4 client options
Adding DHCPv4 service deployment options
Reference: DHCPv4 service options
DHCP custom options
Adding DHCP custom options
DHCP raw options
Adding DHCPv4 raw options
DHCP vendor profiles and options
Creating a DHCP vendor profile
Adding option definitions to a DHCP vendor profile
Adding DHCP vendor deployment options
DHCP client classes
Creating a client class
Configuring subclasses
Assigning a DHCP deployment role to a client class
Deployment options for DHCP client classes
Example: Advanced DHCP configuration with client classes
Shared networks
Creating tag groups and tags
Associating an object tag group with a configuration
Associating a network with a shared network tag
Viewing shared network resources
DHCPv6
Router Discovery (RD) advertisements in the IPv6 network
Configuring IPv6 on a DNS/DHCP Server
Configuring DHCPv6 on Address Manager
Adding DHCPv6 ranges
Viewing DHCPv6 lease history
Deploying and verifying DHCPv6
Configuring DHCPv6 reserved addresses
DHCPv6 limitations
DHCPv6 client and service deployment options
Adding DHCPv6 client deployment options
Adding DHCPv6 service deployment options
Reference: DHCPv6 service options
DHCP raw options
Adding DHCPv6 raw options
DHCPv6 High Availability
Configuring DHCPv6 High Availability
DHCP failover
About failover states
Configuring DHCP failover
Modifying DHCP failover parameters
DHCP deployment roles
Adding DHCPv4 deployment roles
Adding DHCPv6 deployment roles
Creating MAC pools
Adding a MAC address to a device
Configuring MAC pool options
Maintenance of unassociated MAC addresses
TFTP service
Adding TFTP groups
Adding folders and files in TFTP groups
Downloading, moving, and replacing TFTP files
Adding TFTP deployment roles
Dynamic Update of DHCPv4 reserved addresses
Troubleshooting dynamic update errors
Data checker
Configuring and enabling the data checker
Viewing and overriding data checker issues
Address Manager data checker Rules
Error Messages
Warning Messages
Information Messages
Managing deployment
Address Manager multi-version deployment support
Pre-deployment validation
Types of deployment
Manual deployment
Performing full deployment
Performing quick deployment
Automated deployment
Deployment schedules
Activating or deactivating deployment schedules
Validating deployment
Setting validation options for a configuration
Setting server level validation options
Performing manual deployment validation
Scheduling deployment validation
Setting email notification for deployment data validations
Deployment validation order
Tracking deployment
Cancelling queued deployments
Deployment order
Deployment troubleshooting
Managing servers
Supported servers
Supported DNS/DHCP Server hardware appliances
Multi-version DNS/DHCP Server compatibility
Address Manager to DNS/DHCP Server protocol compatibility
DNS/DHCP Server to DNS/DHCP Server protocol compatibility
Getting started with DNS/DHCP Servers
Basic DNS/DHCP Server configuration
Adding DNS/DHCP Servers to Address Manager
Deleting DNS/DHCP Servers
Configuring Dedicated Management
Removing a DNS/DHCP Server from Address Manager control
Enabling Dedicated Management
Disabling Dedicated Management
Enabling DNS/DHCP Server network redundancy from the Address Manager user interface
Disabling DNS/DHCP Server network redundancy
Disabling network redundancy when adding a DNS/DHCP Server
Disabling network redundancy when replacing a DNS/DHCP Server
Configuring DNS/DHCP Server services
BlueCat Services Manager
Service configuration override
Modifying DNS/DHCP Server services subject to service configuration override
Anycast
Anycast with VLAN interfaces
SNMP Traps with Anycast
Anycast BGP
Before you start
Configuring Anycast BGP
BGP Command Line Interface
Anycast OSPF
Anycast RIP
DNS/DHCP Server firewall
DNS/DHCP Server license
Additional IP addresses
Configuring additional IP service addresses
Configuring loopback addresses
Configuring network routes
DHCP with multiple IP service addresses
Setting the Server Identifier DHCP Service option
Network Time Protocol
Simple Network Management Protocol
Enabling SNMP service on DNS/DHCP Servers
Enabling SNMP Trap Service on DNS/DHCP Servers
Secure Shell
TACACS+ authentication
Secure Shell
Syslog on DNS/DHCP Server
Enabling IBM QRadar and HP ArcSight syslog redirection
Metrics exporter
DNS/DHCP Server host system metrics
DNS/DHCP Server DNS metrics
DNS/DHCP Server DHCP metrics
DNS/DHCP Server notification metrics
Health telemetry
DNS activity
Configuring DNS activity
Reference: DNS activity event message examples
DNS query event
DNS response event
DNS update query event
DNS update response event
Scenarios: DNS activity event messages are not generated
DNS statistics
Configuring DNS statistics
Reference: DNS Statistics event message example
DHCP activity
Configuring DHCP activity
Reference: DHCP activity event message example
DHCP statistics
Configuring DHCP statistics
Reference: DHCP statistics event message example
DNS resolver
Gateway service on DNS/DHCP Server
Prerequisites and technical specifications
Limitations
Best practices
Data and Logs
BAM in replication
Deploying and managing BlueCat Gateway
Prerequisites: Pulling BlueCat Gateway images from a cloud or local repository
Prerequisites: Uploading BlueCat Gateway images
Enabling Gateway service on a DNS/DHCP Server
Verifying Gateway status
Launching BlueCat Gateway, Adaptive Application, or Plugin
Managing containers
Disabling Gateway service
Upgrading a container
Upgrading a container via a cloud or local repository
Upgrading a container via Gateway image upload
Verifying the upgrade
Troubleshooting
LiveWire on BDDS (LiveWire on DDI)
Monitoring DNS/DHCP Servers
Viewing DNS/DHCP Server logs
DNS/DHCP Server support bundles
Other DNS server
Adding Other DNS servers
Deleting Other DNS servers
Changing the server profile of Other DNS servers
BlueCat Cloud DNS servers
Local Traffic Managers
Adding a Local Traffic Manager
Configuring loopback interfaces for F5 load balancing
BIG-IP DNS Servers
Adding a BIG-IP DNS Server
Adding a Listener Interface
Configuring DNS deployment roles for BIG-IP DNS Servers
Removing a BIG-IP DNS Server as the secondary of a DNS primary
Micetro DNS/DHCP Servers (MDDS)
Setting up Micetro
Setting up Micetro DNS/DHCP Servers
Feature support and limitations
Working with servers
Viewing deployment roles
Moving deployment roles
Configuring deployment options on a server
Connecting to a server
Configuring server interfaces
Adding a published server interface
Deleting a published server interfaces
Server diagnostics
Viewing DNS/DHCP service configurations
Starting, stopping, and restarting DHCP service
Configuring server groups
Creating or editing a server group
Adding servers to a server group
Configuring deployment options on a server group
Deploying multi-primary DNS service to a server group
Deploying server group deployment options to a server
Removing servers from a server group
Deleting a server group
Configuring F5 servers and remote services
Automatically synchronize Address Manager with an F5 configuration
Configuring F5 resource pools
Clearing the DNS cache of LTM or BIG-IP DNS Servers
Monitoring BIG-IP DNS Servers and Local Traffic Managers
Controlling servers
Chains of servers
Server maintenance
Disabling servers
Removing a DNS/DHCP Server from Address Manager control
Replacing a server
Enabling a server
Upgrading DNS/DHCP Server software
Preserving custom scripts
DNS/DHCP Server multi-version upgrade support
Copying files to new version
Patching DNS/DHCP Servers
Uploading a DNS/DHCP Server patch to Address Manager
Applying a DNS/DHCP Server patch
Deleting a DNS/DHCP Server patch
Viewing server version history and upgrade status
BlueCat Cloud DNS
Configuring BlueCat Cloud DNS
BlueCat Cloud DNS firewall requirements
Adding a BlueCat Cloud DNS server
Deleting a BlueCat Cloud DNS server
Securing BlueCat Cloud DNS with TSIG keys
Troubleshooting BlueCat Cloud DNS
Administration Console
Using the Administration Console
Logging in to or out of the Administration Console
Getting helpful command information
Configuration mode
Updating the license
Rebooting and powering-off
Serial port
Enabling and disabling the Serial port
Setting the Baud Rate
Resetting HTTP service
User management
Password management
Setting the root password
Setting the admin password
Setting the bluecat password
Setting the portal password
Setting the system password
Setting the JMX password
Setting the BCLA user password
Database backup
Copying the default backup profile
Creating backup profiles and scheduling backups
Viewing backup profiles
Copying backup profiles
Deleting backup profiles
Enabling or disabling the backup service
Performing manual backups
Viewing backup files
Viewing the list of backup files for a specific backup schedule
Viewing the backup file version information
Viewing backup status
Restoring the database
Deleting backup files
Database settings
Viewing database settings
Configuring database settings
Adding host access to the database
Remove host access to the database
Securing database access
Interface settings
Setting an IPv4 address
Setting an IPv6 address
Setting the Primary Service IP address
Removing an IPv4/IPv6 address
Setting the default gateway
Configuring speed, duplex, and auto-negotiation settings
Resetting interface configurations
Network redundancy
Disabling Address Manager network redundancy from the Administration Console
Configuring DNS/DHCP Server network redundancy from the Administration Console
Adding a bonding interface
Removing a bonding interface
Network settings
Setting the default gateway
Removing the default gateway
Resetting network configurations
System settings
Setting the host name
Enabling STIG compliance
Disabling STIG compliance
Software version
Viewing software version for next system boot
Setting software version for next system boot
System time
Setting the time zone
Setting the time
Setting the date
Static routes
Adding static routes
Removing static routes
DNS Name Servers
Adding Name Servers
Removing a name server
Mail service
Configuring mail service
Address Manager firewall
Configuring firewall settings
BlueCat Horizon connection
DNS/DHCP Server configuration and system settings
Removing a DNS/DHCP Server from Address Manager control
Removing a DNS/DHCP Server from Micetro control
Setting the Administration password
Resetting the deployment password
Resetting the deployment certificate
Enabling Dedicated Management
Disabling Dedicated Management
Viewing xHA status from the Administration Console
Configuring the xHA Backbone Connection from the Administration Console
DHCP failover
Forcing the DHCP failover state
Performing a DHCP failover recovery
Querylogging
Enabling or disabling querylogging
Adding querylogging channels
Available channel categories for querylogging
Modifying querylogging channels
Deleting querylogging channels
Configuring DNS/DHCP Servers for Micetro
Removing a DNS/DHCP Server from Micetro control
DNS/DHCP Server SSH hardening
Configuring VLAN tagging from the Administration Console
Adding a VLAN interface
Setting the Primary Service IP address
Modifying VLAN interfaces
Removing VLAN interfaces
Enabling port bonding when VLANs are already created
Removing the factory default address from eth0/bond0
VLAN tagging
Using VLAN tagging
Prerequisites
Configuring VLAN interfaces
Adding a VLAN interface from the user interface
Deleting a VLAN interface from the user interface
Configuring VLAN tagging from the Administration Console
Adding a VLAN interface
Setting the Primary Service IP address
Modifying VLAN interfaces
Removing VLAN interfaces
Enabling port bonding when VLANs are already created
Removing the factory default address from eth0/bond0
Configuring VLAN interfaces with xHA
xHA with VLANs and Dedicated Management enabled
How does xHA work in a VLAN environment?
Adding VLAN interfaces to xHA pairs from the Address Manager user interface
DHCP with VLAN and xHA
iDRAC
Configuring iDRAC
Configuring static IPv4 settings
Configuring static IPv6 settings
Setting the iDRAC web access password
Connecting to iDRAC remotely
Using the web browser as a Virtual Console
Logging out of iDRAC
iDRAC RACADM Command Line
DNSSEC
DNSSEC overview
DNSSEC with Address Manager and DNS/DHCP Server
Creating a DNSSEC authoritative server
Creating a DNSSEC signing policy
Applying DNSSEC signing policies to DNS zones
Applying a DNSSEC signing policy to a forward zone
Applying a DNSSEC signing policy to a reverse zone
Viewing the objects linked to a DNSSEC signing policy
Disabling zone signing
Unsecuring zones
Managing DNSSEC key rollover and generation
Automatic key generation
Manual key generation
Emergency key rollover
Specific DNSSEC keys
Managing DNSSEC keys
Emailing keys as DNS Keys
Deleting a DNSSEC key
Configuring a DNSSEC validating server
DNSSEC Validation deployment option
Manual DNSSEC Validation
DNSSEC Trust Anchors
Additional DNSSEC deployment options
Creating a chain of trust for delegated third-party zones
HSM
DNSSEC with HSM
HSM requirements
Components
Network environment
OPTIONAL: Copying Security World files
Configuring HSM
Creating an HSM configuration
Adding HSM servers to an HSM configuration
Configuring HSM security world
Joining Address Manager to the security world
Enabling HSM on DNS Servers
OPTIONAL: HSM with xHA
Creating a DNSSEC-HSM signing policy
Assigning the DNSSEC-HSM signing policy
Deploying DNS with a DNSSEC-HSM signing policy
Working with HSM
Modifying an HSM configuration
Viewing HSM configuration details
Editing an HSM configuration
Deleting an HSM configuration
Managing the security world
Updating the security world configuration
Updating the security world for Address Manager
Removing Address Manager from the security world
Managing HSM servers
Viewing HSM server details
Editing HSM servers
Deleting HSM servers
Monitoring HSM servers
HSM failover and disaster recovery
Managing HSM-enabled DNS servers
Editing HSM-enabled DNS Servers
OPTIONAL: Editing an HSM-enabled xHA pair
Disabling HSM-enabled DNS Servers
Enabling HSM-enabled DNS Servers
Replacing HSM-enabled DNS Servers
OPTIONAL: Replacing HSM-enabled DNS/DHCP Servers in an xHA pair
Disabling HSM on managed DNS Servers
Performing dynamic updates with DNSSEC-HSM
Troubleshooting
Cannot deploy DNS service
HSM tries to restart DNS service even if DNS service is disabled
Disconnected HSM servers won't be added to HSM configuration
HSM server failure
DANE
Requirements
Limitations
TLSA records
DANE and SMTP
Managing TLSA records
STIG
STIG compliance
Setting the bluecat password
Enabling and disabling STIG compliance
Enabling STIG compliance
Disabling STIG compliance
Resetting a locked user account with STIG enabled
Locking the console
Active Directory integration
Dynamic domain controller registration
Integrating Address Manager into Active Directory
Configuring Microsoft domain controllers
Benefits of moving Active Directory DNS to Address Manager and DNS/DHCP Server
Active Directory DNS records
Configuring GSS-TSIG
DHCP Server updating Windows DNS
Prerequisites
Supported versions
Windows system configuration
Creating an AD user account for a DHCP server
Setting user account options
Optional: Mapping the service principal name by running the ktpass command
Configuring zones in Windows DNS
Address Manager system configuration
Creating and configuring a Kerberos Realm
Defining Key Distribution Centers (KDCs)
Defining a DHCP service principal
Creating DDNS-related deployment options
Adding a DHCP zone group
Adding a DHCP zone declaration
Configuring deployment servers
Associating the service principal
Verifying successful configuration
Updating DNS Servers with Active Directory
Prerequisites
Creating an AD user account for the dynamic update role on the Domain Controller
Configuring a primary role for the BlueCat DNS server
Configuring the Kerberos Service principal in Address Manager
Associating the service principal
Configuring zones to accept GSS-TSIG updates
Configuring Domain Controllers to update the primary DNS Server
Time synchronization
BlueCat Threat Protection
About Response Policies
BlueCat Threat Protection with BlueCat Security Feed
BlueCat Security Feed service requirement
Configuring BlueCat Threat Protection using BlueCat Security Feed
Uploading the BlueCat Security Feed license
Enabling BlueCat Security Feed
Adding response policy zones with BlueCat Security Feed
Adding a DNS deployment role to a DNS response policy zone
BlueCat Threat Protection with local response policies
Configuring local response policies
Adding local response policies
Adding a response policy item
Uploading a response policy file
Adding response policy zones with local response policies
Adding a DNS deployment role to a DNS response policy zone
Using local response policies with BlueCat Security Feed
Address Manager database
Database backups in the Address Manager UI
Creating backup profiles and scheduling backups from the Address Manager UI
Viewing backup profiles from the Address Manager UI
Deleting backup profiles from the Address Manager UI
Enabling or disabling the backup service from the Address Manager UI
Performing manual backups from the Address Manager UI
Viewing backup files from the Address Manager UI
Uploading backup files from the Address Manager UI
Deleting backup files from the Address Manager UI
Resetting the Address Manager database from the Address Manager UI
Restoring the database from the Address Manager UI
Database maintenance and replication
Streaming Replication
Replicating the database for Address Manager disaster recovery
Address Manager scalability with database replication
Configuring database replication
Configuring a trust relationship in Address Manager
Refreshing Address Manager keys in a trust relationship
Removing an Address Manager Server from the trust relationship
Configuring database replication from the Address Manager user interface
Modifying database replication from the user interface
Viewing database replication details
Monitoring database replication latency
Performing database replication failover
Database replication failover behavior
Breaking and resetting database replication
Forcibly resetting database replication
Replication troubleshooting reset scenarios
Database replication troubleshooting
Re-indexing the database
Improving audit data exporting and disk usage maintenance
Retaining audit data
Configuring Audit Data Retention
Exporting audit data to an external database
Enabling Audit Data Export
HA Active Health Status
Crossover high availability (xHA)
About xHA
How xHA works
xHA configuration scenarios
xHA with Dedicated Management enabled or disabled
xHA with Dedicated Management Disabled
xHA with Dedicated Management enabled
xHA with Dedicated management enabled and NAT
xHA with server groups
Prerequisites for xHA
Address Manager multi-version xHA support
Managing xHA
Using the xHA backbone connection
Creating an xHA pair
Deploying data to an xHA pair
Configuring DNS/DHCP Server services on an xHA pair
Viewing xHA status
Viewing server logs for an xHA pair
Editing an xHA pair
Adding or removing the xHA backbone connection
Upgrading or applying patches to servers in an xHA pair
Repairing xHA
Rules for repairing xHA
Breaking an xHA pair
Breaking xHA with server groups
xHA failover
Managing events, transactions, and reports
Managing events
Viewing system events
Viewing deployment events
Transaction history
Viewing transaction history
Managing reports
Creating reports
Report types
Adding a custom logo to reports
Resetting the report logo
Deleting reports
Scheduling reports
Activating and deactivating scheduled reports
Deleting a report schedule
Managing notification groups
Creating notification groups
Reference: Event level subscriptions
Editing notification groups
Deleting notification groups
Managing users, user groups, and tags with notification groups
Adding users and groups to a notification group
Applying tags to users and groups within a notification group
Deleting users and groups from the notification group
Managing appliance system logs and support bundles
Viewing Address Manager logs
Downloading log files
Setting the logging level
Deleting selected database or migration log files
Address Manager support bundles
Events API
Enabling the Events API
Creating an event registry
Linking an object to an event registry
Viewing objects linked to an event registry
Reference: Events API event format
Reference: Event producers
Monitoring Address Manager and DNS/DHCP Server
Monitoring Address Manager
Configuring Address Manager monitoring
Configuring the Address Manager metrics exporter service
Configuring SNMP on Address Manager
Enabling SNMP service
Enabling SNMP trap service
Configuring syslog on Address Manager
Monitoring Address Manager health
Monitoring notification processing
Monitoring DNS/DHCP Server
Configuring DNS/DHCP Server monitoring
Metrics exporter
Enabling SNMP service on DNS/DHCP Servers
Enabling SNMP Trap Service on DNS/DHCP Servers
SNMP Traps with Anycast
Syslog on DNS/DHCP Server
Enabling IBM QRadar and HP ArcSight syslog redirection
Monitoring DNS/DHCP Server health
Monitoring notification backlog on BDDS
SNMP Manager setup and BlueCat MIB files
SNMP Manager setup
BlueCat MIB files
Address Manager polled objects
DNS/DHCP Server polled objects
DNS/DHCP Server traps
Reference: SNMP trap notification messages
Dell OpenManage Server Administrator (OMSA) Instrumentation MIB
Feature Module: Cloud Discovery & Visibility
What's new in version 26.1
API changes
Known issues
Licensing and upgrading
Upgrading to CDV 26.1 from previous versions
Getting started with Cloud Discovery & Visibility
Searching, filtering, and viewing items in tables
Context-sensitive help
Discovery tab
Discovery page columns
Schedule manager and discovery job status
Schedule manager and discovery job history
Working with Schedule managers and discovery jobs
Creating a discovery (Schedule manager and discovery jobs)
Performing a pre-flight check
Starting, stopping, and terminating discovery
Rediscovery of cloud resources
Updating existing Schedule manager settings
Exporting Schedule managers and discovery jobs
Importing Schedule managers and discovery jobs
Visibility tab
Visibility page columns
Visibility job status
Visibility job history
Working with visibility managers and visibility jobs
Creating a visibility manager and visibility jobs
Performing a pre-flight check
Starting, stopping, and terminating visibility managers
Updating existing Visibility job settings
Exporting Visibility managers and their visibility jobs
Importing Visibility managers and visibility jobs
Purging visibility systems
Purge visibility system settings (AWS)
Purge visibility system settings (GCP)
Purge visibility system settings (Azure)
Cloud networks tab
Tagged resources tab
Settings tab
Configuring additional tagged resources
Configuring parent zone deletion settings
Cloud Discovery & Visibility logging
Notification management
AWS Route 53 API regulator
Amazon Web Services (AWS) environments
AWS discovery and visibility settings
AWS job settings: Credentials
AWS job settings: Account Filter options
AWS job settings: Configuration Options
AWS job settings: Discovery options
AWS job settings: Monitoring Options
Manually configuring SQS, SNS, and EventBridge rules in AWS environments
Manually configuring AWS CloudTrail
About AWS authentication in Cloud Discovery & Visibility
Setting up a single AWS user account for Cloud Discovery & Visibility
Setting up multiple AWS credentials for multiple regions
Setting up CDV to use EC2 instance accounts for authentication
About AWS discovery
AWS Discovery options during Basic setup
Overlapping AWS VPC regions in Discovery and Visibility lists
Reference: AWS Schedule manager configuration file
Reference: Actions tracked by AWS Scheduled updates and rediscovery
About AWS visibility and visibility jobs
Reference: AWS visibility job configuration file
Reference: Actions tracked by AWS Visibility jobs
Adding the values of AWS resource tags to Address Manager entities
Setting up and running AWS Organization-level discovery and visibility
Registering an AWS delegated administrator for Organization-level discovery
Creating a YML template for a cross-account role for AWS Organization-level discovery
Deploying cross-account roles for AWS Organization-level Discovery
Setting up AWS credentials for Organization-level discovery in Cloud Discovery & Visibility
Running AWS Organization-level discovery and visibility
Actions taken during AWS Organization-level visibility
AWS data in Address Manager
AWS VPC data
AWS Subnet data
AWS EC2 data
AWS DNS data
AWS ELBv2 data
AWS Route 53 data
AWS VPC Endpoints
AWS Elastic Kubernetes Service (EKS) data
Imported data for IP addresses reserved by AWS
Google Cloud Platform (GCP) environments
GCP discovery and visibility settings
GCP job settings: GCP service account
GCP job settings: Configuration options
GCP job settings: Discovery options
GCP job settings: Monitoring options
Manually configuring the GCP topic, sink, and subscription
About GCP discovery
GCP Discovery options during Basic setup
Overlapping VPC projects in the Discovery and Visibility lists
Reference: GCP Schedule manager configuration file
Reference: Actions tracked by GCP rediscovery
About GCP visibility and visibility jobs
Reference: GCP visibility manager configuration file
Reference: Actions tracked by GCP visibility jobs
Setting up and running GCP Organization-level discovery and visibility
Setting up GCP roles and permissions for Organization-level jobs
GCP role permissions for Organization-level discovery and visibility
Running GCP Organization-level discovery and visibility
Making sure new Projects in a GCP Organization can be discovered
Actions taken during GCP Organization-level visibility
GCP data in Address Manager
GCP VPC network data
GCP Subnet data
GCP VM Instance data
GCP DNS data
GCP DNS zone data
GCP Load balancer data
GCP Private endpoint data
Google Kubernetes Engine (GKE) data
Imported data for IP addresses reserved by GCP
Microsoft Azure environments
Azure discovery and visibility settings
Azure job settings: Azure credentials
Azure job settings: Configuration options
Azure Subscription and Resource Groups discovery scenarios
Azure job settings: Discovery options
Setting up Azure Virtual Network tag filters
Azure job settings: Azure Monitoring options
Manually configuring the Azure Event Grid, Service Bus namespace, and Service Bus queue
About Azure discovery
Azure Basic setup Discovery options
Overlapping VNet resource groups in the Discovery and Visibility lists
Reference: Azure Schedule manager configuration file
Reference: Actions tracked by Azure Scheduled updates and rediscovery
About Azure visibility and visibility jobs
Reference: Azure visibility job configuration file
Reference: Actions tracked by Azure visibility jobs
Discovery and visibility of related IPs on different resource groups in Azure infrastructures
Microsoft Azure data in Address Manager
Azure Virtual network data
Azure Virtual WAN, Virtual Hub, Firewall, and Virtual Connection data
Azure Subnet data
Azure Virtual Machine data
Azure Private endpoint data
Azure DNS data
Azure Load balancer data
Azure Private and Public DNS zone data
Azure Public DNS alias records
Azure Kubernetes Service (AKS) Cluster data
Imported data for IP addresses reserved by Azure
Cloud Discovery & Visibility database management
Exporting the Cloud Discovery & Visibility database
Importing the Cloud Discovery & Visibility database
Additional reference material
How CDV deletes Address Manager resources associated with Terminated Discovery jobs, Schedules, and Visibility Managers
About resource tagging
About dropped resources
REST API endpoints
Feature Module: Network Discovery & Visibility
Enable Network Discovery & Visibility Feature Module
End-to-end discovery workflow
Prepare for discovery
About the Credentials page
Add credentials
Add SNMPv1 and SNMPv2c credentials
Add SNMPv3 credentials
Add VMware credentials
Add SSH credentials
Configure discovery behavior
About the Policies page
Create a discovery policy
Discover multiple network devices (SNMP)
Discover VMware environments
Discover individual network devices (SSH)
Configure discovery probes
About the Discovery Probes page
Create a discovery probe
Run discovery
About the Discovery Tasks page
Create a discovery task
Run discovery tasks
View and understand discovery results and logs
Reconcile discovered data with Address Manager
About the Reconciliation policies page
Create reconciliation policies
Reconcile discovery results
Troubleshoot Network Discovery and Visibility
View and download probe logs
Download result and log files via Address Manager system logs
Obtain support for unsupported devices
Obtain MIB dumps for unsupported devices
Reference: Network requirements
Address Manager service ports
DNS/DHCP Server firewall requirements
Reference: IPv6 support
Reference: Deployment option inheritance
Reference: DNS/DHCP Server RFC compliance
DANE isn't supported by Chrome, Firefox, or Safari browsers. Plug-ins and
extensions for these browsers (such as https://www.dnssec-validator.cz/
Deployment of TLSA records is only supported in Address Manager and
DNS/DHCP Server v25.1.x or greater. Attempting to deploy a TLSA record to managed DNS/DHCP Server s running software version 9.6.x or earlier will result in
deployment failure.