Going native with mobile applications: XenMobile and beyond!
About Esther 15+ years of Technical Consulting Senior Consultant at PepperByte MSc Computer Science Design Implement Troubleshooting Small <-> Large infrastructures Government Industry Commerce Your Presenter: Esther Barthel Senior Technical Consultant @virtues_it http://nl.linkedin.com/in/ebarthel http://www.virtues.it 2
About Esther 15+ years of Technical Consulting Senior Consultant at PepperByte MSc Computer Science Design Implement Troubleshooting Small <-> Large infrastructures Government Industry Commerce Author of: Citrix XenApp 6.5 Expert Cookbook Your Presenter: Esther Barthel Senior Technical Consultant @virtues_it http://nl.linkedin.com/in/ebarthel http://www.virtues.it 3
About Sander 15+ years working in IT Last 4 years at CononScenza Worked for government and commerce companies Implementing and troubleshooting environments Passion for IT Technology Specialist Soccer referee Your Presenter: Sander Bierman Technology Specialist @Bierpuffo http://nl.linkedin.com/in/sbierman http://www.conoscenza.nl/blogs.nl 4
About Sander 15+ years working in IT Last 4 years at CononScenza Worked for government and commerce companies Implementing and troubleshooting environments Passion for IT Technology Specialist Married and father of two daughters. Soccer referee Soccer referee Your Presenter: Sander Bierman Technology Specialist @Bierpuffo http://nl.linkedin.com/in/sbierman http://www.conoscenza.nl/blogs.nl 5
Agenda XenMobile Editions, Features & Architecture XenMobile Device Manager XenMobile AppController XenMobile Enterprise Lessons Learned 6
Agenda XenMobile Editions, Features & Architecture XenMobile Device Manager XenMobile AppController XenMobile Enterprise Lessons Learned Important notes during presentation! 7
Definitions & Features 8
Definitions & Features 9
Definitions & Features 10
Definitions & Features 11
XenMobile Enterprise (Architecture) 12
XenMobile Enterprise (Architecture) 13
XenMobile Enterprise (Architecture) 14
XenMobile Enterprise (Architecture) 15
XenMobile Enterprise (Architecture) 16
XenMobile Device Manager 17
XDM: Pre-install checklist XenMobile Pre-install checklist edocs: http://tinyurl.com/xmpreinstallchecklist 18
XDM: Pre-install checklist XenMobile Pre-install checklist edocs: http://tinyurl.com/xmpreinstallchecklist All pre-install checks are required to install XenMobile Device Manager, without licenses, certificates and FQDNs the installation cannot complete. 19
XDM: Installation & Configuration XenMobile Device Manager installation edocs: http://tinyurl.com/xdminstall NetScaler configuration Citrix Blog: http://tinyurl.com/xdmssloffloading Citrix Blog: http://tinyurl.com/xdmssloffloading2 20
XDM: XenMobile Device Manager 64-bits install on Windows Windows Server 2003/2008/2008R2 SQL Server (Express/Standard/Enterprise) PostgreSQL is installed by default Apache Web services (don t install IIS) Apple Push Notification Service certificate Additional Java components Java Standard Edition 7 Deployment Kit Java Cryptography Extension (JCE) Unlimited 21
XDM: XenMobile Device Manager 64-bits install on Windows Windows Server 2003/2008/2008R2 SQL Server (Express/Standard/Enterprise) PostgreSQL installing is the installed XenMobile by default Device Manager Ensure User Access Control and TCP/IP 6 are disabled before Apache Web services (don t install IIS) Apple Push Notification Service certificate Additional Java components Java Standard Edition 7 Deployment Kit Java Cryptography Extension (JCE) Unlimited 22
XDM: Manage corporate devices Create a LDAP connection to a user directory Define users and groups Create policies Create deployment packages Enroll users and devices 23
XDM: Manage corporate devices Create a LDAP connection to a user directory Define users and groups Create policies Separate policies and deployment packages need to be created for each device (OS) type Create deployment packages Enroll users and devices 24
XDM: MDM Policies Create MDM policies per OS type 25
XDM: MDM Policies Create MDM policies per OS type 26
XDM: Automated actions Automated action settings: Trigger Condition Action Option 27
XDM: Deployment packages Use deployment packages to enforce device configurations 28
XDM: Deployment packages Use deployment packages to enforce device configurations 29
XDM: Deployment packages Use deployment packages to enforce device configurations 30
XDM: Enrolling Users and Devices Invite users to enroll their devices Configure the notification server, templates & enrollment settings Send out the enrollment notification 31
XDM: Enrolling Users and Devices Invite users to enroll their devices Configure the notification server, templates & enrollment settings Send out the enrollment notification To enroll ios devices an APNS certificate is required. 32
XDM: Helpful tips Use macros to populate user or device property data Syntax: ${type.propertyname} Check XenMobile logs Logs collection guide: http://support.citrix.com/article/ctx139421 Create custom dashboards Use Client Certificate authentication Supported for XDM 8.6 and up 33
XenMobile AppController 34
XAC: Installation & Configuration App Controller configuration: edocs: http://tinyurl.com/xacconfig NetScaler configuration: Knowledge Center: http://support.citrix.com/article/ctx139319 35
XAC: AppController Virtual appliance XenServer/vShpere/Hyper-V Initial network config in console Additional config in web console 36
XAC: Enterprise App Store Deploy sandboxed Mobile Apps (Android & ios), Web & SaaS and Windows (published apps) 37
XAC: Enterprise App Store Deploy sandboxed Mobile Apps (Android & ios), Web & SaaS and Windows (published apps) 38
XAC: Enterprise App Store Deploy sandboxed Mobile Apps (Android & ios), Web & SaaS and Windows (published apps) 39
XAC: Enterprise App Store Deploy sandboxed Mobile Apps (Android & ios), Web & SaaS and Windows (published apps) 40
XAC: Enterprise App Store Deploy sandboxed Mobile Apps (Android & ios), Web & SaaS and Windows (published apps) 41
XAC: MDX enabled apps MDX Toolkit (a.k.a. Worx App SDK) Wrap native ios (.ipa) / Android (.apk) packages 42
XAC: MDX enabled apps MDX Toolkit (a.k.a. Worx App SDK) Wrap native ios (.ipa) / Android (.apk) packages Include application policies (restrictions/pre-config) ios MDX Policies: http://tinyurl.com/mdxpolios Android MDX Policies: http://tinyurl.com/mdxpolandroid 43
XAC: MDX enabled apps MDX Toolkit (a.k.a. Worx App SDK) Wrap native ios (.ipa) / Android (.apk) packages Include application policies (restrictions/pre-config) The MDX Toolkit only runs on Mac OSX ios MDX Policies: http://tinyurl.com/mdxpolios Android MDX Policies: http://tinyurl.com/mdxpolandroid 44
XAC: microvpn tunnel microvpn tunnel to internal resources 45
XAC: microvpn tunnel microvpn tunnel to internal resources 46
XAC: Application Containers MDX App Vault (sandboxed on device) MDX App Interaction 47
XAC: Application Containers MDX App Vault (sandboxed on device) MDX App Interaction 48
XAC: Application Containers MDX App Vault (sandboxed on device) MDX App Interaction 49
XAC: WorxWeb MDX Enabled Pre configured Intranet Browser 50
XAC: WorxWeb MDX Enabled Pre configured Intranet Browser WorxWeb is not MDX enabled by default. You ll need to wrap it yourself with the MDX Toolkit. 51
XAC: WorxMail MDX Enabled Pre configured Mail client 52
XAC: WorxMail MDX Enabled Pre configured Mail client Save mobile device battery life and check out the new STA method with WorxMail! Citrix Blog: http://tinyurl.com/xacstatotherescue 53
XenMobile Enterprise XenMobile Enterprise Edition EMM Attachment Encryption ShareFile Enterprise 54
Enterprise: Component integration Connect Device Manager to App Controller edocs: http://tinyurl.com/xdmxacintegration 55
Enterprise: Component integration Connect Device Manager to App Controller edocs: http://tinyurl.com/xdmxacintegration Connect App Controller to ShareFile ShareFile support: http://tinyurl.com/xacsfintegration edocs: http://tinyurl.com/xacsfintegration2 56
ShareFile Enterprise: StorageZone Connectors 57
Enterprise: How to enable mobile computing? 58
Enterprise: How to enable mobile computing? Choose Your Own (CYO) Corporate Devices are owned; can be controlled => XenMobile Device Manager Bring Your Own (BYO) Devices are not owned; less control Corporate apps are owned; can be controlled Enterprise App Store: MDX wrapped = Secure corporate apps & interactions Single store for all corporate apps Seamless migrate from Windows apps => Mobile apps => XenMobile AppController 59
Lessons Learned Use a wildcard certificate for external SSL Use your own root CA/PKI for internal SSL Add root CA to NS, XDM and XAC cert store Use XDM self-signed certificates 60
Lessons Learned Use a wildcard certificate for external SSL Use your own root CA/PKI for internal SSL Add root CA to NS, XDM and XAC cert store Use XDM self-signed certificates Get all DNS FQDNs in place before install Auto discovery record => Citrix Cloud Ops Auto discover => UPN instead of SAMAccountName 61
Lessons Learned Get an Enterprise Apple Developer Account Personal account is limited to max. 100 devices MDX wrapper only runs on Mac OSX Virtual Mac doesn t work 62
Lessons Learned Get an Enterprise Apple Developer Account Personal account is limited to max. 100 devices MDX wrapper only runs on Mac OSX Virtual Mac doesn t work Always use a test device! 63
Lessons Learned Get an Enterprise Apple Developer Account Personal account is limited to max. 100 devices MDX wrapper only runs on Mac OSX Virtual Mac doesn t work Always use a test device! Check the XenMobile Logs Collection Guide http://support.citrix.com/article/ctx139421 64
XenMobile Enterprise 65
Community Help Visio stencils provided by @iainbrighton XenMobile experience shared by @Rink76 & @MartijnHS 66
Presented by: Esther Barthel Senior Technical Consultant Sander Bierman Technology Professional @virtues_it http://nl.linkedin.com/in/ebarthel http://www.virtues.it @Bierpuffo http://nl.linkedin.com/in/sbierman http://http://www.conoscenza.nl/nl/blog 67
Resources Citrix edocs XenMobile Solution Pre-Installation Checklist http://support.citrix.com/proddocs/topic/xenmobile-87/xmob-prepare-xenmobile-checklist-con.html XenMobile Logs collection guide http://support.citrix.com/article/ctx139421 Community Robin Hobo: Installing and Configuring Citrix XenMobile MDM 8.6 http://www.robinhobo.com/installing-configuring-citrix-xenmobile-mdm-8-6/ Adam Gamble: How to XenMobile MDM 8.5 Deployment http://adamgamble.org/2013/09/08/how-to-xenmobile-mdm-8-5-deployment-part-3-policies/ 68