Disable Chassis Intrusion detection

After deploying Dell OMCI to about 600 desktops and portables, an alert began displaying upon user logon:

Dell OMCI Chassis Intrusion Alkert

Needless to say, users were somewhat confused by this.

To get rid of the message, we either had to:

  1. Run around to every Dell PC in the organization
  2. Uninstall Dell OMCI
  3. Remotely disable chassis intrusion detection and clear any current detections

Obviously we chose option three. With Dell’s OpenManage IT Assistant software, I was able to build a remote CIM command line to execute on a set of systems (in our case any system that was reporting a status of degraded). Here’s the command we ran:

system cim action=setcim ipaddress=$IP username=$USERNAME password=$PASSWORD authenticationlevel=packet classpropertyvalue=Dell_SMBIOSsettings::ChassisIntrusion:4

To execute the command, I setup a new command line task in ITA, targeted at a query of computers whose status was not “OK.” I set this to run once an hour, since clients were still being discovered and inventoried as this was happening. By setting the query to only hit degraded clents, we avoided running this needlessly on clients already configured properly.

About joelgibby
Joel Gibby lives near Portland Oregon and writes about a wide range of technology topics including social media, educational technology, web development, security and networking.

  • Nick Young

    Hello,

    I am experiencing the same issue. However, I create a command line task and it doesn’t seem to work. Which version of ITA are you using?

    Thanks,
    Nick Young

  • http://joelgibby.net joel

    We were on 7.0 at the time of the writing, but now we are on 8.0.1 which provides some nice improvements, like ASF control, IPMI discovery and performance monitoring. This is some information from the Openmanage Documentation:

    NOTE: IT Assistant requires the CIM user name and password with administrator rights that you established on the managed systems. If you are using a domain user, be sure to specify the correct domain in the user name field. A user name must always be qualified with a domain, or localhost if a domain is not present. The format is either \ or \.

    NOTE: CIM discovery requires proper user ID and password credentials. Failure to supply proper credentials on a subnet configured for CIM discovery can result in account lockout.

    I know that is pretty basic information, but it’s a first step – if you are in a domain environment, make sure the CIM command includes

    DOMAIN\Username

    If you are using local accounts for management, use:

    localhost\Username

    And not just the username by itself. Hope this helps!

  • http://twitter.com/scientificworld user 786

    Learn how to turn off Chassis Intrusion Detection error in Windows, easily, here:

    http://www.brighthub.com/computing/windows-platform/articles/77478.aspx

blog comments powered by Disqus