© 2012 IBM Corporation IBM Endpoint Manager for Software Use Analysis Product Introduction and Overview [NAME], [TITLE] [DATE]
Nov 02, 2014
© 2012 IBM Corporation
IBM Endpoint Manager for Software Use AnalysisProduct Introduction and Overview
[NAME], [TITLE][DATE]
© 2013 IBM Corporation2
IBM Endpoint Manager
Compelling reasons are urging companies to adopt software asset management processes
Compliance is being driven by international, industry, and local laws
License compliance audits from Independent Software Vendor
providers are increasing
Users need to know that assets on which their business relies must be protected, optimized and in compliance
IT resources needs to be assigned to value creation for the business rather than to “fix” lack of processes
Asset Managers need to provide accurate information to Business Execs, Finance & Procurement. They need to demonstrate effective processes to internal and external audit
They are legally responsible for compliance under the law. Good governance is a competitive advantage – best practices not only protect but enhance the way in which you do business
© 2013 IBM Corporation3
IBM Endpoint Manager
IBM Endpoint Manager Continuously monitor the health and security of all enterprise computers in real-time via a single, policy-driven agent
Endpoints• One infrastructure:
management server, console, agent for Windows, Mac, Unix, Linux, Mobile
• Scales to 250,000 endpoints per management server
• Robust, flexible architecture with built-in failover
• Nearly-invisible impact to network, endpoints
• Operates in low-bandwidth / high-latency environments
• Physical or virtual, network or Internet-connected
IBM Endpoint Manager
Patch Management
Lifecycle Management
Software Use Analysis
Power Management
Mobile Devices
Security and Compliance
Core Protection
Desktop / laptop / server endpoint
Mobile Purpose specific
Systems Management Security Management
Server Automation
© 2013 IBM Corporation4
IBM Endpoint Manager
Security & Compliance
Vulnerability Assessment
Compliance Analytics
3rd Party Endpoint Protection Management
Patch Management
Security Configuration Management
Core Protection
Anti-Malware
Firewall
Data Protection (add-on)
Patch Management
Offline VM Patching
Application Patching
OS Patching
Mobile Devices
Compliance
App Mgmt
Mobile Device Mgmt
The IBM Endpoint Manager Family
Middleware Management
Multi-Platform OS Deployment
Physical & VirtualServer Lifecycle Management
Cross-Server Sequenced Task Automation (e.g. Patch OS on Server Cluster)
Server Automation
Power Management
Windows & Macs
Carbon, cost reduction reports
End-user Dashboard
Lifecycle Management
Software Distribution
OS Deployment
Remote Control
Patch Management
Basic HW & SW Inventory
Starter Kit
TPM evolution
Software Use Analysis
Software Catalog Correlation
Software Usage Reporting
Software Inventory
TADd / ILMT convergence
App, PIM Containers
Self-Quarantine
Starter Kit
© 2013 IBM Corporation5
IBM Endpoint Manager
Stores / Kiosks
WAN
Data center
Headquarters
Remote offices
Distribution center
Internet
Cab
le/D
SL
WiFi
Airport
Hotel
Coffee shop
Home
Leased line3G
WiFi
IBM Endpoint Manager, built on BigFix technology
Whether it’s a Mac connecting from hotel WiFi, a Windows laptop at 30K feet or a Red Hat Linux Server in your data center, IBM Endpoint Manager has it covered. In real time, at any scale.
Satellite
Network-friendly architecture delivers large packages without disrupting critical business applications
Single, intelligent agent uses <2% CPU, <10MB RAM
Cloud-based service continuously provides new patch, policy updates
Full command and control of Internet-connected devices
Use existing computers as Relays to minimize network traffic
Content Update Service
Leased line
© 2013 IBM Corporation6
IBM Endpoint Manager
IBM Endpoint Manager elements
Single server and console• Highly secure, highly available• Aggregates data, analyzes and reports• Manages up to 250K endpoints per server
Flexible policy language (Fixlets)• Thousands of out-of-the-box policies• Best practices for operations and security• Simple custom policy authoring• Highly extensible/applicable across all platforms
Virtual infrastructure• Designate IBM Endpoint Manager agent as a relay
or discovery point in minutes• Provides built-in redundancy • Leverages existing systems/shared infrastructure
Single intelligent agent• Continuous self-assessment• Continuous policy enforcement• Minimal system impact (<2% CPU, <10MB RAM)
© 2013 IBM Corporation7
IBM Endpoint Manager
Hardware Software Contracts/Licenses
Software Asset Management is one of the most important drivers to keep company costs under control and within budget
Software Asset Management
SW Cost TrendsHW Cost Trends Labor Cost Trends
“Enterprises that begin an asset management program experience up to a 30% reduction in costs the first year.. and continue savings of 5-10% for the next 5 years” – Gartner
IT Service Management
IT Asset Management
© 2013 IBM Corporation8
IBM Endpoint Manager
Software Asset ManagementIBM Endpoint Manager enables software asset management
Be prepared for software audits
Extend software asset management to servers
Manage all assets from procurement through retirement
Endpoint Management
SystemsManagement
Security Management
Common agent
Unified console
Single mgmt server
Managed = Secure
Desktops, Laptops, & Servers
Smartphones & Tablets
Purpose-specific Endpoints
© 2013 IBM Corporation9
IBM Endpoint Manager
What’s new in Endpoint Manager for Software Usage Analysis
• IBM Tivoli Asset Discovery for distributed is now part of IBM Endpoint Manager for Software Use Analysis.
• Adds support for the Common Inventory Tool component to identify and discover software products based on signatures across operating systems .
• Adds the Software Knowledge Base Tool component for managing complex software signature definitions and differentiating between software identification and software usage signatures across operating systems for IBM, non-IBM, and custom applications including UNIX and Linux.
• Support tight integration between license, asset, and service desk through IEM and SmartCloud Control Desk integration, delivers enterprise app store
• Provided REST API's allowing customers to exploit other service desk and asset management tools
• The Software Use Analysis server now uses the Tivoli Endpoint Manager Analytics component which now provides
© 2013 IBM Corporation10
IBM Endpoint Manager
Be prepared for a Software license audit
•Achieve real-time visibility into what software is installed and how it’s used
•100K application signatures out of the box
• Identify under-used applications to reduce software spend
•Monitor usage and related growth to accurately plan for future needs
•Pass more audits with better compliance reports than most vendors
•Leverage payback in months to fund investment in solution
How do I stay on top of software licensing?
© 2013 IBM Corporation11
IBM Endpoint Manager
Reporting by all software assets
© 2013 IBM Corporation12
IBM Endpoint Manager
Extend software asset management to servers
Manage assets on Microsoft Windows, UNIX and Linux servers
Collect inventory and deployed software capacity data in multiple distributed physical and virtual environments, including VMWare
Calculate number of Processor Value Units (PVUs) including supported virtualized servers that are available to installed Passport Advantage PVU-based software
Datacenter Servers & Virtual Servers
Distributed Servers
With virtualization how can I track server software licensing?
Single tool to manage assets across endpoints and servers including
virtual server license support
© 2013 IBM Corporation13
IBM Endpoint Manager
Manage all assets from procurement through retirement
Control Desk stores: Authorized assets and licenses which
are populated via the procurement process and other business processes
Deployed assets and licenses which are discovered and tracked by Endpoint Manager
Out of the Box Reconciliation provides:
• Identification of ‘authorized’ Assets missing in Deployed Asset Inventory
• Identification of Deployed Assets missing in ‘authorized’ Asset Inventory
• Comparison of attributes /specifications based on unique attributes, like serial number
Inte
grat
ion
Control Desk
How can I reconcile procured and deployed licenses to improve business controls?
© 2013 IBM Corporation14
IBM Endpoint Manager
Reporting by contract
© 2013 IBM Corporation15
IBM Endpoint Manager
US Foods needed an automated, centralized endpoint management solution to replace cumbersome software compliance monitoring and application deployment processes across 15,000 endpoints.
Customer NeedsKey Features & Outcomes Reduced patch deployment times by 80
percent by centralizing process control
Saved USD500,000 on software licenses through accurate and timely software asset management data
Helped maintain full compliance with software license agreements, avoiding USD1 million in license noncompliance fines
IBM Endpoint Manager software reduces company's software spend, increases compliance
US Foods is one of America’s leading foodservice distributors to restaurants, healthcare and hospitality facilities, government operations and educational institutions.
“Out of the box, IBM Endpoint Manager software dramatically streamlined our patch deployment processes…, increased confidence in our software usage data and enhanced our lifecycle management and power management processes significantly.”
—Dan Corcoran, director of client technology, US Foods
US Foods avoids potential software license penalties with self audit
© 2013 IBM Corporation16
IBM Endpoint Manager
ROI of Software Asset Management: How IBM Can Help
License reclamation Customer reclaimed 80 licenses of Microsoft Visio where it wasn’t being used and replaced it with free Visio reader.
Customer thought they had 2,600 laptops they needed licenses for, but Endpoint Manager’ network discovery and inventory capabilities found only 2,000 laptops
Customer reduced their routine software license reporting effort from 10 days down to 1 hour to produce reports during contract reviews with vendors like Microsoft.
Customer denied internal purchase request of 100 additional copies of $150/seat terminal emulation software because their Endpoint Manager reports showed more than that quantity deployed but not used.
Customer used Endpoint Manager to prove actual license compliance for processor-based licenses after Microsoft auditors claimed they owed $7M. Upon further investigation, the Endpoint Manager tool was proven to be accurate whereas the Microsoft tool was found to be faulty.
Customer took 20 minutes to locate all p2p file sharing applications deployed on their 120,000 computers for removal according to corporate policy.
Cost avoidance
Continuous compliance, efficiency improvements
License reassignment
Legal risk management, cost avoidance:
Risk management
© 2013 IBM Corporation17
IBM Endpoint Manager
Summary
Pass immediate Windows audits and reclaim software licenses to reduce license spend
Extend ROI to servers without adding infrastructure or staff
Extend ROI to manage all assets from procurement through retirement
© 2013 IBM Corporation18
IBM Endpoint Manager
BACKUP SLIDES
• Dilbert cartoon on software audits• Survey results from March 18th Webcast on SAM• Enterprise App store slides
© 2013 IBM Corporation19
IBM Endpoint Manager
Is this your business today ?
© 2013 IBM Corporation20
IBM Endpoint Manager
What is happening today – Previous survey results on audits and SAM maturityHas your company been audited by one
or more software companies forcompliance with software licensing agreements?
What is the maturity level of your SAM program?
Yes, once in the last two years. 31.1% (28)
Initial (Ad Hoc) - Little control over what IT and software assets are being used and where 30.7% (27)
Yes, two or more times in the last two years. 28.9% (26)
Defined (Tracking Assets) - SAM processes exist as well as tools and installation data 38.6% (34)
No, but we have been alerted that an audit is forthcoming. 10% (9)
Managed (Active Management) - Vision, policies, procedures, and tools are used to manage software asset life cycles 26.1% (23)
No, we have not been audited or alerted of an impending audit. 30% (27)
Optimized (Optimized Management) - Near real-time alignment with changing business needs. SAM is a strategic asset to overall business objectives. 4.5% (4)
Source: InformationWeek WebCast “Has Anyone ever returned an Unused Software License”
© 2013 IBM Corporation21
IBM Endpoint Manager
Delivery an Enterprise App Store
AppStore look-and-feel for service catalog
© 2013 IBM Corporation22
IBM Endpoint Manager
Deliver automated workflows for request, approval and licensing
End User
1.) End User Requests Software2.) Workflow Initiated. Checks License Entitlement. 3.) Automatic or manual approvals based on policy.4.) Runbook calls Endpoint Manager to deploy Software5.) Software deployed to target. 6.) Status & inventory information provided back to Endpoint Manager.7.) Software Usage Analysis is loaded into Control Desk for license audit
Control Desk
Runbooks
1 2 34
Endpoint Manager
7
56
Asset & CMDB Lifecycle Management
App Store
Software Use Analysis
© 2013 IBM Corporation23
IBM Endpoint Manager
Embracing the App Store model in your Software Asset Management strategy
• Pain point: - Disconnected, time-consuming, error-prone processes to request, deploy and manage
software assets.
• Solution Description/Use case: - Provides a self-service user interface to Endpoint Manager clients that enables end users to
request software validated against their user type and SW license availability. Provides approval workflows necessary to manage client requests for software.
• Solution value:- Improved operations efficiency by automating request/fulfillment of software, including
software inventory and license compliance.- Reduces errors in SW compliance tracking, as SW licenses are directly linked to the
deployment of SW to endpoints.- Provides approval workflows needed to validate client requests for software.
© 2013 IBM Corporation24
IBM Endpoint Manager
Reporting by software asset hierarchy
© 2013 IBM Corporation25
IBM Endpoint Manager
Reporting by computer
© 2013 IBM Corporation26
IBM Endpoint Manager
Custom reporting
© 2013 IBM Corporation27
IBM Endpoint Manager
Contract management
© 2013 IBM Corporation28
IBM Endpoint Manager
Software Catalog management