Mobility Manager 9.5. Installation Guide

Transcription

1 Mobility Manager 9.5 Installation Guide

2 LANDESK MOBILITY MANAGER Copyright , LANDesk Software, Inc. and its affiliates. All rights reserved. LANDesk and its logos are registered trademarks or trademarks of LANDesk Software, Inc. and its affiliates in the United States and/or other countries. Other brands and names may be claimed as the property of others. LANDesk does not warrant that this document is error free and retains the right to make changes to this document or related product specifications and descriptions at any time without notice. LANDesk does not assume any obligation to update the information contained herein. This document is provided AS IS and without any guaranty, warranty, or license, express or implied, including but not limited to: fitness for a particular purpose, merchantability, non infringement of intellectual property, or other rights of any third party. Any LANDesk products referenced in this document are not intended for use in medical, life saving, or life sustaining applications. Third parties may have intellectual property rights relevant to this document and the technologies discussed herein. Last updated: 20/09/2013 2

3 INSTALLATION GUIDE Contents Contents 3 Introduction to the LANDesk Mobility Manager 9.5 installation 4 Scope 4 Assumptions 4 LANDesk Mobility Manager overview and prerequisites 5 Mobility Manager components and architecture 5 Installation prerequisites 5 LANDesk Mobility Manager discontinued features 6 Installing Mobility Manager premise services 7 Installing Mobility Manager on the core server 7 Installing and using the LANDesk Portal app on mobile devices 7 Accessing and using Mobility Manager 9 Access the Mobility tool in the console 9 Enable users to see content in the LANDesk Portal 10 3

4 LANDESK MOBILITY MANAGER Introduction to the LANDesk Mobility Manager 9.5 installation The LANDesk Mobility Manager 9.5 allows you to discover, enroll, and manage mobile devices. The setup process consists of running the installer for the Mobility components, logging in to Mobility, and configuring the Mobility server. It requires some familiarity with LANDesk Management Suite concepts and tools. This Installation Guide provides detailed instructions on how to perform each of these steps. After installation and configuration is complete, go to the LANDesk Mobility Manager Users Guide for information on how to use the tool's features. Scope The scope of this guide is to walk LANDesk Administrators through the setup of LANDesk Mobility Manager premise services on the LANDesk core server. After installing the premise services and performing the initial configuration, users who are members of the Windows "LANDesk Administrators" user group can log in to the Mobility tool from the LDMS console. Assumptions This document assumes the LANDesk Administrator has a working knowledge of LANDesk Management Suite. 4

5 INSTALLATION GUIDE LANDesk Mobility Manager overview and prerequisites See the following topics for more information on LANDesk Mobility Manager features, components, architecture, and prerequisites for installation and configuration. Mobility Manager components and architecture The diagram below shows the components that interact when you use LANDesk Mobility Manager. Mobility Manager components 1: Android devices, 2: GCM (Google Cloud Messaging for Android),3: Mobility cloud server, 4: firewall, 5: LANDesk Cloud Services Appliance (CSA), 6: LDMS 9.5 core server with LANDesk Mobility Manager 9.5, 7: APNS (Apple Push Notification Service), 8: Apple ios devices. When devices enroll, they communicate with the Mobility server in the cloud, which sends device details to the LDMS core server through your existing CSA. When you send profiles or commands to the devices, the traffic goes to the Mobility server in the cloud, which sends the information to the devices using the appropriate protocol (GCM for Android devices or APNS for ios devices). You have the option to set up Mobility Manager without a CSA. Configure port forwarding to send traffic from the Mobility cloud server to the LDMS core server. Installation prerequisites This section describes the hardware and software requirements for the premise services and the firewall settings. You must comply with the following prerequisites in order to install, configure, and use LANDesk Mobility Manager. Premise Server/LDMO prerequisites Have LDMS 9.5 core server installed Have LDMS SP1 installed 5

6 LANDESK MOBILITY MANAGER IMPORTANT: You must install the premise services on the LDMS core server Ensure the service account for your core server is a member of the LANDesk Management Suite user group Know the credentials for a service account for the LDAP server Allow traffic on port 443 between the LDMS core server and the CSA/cloud server CSA prerequisites CSA MUST be updated with the latest patches. (Check in Reports > Software packages to make sure you have openssl patch 0.9.8k-1.18 and openssh patch 5.8p ) The CSA hostname (configured in the CSA) must be an external DNS name The CSA public name in the core CSA settings should be lowercase LANDesk Mobility Manager discontinued features If you migrate from a previous version of Mobility Manager to version 9.5 SP1, there are several new Android payloads, but also some payloads that have been removed or renamed. For ios, the devices must be removed from management by the previous version before they can connect to the new version. The devices can be automatically unenrolled during Mobility Manager setup, or each device user can manually remove the existing MDM profile on his device. Payloads that have been distributed are deleted from the device when they unenroll from the previous version. Mobility Manager no longer supports the following ios payload types: Advanced CalDAV CardDAV LDAP SCEP Subscribed calendars Provisioning For Android devices, the options for the Device Options payload are included in the new Restrictions payload. 6

7 INSTALLATION GUIDE Installing Mobility Manager premise services See the following topics for more information on installing LANDesk Mobility Manager on the LDMS core server. Installing Mobility Manager on the core server If the core server is not already installed, refer to the installation section of the following document on the LANDesk User Community: Landing Page for LDMS 9.5. If you have a previous version of Mobility Manager installed, see Install Mobility Manager Install the LANDesk Mobility Manager software on your LANDesk core server and start using the tool to manage mobile devices. To install LANDesk Mobility Manager 1. On the core server, go to the LANDesk User Community, and download the LANDesk Mobility Manager software package. 2. Close any consoles connected to the core. Otherwise, you will be prompted to reboot after installation. 3. Run Setup.exe. 4. Click Continue. 5. On the License Agreement page, click Accept. 6. Click Continue. 7. Click Install. The Setup wizard shows the installation progress and status. 8. At the Success page, click Finish. The installer closes. 9. Install any necessary Mobility Manager patches that have been posted since the initial release of your Mobility Manager version. For the latest information about patches, go to the LANDesk Support User Community at: Once you have installed Mobility Manager, you can log in to the LDMS console and create a mobility account. Installing and using the LANDesk Portal app on mobile devices The LANDesk Portal app (LD Portal) allows administrators to password-protect content that is distributed to mobile devices. Once a user has installed and logged in to the app, he can do the following: Select a content category to view Download an app View a document or media View a link Check for portal content updates Update applications you've installed through the portal 7

8 LANDESK MOBILITY MANAGER LANDesk recommends that if your organization is using the Portal app, set up a software payload that is applied when devices first enroll. Alternately, users can download the app from the Apple App Store and Google Play store (search for LANDesk). Once the app is installed, users can log in using their Active Directory credentials. 8

9 INSTALLATION GUIDE Accessing and using Mobility Manager See the following topics for more information about accessing the Mobility Manager tool in the console, enrolling users, and other basic tasks. Access the Mobility tool in the console Now you can log in to the LANDesk Management Suite console and access the Mobility tool. The Mobility tool appears in the Tools menu and in the Toolbox. The first time you click Mobile device management, you are prompted to create a company account and provide credentials for an administrator user. You must also provide the addresses and credentials for the LDMS core server, the LDAP server, and the Cloud Services Appliance if you are using one. When you create a mobility company account, you must provide the following information: Company Name. The name of your company. Mobility Username. A username for the administrative account associated with the Mobility tool. The username should be an address. (Other accounts can be associated with the Mobility tool later.) Mobility Password. A password for the administrative account associated with the Mobility tool. Re-type Password. Confirmation that you typed the password as expected. LDMS Core Server Address. The address of the LDMS core server. 9

10 LANDESK MOBILITY MANAGER LDMS Service account. A user account that belongs to the LANDesk Management Suite user group. Use an account for which the password changes infrequently. LDMS Password. The password for the account. LDAP Server Address. The address of your LDAP server. LDAP Username. The username for an account that has administrative access to your LDAP server. LDAP Password. The password for an account that has administrative access to your LDAP server. Use Cloud Services Appliance. Select this option in order to use a CSA already in place in your environment. When you select to use a CSA, provide the publicly available address for the CSA in the provided text box. Automatically unenroll ios devices from expiring MDM system. This option automatically unenrolls devices if you have an earlier version of Mobility Manager installed. You MUST unenroll ios devices from a previous version before you can manage them using the current version. If you do not select this option, device users must manually remove the MDM profile from their device before they can enroll. To create a company account for Mobility Manager 1. After Mobility has been installed, open the LANDesk Management Suite console and click Mobile device management. 2. The Mobility Account Creation screen appears. Provide the addresses and credentials, and click the Test connection buttons to ensure you can communicate with the necessary components. When you have completed the form, click Register. 3. The account is created with the credentials you provided. Use those credentials to log in to the Mobility tool. Other users who belong to the LANDesk Management Suite group may also use their LDAP credentials (domain/username and password) to log in to the Mobility tool. After they have logged in for the first time and created their accounts in the Mobility tool, they no longer need to launch it from the LANDesk console they can access it directly through a browser. NOTE: Using the LANDesk Mobility Manager tool For information about specific features and how to enroll and manage mobile devices with the LANDesk Mobility Manager tool, see the Mobility Manager 9.5 Users Guide. Enable users to see content in the LANDesk Portal The LANDesk Portal app for ios or Android allows you to make content such as documents, videos, links, or apps easily accessible to device users. For example, you could distribute a shortcut to a frequently used corporate web site. To make content available through the LANDesk Portal, create payloads that contain the content, add them to a profile, and apply the profile to the user (or the location where the device shows up in the Navigation Tree). When the device is updated, the user can use his network credentials to log in to the LANDesk Portal app and view the content. Depending on the type of content, use a Document/Media payload, Link payload, or Software payload. For more information on creating payloads and profiles, see Managing Smart Mobile Device Profiles in the Avalanche help. 10