Configuring the Centrify cloud connector

Transcription

1 Appendix 1 Configuring the Centrify cloud connector This section explains how to use the Centrify Cloud Connector Configuration Program to configure and monitor your cloud connector. It covers the following topics: About the Centrify cloud connector and the configuration program Using the Status tab Using the Cloud Connector tab You launch the Centrify Cloud Connector Configuration Program from the Start menu on the host computer. You modify settings by selecting different tabs in the window. You can see the tabs in the following figure. 1

2 About the Centrify cloud connector and the configuration program About the Centrify cloud connector and the configuration program The Centrify cloud connector runs on a host computer and manages communications between Active Directory/LDAP and the Centrify identity platform. It specifies groups whose members can enroll devices and a group whose members can manage devices. It also monitors Active Directory for group policy changes, which it sends to the Centrify identity platform to update enrolled devices. Initial configuration of the cloud connector follows installation with the cloud connector configuration wizard, which launches automatically. To complete the wizard, you must identify a user group whose members can enroll devices and a container that stores accounts for enrolled devices. You must also identify a group whose users have permission to manage enrolled devices and manage the configuration. The cloud connector configuration application allows you to complete the initial configuration and to make changes when necessary. You can also run this application to monitor the status of your cloud connector. Note You can also monitor cloud connectors by using Cloud Manager. However, Cloud Manager only allows you to monitor cloud connectors it does not allow you to configure a cloud connector in any way. The identity platform uses all of the available cloud connectors configured for a service. Each server has its own cloud connector configuration program that you launch on the computer hosting the cloud connector. However, when you make a change to any of the cloud connectors in an installation (that is, servers registered to the same customer ID), the changes are propagated to all the servers in the installation to ensure that they are all in sync. The Centrify Cloud Connector Configuration Program is installed on any computer where a cloud connector is installed. You can launch it from the Windows Start menu. The application appears as a window with tabbed panels: Status: Shows server name, identity platform customer ID, and identity platform connection status. Cloud Connector: Provides cloud connector controls and option settings. Cloud Manager user s guide 2

3 Using the Status tab Using the Status tab The Status tab displays the following read-only information about the cloud connector: Server name displays the assigned name of this cloud connector. Customer ID displays the customer ID under which this cloud connector is registered. You can install multiple cloud connectors using the same customer ID for load balancing and failover. All active cloud connectors are used by the identity platform. Note Do not change this field. Cloud Connector is started stopped shows whether the cloud connector is started (running) or not. Connection to Centrify identity platform shows the date, time, and result of the last connection to the Centrify identity platform. Updating the cloud connector to the latest version. You use the Status tab to update the cloud connector to the latest version if you do not enable automatic updates (see the Cloud Connector tab). To manually update the cloud connector, right-click the update icon in the lower left of the Status tab and select Update. Appendix 1 Configuring the Centrify cloud connector 3

4 Using the Cloud Connector tab Using the Cloud Connector tab The Cloud Connector tab reports the customer ID under which the cloud connector is registered and whether or not the server is started. It also offers the following controls: The Re-register button starts the Centrify cloud connector configuration wizard and allows you to re-register this cloud connector. Generally, you re-register the cloud connector under the same customer ID, and then only if the cloud connector is having difficulty communicating with the Centrify identity platform and customer support recommends that you re-register to address the issue. Note Re-registering under a different ID can destabilize your environment and should be done only after consulting with customer support. Changing the ID moves the cloud connector from one installation to another. If the cloud connector is the only server in an installation, removing the server from the installation will cause any device enrollment to the installation to fail, and enrolled devices will no longer receive policy changes. Click Start to start the cloud connector if it s stopped. Click Stop to stop the cloud connector if it s running. Select Allow support to access local cloud connector logs to give the identity platform provider the ability to open the cloud connector log files. These files can help resolve a problem and are the only files the service provider can open. The default is selected. Click View Log to view the cloud connector log. Use the Settings update interval text box to set the number of minutes this cloud connector takes between checks on cloud connector settings with the Centrify identity platform. When any cloud connector in an installation changes its settings, it sends those settings to the identity platform. When a cloud connector checks settings with the identity platform, if there were new settings reported from any of the other cloud connectors in the installation, the checking cloud connector downloads and accepts those settings. This ensures that all cloud connectors in an installation have the same settings. Use the Active Directory user verification interval text box to set the number of minutes this cloud connector takes between checks for active AD user accounts. When the cloud connector checks Active Directory user accounts, it contacts Active Directory/to see if the user account listed for each enrolled device is active. If a device s associated user account is not active (is disabled or removed), the identity platform unenrolls the device. Select the Enable auto-update check box to turn on automatic update for the cloud connector. When auto-update is on, the cloud connector checks the Centrify identity platform periodically to see if there is a cloud connector update. If there is, the cloud connector downloads and installs the update, then restarts. This ensures that cloud Cloud Manager user s guide 4

5 Using the Cloud Connector tab connector software is up-to-date. We recommend that you enable this option. See "Configuring the cloud connector to install updates automatically" on page 1-5 for the details. Select Use a web proxy server for Centrify identity platform connection check box if your network is configured with a web proxy server that you want to use to connect to the Centrify identity platform. Note that the web proxy must support HTTP 1.1 for a successful connection to the Centrify identity platform. After you select this option, enter the following information to enable the web proxy connection: Address is the URL of the web proxy server. Port is the port number to use to connect to the web proxy server. Click Credential to enter the user name and password for an account that can log in to the web proxy server. Configuring the cloud connector to install updates automatically You can configure the cloud connector to automatically install updates when new versions are released. When you select this option, the cloud connector regularly polls the Centrify identity platform and automatically installs a newer version. If you do not select this option, you use the Centrify Cloud Connector Configuration Program to check for and install updates manually. To configure cloud connector for automatic updates: 1 Click the Windows Start menu and open the Centrify Cloud Connector Configuration Program. 2 Click Yes to allows this program to make changes to the computer. 3 Click the Cloud Connector tab. 4 Select Enable auto-update. 5 Click the Schedule button to select the times during which the cloud connector can check for an update. To set the times when the cloud connector can check for an update (cell is blue), click Auto-update Allowed or Auto-update Denied to start with a full or blank slate; click, drag and release to select an area of cells, and then click Auto-update Allowed or Autoupdate Denied to set the periods. 6 Click Close. To check for and install cloud connector updates manually: 1 Click the Windows Start menu and open the Centrify Cloud Connector Configuration Program. Appendix 1 Configuring the Centrify cloud connector 5

6 Using the Cloud Connector tab 2 Click Yes to allows this program to make changes to the computer. 3 In the lower left of the Status tab, right-click the update icon and select Update. The cloud connector updates and then displays a message indicating that the software is up to date. Cloud Manager user s guide 6