MaaS360 Cloud Extender

Transcription

1 MaaS360 Clud Extender Installatin Guide

2 Cpyright 2012 Fiberlink Cmmunicatins Crpratin. All rights reserved. Infrmatin in this dcument is subject t change withut ntice. The sftware described in this dcument is furnished under a license agreement r nndisclsure agreement. The sftware may be used r cpied nly in accrdance with the terms f thse agreements. N part f this publicatin may be reprduced, stred in a retrieval system, r transmitted in any frm r any means electrnic r mechanical, including phtcpying and recrding fr any purpse ther than the purchaser s persnal use withut the written permissin f Fiberlink Cmmunicatins Crpratin. All brands and their prducts are trademarks r registered trademarks f their respective hlders and shuld be nted as such. Fiberlink Cmmunicatins Crpratin 1787 Sentry Parkway West Blue Bell, PA February 2012 Revisin

3 Table f Cntents Intrductin... 4 General Requirements... 4 System Requirements fr the Clud Extender fr Micrsft Exchange ActiveSync Mdule (MaaS360 fr Mbile Devices)... 5 System Requirements fr the Clud Extender fr User Authenticatin and User Visibility Mdules (MaaS360 fr Mbile Devices)... 5 System Requirements fr the Clud Extender fr IBM Ltus Traveler Mdule (MaaS360 fr Mbile Devices)... 6 System Requirements fr the Clud Extender fr BlackBerry Enterprise Server Mdule (MaaS360 fr Mbile Devices)... 7 Installing and Cnfiguring the Clud Extender... 9 Visibility Service... 9 MaaS360 Clud Extender Cnfiguratin Tl Appendix A: Other Mdules Ltus Traveler Manager in the Clud Extender Cnfiguratin Tl BlackBerry Enterprise Server integratin in the Clud Extender Cnfiguratin Tl Office 365 Integratin in the Clud Extender Cnfiguratin Tl

4 Intrductin The MaaS360 Clud Extender can be dwnladed frm the custmer area in the MaaS360 prtal. The Clud Extender is an executable, and nce installed will autmatically launch the MaaS360 Clud Extender Cnfiguratin Tl. This tl can als be executed manually by an administratr after installatin by using the shrtcut All Prgrams/MaaS360/MaaS360 ActiveSync Cnfiguratin Utility. GENERAL REQUIREMENTS Befre beginning the installatin, make sure the fllwing requirements are met: Item Meets Requirement Recmmended: Windws Server 2008 R2 (64-bit) Supprted: Windws 7, Windws Server 2003 R2 2 GB Memry Dual Cre Nte: The Clud Extender can be installed directly n the Exchange Server r Active Directry Server, but this is nt recmmended. Access t the fllwing URLs frm the Clud Extender machine. (Yu shuld receive either the message r a blank page when the URL is referenced frm a brwser.) /16 4

5 SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR MICROSOFT EXCHANGE ACTIVESYNC MODULE (MAAS360 FOR MOBILE DEVICES) The MaaS360 Clud Extender is a small prgram that runs as a service n a Micrsft Windws machine in yur netwrk. The Clud Extender creates an utbund cnnectin ver HTTPS t the MaaS360 prtal that is used as a bidirectinal cmmunicatin facility and allws the MaaS360 prtal t integrate with yur Exchange Server. It perfrms the fllwing functins: Uses Micrsft PwerShell cmmands t query the Exchange Server fr vital infrmatin related t the ActiveSync enabled devices n the Exchange Server. Prcesses device and plicy infrmatin and transmits it t the MaaS360 prtal fr reprting and management functins. Receives infrmatin frm the MaaS360 prtal including: ActiveSync plicies Device visibility Device actins Plicy assignments Uses Micrsft PwerShell cmmands t execute plicy assignments and actins. The MaaS360 Clud Extender requires that it be cnfigured with an accunt with sufficient rights t run as a service and t access Exchange Servers. Item Meets Requirement Exchange Server 2007 r 2010; Office 365 Dmain User and Exchange Organizatin Administratr (2007) r Organizatin Management (2010) Access Rights Lcal Admin access is required n the machine the Clud Extender is installed n. Exchange Management tls installed n the Clud Extender machine. (The tls must match bth the year and service pack f the Exchange Server, nt required fr Office 365 r Remte PwerShell ptins). Windws PwerShell Versin 2 SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR USER AUTHENTICATION AND USER VISIBILITY MODULES (MAAS360 FOR MOBILE DEVICES) MaaS360 Active Directry integratin prvides custmers with the ability t leverage their existing crprate directry infrmatin as they manage devices. Administratrs can chse t use Active Directry t authenticate 5

6 enrllment requests and t place users int lgical grupings t streamline the applicatin f plicies, actins and rules. The MaaS360 Active Directry integratin capability is an ptinal cmpnent that can be cnfigured t prvide the fllwing: Device Authenticatin Access Grup infrmatin The MaaS360 Clud-Extender fr Active Directry integrates with yur Active Directry Server t prvide the necessary interactin. Befre beginning the installatin, make sure the fllwing requirements are met: Item Meets Requirement Dmain User Access Rights Lcal Admin access is required n the machine the Clud Extender is installed n. Windws PwerShell Versin 2 SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR IBM LOTUS TRAVELER MODULE (MAAS360 FOR MOBILE DEVICES) The MaaS360 Clud Extender is a small prgram that runs as a service n a Micrsft Windws machine in yur netwrk. The Clud Extender creates an utbund cnnectin ver HTTPS t the MaaS360 prtal that is used as a bidirectinal cmmunicatin facility and allws the MaaS360 prtal t integrate with yur Ltus Traveler Server. It perfrms the fllwing functins: Prcesses device and plicy infrmatin and transmits it t the MaaS360 prtal fr reprting and management functins. Receives infrmatin frm the MaaS360 prtal including: Device visibility Device actins The MaaS360 Clud Extender requires that it be cnfigured with an accunt with sufficient rights t run as a service and t access Traveler Servers. Befre beginning the installatin, make sure the fllwing requirements are met: Item Meets Requirement Ltus Dmin r greater Ltus Traveler r greater The Clud Extender must be installed n a machine that has the Ntes client installed. 6

7 A Dmin accunt and credentials with sufficient rights t perfrm Dmin/Traveler Admin functins. Yu shuld have at least access level f Server Remte Admin, Manager w/ delete access t Traveler.nsf..NET 3.5 r higher SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR BLACKBERRY ENTERPRISE SERVER MODULE (MAAS360 FOR MOBILE DEVICES) The MaaS360 Clud Extender is a small prgram that runs as a service n a Micrsft Windws machine in yur netwrk. The Clud Extender creates an utbund cnnectin ver HTTPS t the MaaS360 prtal that is used as a bidirectinal cmmunicatin facility and allws the MaaS360 prtal t integrate with yur BlackBerry Enterprise Server. It perfrms the fllwing functins: Prcesses device and plicy infrmatin and transmits it t the MaaS360 prtal fr reprting and management functins. Receives infrmatin frm the MaaS360 prtal including: Device visibility Device actins Plicy assignments Device Activatin Uses BlackBerry Administratin Service and APIs cmmands t execute plicy assignments and actins Perfrms Device Activatin using BES APIs The MaaS360 Clud Extender requires that it be cnfigured with a BlackBerry Administratr Accunt with sufficient rights t run as a service and t access run the Administratr APIs. Befre beginning the installatin, make sure the fllwing requirements are met: Item Meets Requirement BlackBerry Enterprise Server, fr Micrsft Exchange r Ltus Ntes, versin 5.0 and abve 7

8 Item Meets Requirement BlackBerry Administratr Accunt with the fllwing details: Supprted Authenticatin Types Exchange: Active Directry, BlackBerry Administratin Accunt (Lcal Accunt) Dmin: BlackBerry Administratin Accunt (Lcal Accunt) Administratr Accunt shuld have the fllwing access rights: Fllwing pre-defined BES Rles can be used: Security Manager The Service Accunt under with Clud Extender will perate shuld have https access t the APIs. BlackBerry Administratr APIs installed n the server that hsts the BlackBerry Administrative Cnsle (BES 5.0 SP1 and abve preinstalls these autmatically)..net 3.5 r higher. 8

9 Installing and Cnfiguring the Clud Extender Launch the MaaS360 Clud Extender installatin package. This package can be dwnladed using the Prduct Dwnlad link n the MaaS360 Prtal. Yu will als need the License Key fr installatin. Click the Send License Key wrkflw n the left t have it sent t yur address. As nted in the Intrductin f this dcument, what is being installed is a versin f the MaaS360 Visibility Service, which prvides the underlying functinality fr the Clud Extender. Once the Visibility Service is installed, the MaaS360 Clud Extender Cnfiguratin Tl will be launched and will take yu thrugh the steps required t cnfigure the Clud Extender fr yur envirnment. *The Cnfiguratin Tl can als be run later by the administratr manually using the shrtcut t All Prgrams/MaaS360/MaaS360 ActiveSync Cnfiguratin Utility. VISIBILITY SERVICE The fllwing screens are representative f what yu will see as yu step thrugh the Visibility Service installatin. 1. Duble click the MaaS360 Clud Extender executable. 9

10 2. Click Next t advance t the License Key screen. 3. Enter the License Key prvided t yu in the Welcme . 10

11 4. Click Next t advance t the Ready t Install the Prgram screen. 5. Click Install t cntinue the installatin. 11

12 6. Click Next t cntinue the installatin. 7. When prmpted, click Finish. The MaaS360 Clud Extender Cnfiguratin Tl will nw launch. MAAS360 CLOUD EXTENDER CONFIGURATION TOOL Once the Cnfiguratin Tl launches, during installatin yu will be taken thrugh the fllwing screens: 1. Yu will be prmpted t select the mde f Internet Access. MaaS360 will try t aut-ppulate the detail fund within the IE settings. a. If yu are manually cnfiguring yur prxy settings, yu als have the ability t set credentials if yu are using an authenticated prxy. b. If n prxy is required t reach the Internet, use the D nt use any prxy ptin. 12

13 c. When Internet access is cnfigured successfully a Green checkmark will appear n the Check fr Internet cnnectivity screen as seen belw. 13

14 2. Click Next t cntinue t select yur services. 3. The fllwing services are available: a. Exchange ActiveSync Manager b. Ltus Traveler Manager c. BlackBerry Enterprise Server Integratin d. User Authenticatin (LDAP r Active Directry) e. User Visibility (LDAP r Active Directry) f. Certificates Integratin (call Fiberlink fr additinal cnfiguratin ptins) 14

15 4. Select yur services. Belw is a cmmn cnfiguratin fr Exchange Active Sync, User Authenticatin and User Visibility. NOTE: If yu are using LDAP, please call Fiberlink fr additinal cnfiguratin ptins. 15

16 5. Click Next t verify the prerequisites were met. NOTE: This screen culd vary based n yur selectins. 16

17 6. Click Next t cnfigure the service accunt used t run the MaaS360 Visibility Service. 17

18 7. Click Next t validate the permissins and passwrd. NOTE: Yu will be ntified if there are any errrs and why there was an errr. Be sure the accunt has the permissins as defined in the checklists abve fr the prper services. 18

19 8. Click Next t cntinue t the Reachability Test. Running the Reachability Test is ptinal. 19

20 9. Click Test Reachability t test access t the services selected. If yu d nt want t run this test, click Next t mve past it. Here is an example f what the results may lk like. 20

21 10. Click Next t cnfigure Autmatic Updates and finish the cnfiguratin. NOTE: It is recmmended that Autmatic Update remain enabled s the latest mdules are dwnladed fr the installatin. After yu have all the prper mdules, the autmatic updates can be disabled. If the Autmatic Updates checkbx is greyed ut, that means the mdules are still being dwnladed. 11. Click Finish. 21

22 After a few minutes data will be cllected and passed t MaaS360. Yu can check this prcess by lgging int MaaS360 via prtal.fiberlink.cm and ging t the Manage -> Manage MaaS360 Clud Extenders wrkflw. The Summary drpdwn will shw statistics abut the cmmunicatin and number f devices that are available. 22

23 Appendix A: Other Mdules LOTUS TRAVELER MANAGER IN THE CLOUD EXTENDER CONFIGURATION TOOL 1. Click the + buttn t add the names f yur Traveler server(s) 2. Brwse t the Ntes.ini File Path 3. Brwse t the Ntes ID file 4. Enter the passwrd fr the Ntes ID file being used fr the MaaS360 Visibility Service 23

24 BLACKBERRY ENTERPRISE SERVER INTEGRATION IN THE CLOUD EXTENDER CONFIGURATION TOOL 1. Enter yur BAS Server Name 2. Select yur Mailbx Server and click Get Authenticatin Types 3. Enter the detail fr the Service Accunt being used by the MaaS360 Visibility Service 24

25 OFFICE 365 INTEGRATION IN THE CLOUD EXTENDER CONFIGURATION TOOL 1. Enter the Office 365 Server URL 2. Enter the detail fr the Service Accunt being used by the MaaS360 Visibility Service 25