BLANCCO MANAGEMENT CONSOLE User Manual for version 3.0 www.blancco.com
DEFINITIONS ITEM FTP HASP HTML JRE Legacy clients MC PXE SMTP TFTP WDS EXPLANATION File Transfer Protocol is a standard network protocol used to copy a file from one host to another over a TCP/IP-based network. The HASP product line is a digital rights management (DRM) suite of protection and licensing software. Management Console uses a USB HASP-key for digital rights management. It is referred in this manual as License container. HTML, which stands for Hyper Text Markup Language, is the predominant markup language for web pages. It provides a means to create structured documents by denoting structural semantics for text such as headings, paragraphs, lists as well as for links, quotes, and other items. Java Runtime Environment (JRE) is an application that has all the modules to execute applications that use Java. Legacy clients are Blancco older line of products. Most known products are Blancco PC Edition, Blancco Server Edition and Blancco Data Centre Edition. Abbreviation of Management Console. Preboot execution Environment is an environment for booting computers using a network interface Simple Mail Transfer Protocol is an Internet standard for electronic mail (email) transmission across Internet Protocol (IP) networks. Trivial File Transfer Protocol (TFTP) is a file transfer protocol known for its simplicity. Compared to FTP, TFTP is extremely limited, providing no authentication, and is rarely used interactively by a user. Windows Deployment Services is a technology from Microsoft for network-based installation of Windows operating systems. It is also used in order to deploy Blancco erasure software over the network. 2/52
TABLE OF CONTENTS Blancco Management Console Requirements... 6 Minimum hardware requirements... 6 Recommended hardware requirements... 6 Software/Service requirements... 7 Installation and Configuration... 8 Login Screen... 18 Main View... 19 Home-tab... 20 Blancco information... 20 Blancco news... 21 Import reports... 21 All time erasure statistics... 22 Average Hdds... 22 Available licenses... 23 Blancco news... 23 Process management-tab... 24 Controlling Blancco 5 remotely... 25 Erasure controls... 25 Report fetching... 26 Managing Legacy client erasures... 26 Reporting-tab... 27 Left panel buttons... 27 Report type filters... 27 Statistics... 28 Report views... 29 View name... 29 View columns... 29 View filters... 30 Quick search... 30 Other options... 31 3/52
Create new report... 31 Import... 31 Export... 33 Email... 33 Print... 34 Delete... 34 User & licensing-tab... 35 Users... 35 Create new user/group... 35 License Distribution... 36 Edit existing user/group... 37 Remove existing user/group... 37 Roles... 37 Default roles... 37 Create new role... 38 Edit existing role... 38 Licenses... 39 License activation... 39 Administration-tab... 40 Application information... 40 Database settings... 40 TFTP Service Configuration... 41 Email Settings... 42 Erasure Client Settings... 42 Integration... 43 Configuring Tomcat... 44 Changing the SSL Certificate in Tomcat... 44 Installing The Certificates to the Keystore... 44 Configuring your SSL Connector... 44 Configuring JAVA options... 45 Add JRE path to the system environment variables... 45 Changing JRE memory allocation... 46 Restart BMC service... 47 4/52
Restart using application shortcuts... 47 Stop BMC service... 47 Start BMC service... 47 Restart using the Services menu... 48 Uninstallation... 49 Back up important data... 49 Run the uninstall script... 49 Clean up the installation folder... 50 Troubleshooting... 51 Contact Information... 52 5/52
BLANCCO MANAGEMENT CONSOLE REQUIREMENTS Minimum hardware requirements Smaller operations, demo and test purposes o System: laptop, desktop or server Dual Core processor 2-4GB of RAM o Database: embedded database Maximum 5000 reports ever (embedded database has a record limitation of 5,000 and over this limit, the environment stability cannot be assured) If the limit is reached or going to be reached, then the database needs to be changed to a more professional supported database software ( Microsoft SQL Server, MySQL, PostgreSQL, Oracle) o PXE booting: embedded PXE boot Larger operations o System: server Quad Core processor 8GB of RAM o Database: Microsoft SQL Server Express Edition (or better) MySQL PostgreSQL Oracle o PXE booting: Microsoft WDS Linux PXE booting Recommended hardware requirements Smaller operations, demo and test purposes o System: laptop, desktop or server Dual Core processor 4GB+ of RAM o Database: Microsoft SQL Server Express Edition MySQL PostgreSQL o PXE booting: Microsoft WDS or Linux PXE booting Larger operations o System: it is recommended to have separate servers for running the MC and the database. Two high performance servers should be used. 2x Quad Core processor (with Hyper-Threading) 12GB+ of RAM o Database: Microsoft SQL Server Standard Edition (or better) Oracle o PXE booting: Microsoft WDS or Linux PXE booting 6/52
Software/Service requirements It is important to understand that these services may already exist in your network and can be used by this software. Please check that there are no conflicts between the settings recommended by Blancco. Administrator rights to the system. Latest operating system updates are installed. Make sure that the HASP-key IS NOT inserted when installing the HASP-key drivers. Download and install the latest version of Java Runtime Environment (JRE) platform in the machine where the Blancco Management Console 3.0 will be running. o version 6 or newer is required. DHCP/DNS (Dynamic Host Configuration Protocol/Domain Name System-Server) service should be available with active scope for leasing IP s to the network where erasures are performed. o DHCP is required, but DNS is optional. Supported web browser: o Mozilla Firefox (recommended) o Internet Explorer o Chrome Make sure that firewalls allow inbound network traffic to the port you define during the installation (as a default, Management Console will set ports 8443 (https) and 8080 (http)). o External services like DHCP and PXE boot services may require additional firewall configuring. An empty database, with a user who has owner rights or similar (read-, write-, delete- and create rights) to the tables. Tables are automatically created by the MC. o This requirement doesn t concern the embedded database as it is created and used by the MC. 7/52
INSTALLATION AND CONFIGURATION 1. Download and install the latest Java Runtime Environment. You can download it from http://www.java.com/en/download/ 2. Restart the machine after Java has been installed. 3. Double click the [installation file name].jar installation package provided by Blancco to start the installation wizard. Make sure you run the installation package with administrator rights. Installation can also be executed via the command line by using the following command: java jar <install package name>.jar 4. Read the License Agreement (visit http://www.blancco.com/eula) and if you approve of it, select I accept the terms of this license agreement. and press Next. 8/52
5. Define the Management Console installation path. Press Next to continue. 6. Confirm the creation of a new directory. Press OK to continue. 9/52
7. Select the components to be installed. Blancco recommends installing all the components. Press Next to continue. 8. In phase 3/3 you are informed to install HASP SRM Runtime (separate installation process) for the USB attachable HASP-key. These are the drivers for the USB HASP-key. Make sure that the USB key IS NOT attached to the machine yet. Press Next to continue with the HASP driver installation. 10/52
Choose I accept the license agreement and click Next to continue with the installation. 9. Click Next to continue with the installation and wait until the installation is finished. Installing drivers will stop the progress bar for a while. Wait until the process ends. 11/52
10. HASP SRM Run-time has been installed successfully. Press Finish to continue with the installation of MC 3.0. 11. Installation of the files and drivers for MC 3.0 is complete. Press Next to continue to the shortcut setup page. 12/52
12. Select the shortcuts to be created. Press Next to start the configuration process. 13. Fill in the HTTP (default value is 8080) and HTTPS ports (default value is 8443). Both of them are required. Press Next to continue. If there is a need to change these ports afterwards, shutdown the Management Console-service and modify the server.xml file in [installation folder] > apache-tomcat -> conf. 13/52
14. Select the database and the type of authentication used. Press Next to continue. Note! An empty database must be created before proceeding to this stage. Please read the user manual for the selected database for any information regarding database creation. Only in embedded database, the database creation is automatically handled by BMC. Supported databases are: - PostgreSQL 8.x (or newer) - Oracle 10g (or newer) - MySQL 5.x (or newer) - Microsoft SQL Server 2008 (or newer) - Embedded database Supported authentication types are: - Internal authentication (managed from the database) 14/52
15. Fill in the database information and press Next. Every field is mandatory. If the Embedded database was chosen, this screen is not shown, as it is automatically configured. Name Example Description Host Database name Port User Password Re-type password 192.168.0.2 ExampleDatabase 4321 DatabaseUser DatabasePassword DatabasePassword Host name or IP-address. Mandatory field. Name of the database. Mandatory field. Port the database software uses. Mandatory field. User name used for accessing the database. Mandatory field. Password used for accessing the database. Mandatory field. Re-type the aforementioned password. Mandatory field. 15/52
16. Fill in the authentication information and press Next to continue. Name Example Description Administrator account username First name admin John User name for the administrator account. Must be 5-64 characters long. Mandatory field. First name of the administrator. Last name Doe Last name of the administrator. Email address Password Re-type password Company name Description exampleemailaddress [@] example.com VeryStrongPassword VeryStrongPassword Example Company This is an example description of the example company. Email address of the administrator. Password for the administrator account. Must be 6-64 characters long. Mandatory field. Re-type the password for the administrator account. Mandatory field. Name of the company. Mandatory field. Description for the aforementioned company. Default language English Default language for the created administrator account. 16/52
17. Installation is now complete. At this stage, please connect the HASP-key. Please wait for the OS to detect and initialize the HASP-key before clicking Done. Click Done to close the wizard. The Blancco Management Console service will start automatically (and the default browser will be opened) if the Start Blancco Management Console service option is selected. 17/52
LOGIN SCREEN All of the Management Console services are operated through a web browser. When using Blancco Management Console for the first time, please select the address of the machine where the product is installed. When installed, the address of Blancco Management Console is usually http://[servername:portnumber] or http://[ipaddress:portnumber] (e.g. http://localhost:8080). When the address of the Management Console is opened, the login screen is shown. Insert your username and password to continue to the main view of the Management Console. If the internal authentication is used, use the credentials created during phase 17. It is recommended that the USB HASP dongle is always plugged in to the machine while operating the Management Console, as there are multiple operations which require it. 18/52
MAIN VIEW After you have logged in to the Management Console the following screen is shown: As a default, the Home-screen is shown first. The screen is divided into three areas by their function. The top area is known as the header area. It contains the version number of the Management Console (shown below the Blancco logo). Next to that is the tab bar which contains Home, Process Management, Reporting, User & Licensing and Administration tabs. The top left corner has the information about the account used to login and the Logout-button, used to log out of the system. The work area is located below the header area and it contains the functionality of the selected tab. Some tabs also contain a process area on the left which is used for controlling the processes of that tab. The process area has a small arrow on its right corner which can be used to hide and show the process area bar. 19/52
HOME-TAB The home tab contains different kinds of widgets. The default widgets are: Blancco information This widget contains the necessary information in order to contact Blancco, whether it is to get some information regarding other products or getting support for Blancco Management Console. 20/52
Blancco news Blancco related news are shown here. These are received from the Blancco s RSS-feed (requires internet connection). Import reports This widget is used for importing reports to the Management Console. For more detailed instructions on how to import reports, please see the Reporting-tab/Other options/import section. 21/52
All time erasure statistics This widget has the statistics of all the successfully completed erasures. It lists: started erasures total number of started erasures, erasures completed (target) number of successfully completed erasures without exceptions (total number of started erasures), erasures failed number of failed erasures and erasures completed with exceptions number of erasures completed with some kind of exception. Average Hdds Average values of Hdd s are shown here. 22/52
Available licenses All the available licenses for the current user are listed here. It shows the name of the product under Product, number of remaining licenses under Remaining and validity end date under Validity. Blancco news Blancco related news are shown here. These are received from the Blancco s RSS-feed (requires internet connection). 23/52
PROCESS MANAGEMENT-TAB The Live management page is used to manage and view erasure processes remotely. There are two buttons on the top of the tab: Clear successful - Removes all the successfully completed erasures from the list. Clear all Removes all the current processes, whether they have finished or not. The list of the processes is under this and it has the following fields: Name Client Session created Status Manufacturer Serial Size Type Description Client identifier. IP-address and custom identifier are shown if they are available. Time and date when the session was created. Current status of the process. When erasure is ongoing, a progress bar is displayed here. Manufacturer of the hard disk drive. Serial number of the machine. Size of the hard disk drive being erased. Type of hard disk drive (IDE, SCSI, SATA ). 24/52
Controlling Blancco 5 remotely Blancco 5 can be controlled remotely from BMC. Blancco 5 must be configured with the following option in order to enable the remote control: General \ Erasure Control = Management Console remote Note! Check out the Blancco 5 Configuration Tool User Manual to know more about how to configure Blancco 5 software images. Erasure controls There are four types of commands that can be sent remotely to the machine to erase. In order to start an erasure remotely, select the machine to erase and click on the Control erasures button and select Start erasure. Start erasure There are few options to select before starting the erasure. Available options to select are: Erasure method: the full list of available erasure methods can be found from the Erasure standards section of the Blancco 5 User Manual. Erase remapped sectors: enabled or disabled Verification level: quick or full 25/52
Click Send command button when all options are selected. The start erasure command will be sent to the machine, and the erasure will start. Pause erasure In order to pause an ongoing erasure, select the ongoing erasure, click on Control erasures and then select Pause erasure. Confirm by clicking Send command. The erasure will be paused. Cancel erasure In order to cancel an ongoing erasure, select the ongoing erasure, click on Control erasures and then select Cancel erasure. Confirm by clicking Send command. The erasure will be paused. Resume erasure In order to resume a paused erasure, select the ongoing erasure, click on Control erasures and then select Resume erasure. Confirm by clicking Send command. The erasure will be resumed. Report fetching After the erasure has finished, an erasure report can be fetched from the erased machine. Select the finished erasure, and click on Fetch reports. The erasure report is fetched from the erased machine and can be browsed from the Reporting screen. Managing Legacy client erasures Legacy clients erasures can be managed from this screen. Erasure status should be activated in the legacy client software image. Only minimal information on the ongoing erasure (session creation date, erasure identifier) and a progress bar are available. Depending on the settings in the legacy client software image, the erasure report might need to be sent to the BMC manually (remotely fetching the erasure report from BMC is not possible). 26/52
REPORTING-TAB This tab shows all the Blancco reports from the database (distributed over several pages if there are many reports). Left panel buttons On the left panel, there are buttons for showing all reports at once or just for a specific product/report type (Erasure client reports, Mobile reports LUN reports). The Statistics button shows the statistics page. Report type filters All reports-, Erasure Client reports and LUN reports views have the following default fields shown: Name Erasure state Disk serial Disk capacity Memory capacity Date Product name Description The state of the erasure. This can be Successful, Completed with exceptions or Failed. Serial number of the disk. Capacity of the disk. Size of the memory (RAM) Date and time of the erasure. Product name of the erasure software. Mobile reports-view has the following default fields shown: Name Date Erasure state Disk capacity System Manufacturer System model System serial Mobile wireless operator Operating system version Description Date and time of the erasure. The state of the erasure. This can be Successful, Completed with exceptions or Failed. Capacity of the disk. Manufacturer of the system. Model of the system. Serial number of the system. Name of the wireless mobile operator of the system. Version of the operating system. 27/52
Statistics This view shows different statistics of the data collected from the reports. Name Top processor models Top system manufacturers Reports statistics Erasure statistics License consumption statistics System Manufacturers chart Report statistics chart Description Displays the top lists of processors and the amount of reports. Displays the top lists of processors and the amount of reports. Displays the amount of reports received in the MC, imported, exported, delete to/from the MC for each user. Displays the amount of successful, failed erasure and erasure completed with exceptions for each user. Displays the amount Displays graphically the statistics of system manufacturers. Displays graphically the erasure statistics. 28/52
Report views The dropdown-menu on the right of the All reports is used to select different report-views. Right after installing the Management Console, only default views are selectable because other views have not yet been created. Default views are allreports, erasureclientreports, mobilereports and lunreports. Manage button is used to configure the current view. Note! default views cannot be edited. New button is used to create new views. If the button is pressed the following screen is shown: View name The NAME field is the view s name. This field is mandatory and unique (2 views with the same name cannot be created). View columns COLUMNS is used to select which fields are shown on the view. There are two selection boxes here. The left one lists all possible fields that can be added. The right one (which is empty on the picture) lists all the fields which are shown on the view. Add and Remove buttons are used to add and remove the fields from the view. The four buttons on the right side of the second selection box are used to change the position of the fields. If a field is on the top, it is shown on the far left on the view. If it is on the bottom, it is shown on the far right. Top moves the selected field to the top of the list. Bottom moves the selected field to the bottom of the list. Up and Down buttons move the field one place up or down. 29/52
View filters This option is used to create filters for the current view. It has four parts: Field the affected field. Comparison operator is the comparison operator. Value the value to which the comparison is made upon. Join operator - if some other filters is used for the view. Name Field Comparison operator Value Join operator Description Lists all fields available in the erasure report Comparison operator used for the search. Valid operators are shown in the dropdown list. =, like, < and > are the complete list of operators. Text field where the value of search needs to be input. In case some other parameter needs to be added to the search, it can be added by pressing Add. The join operator, either AND or OR define the search type. The bottom of the window has the buttons Save, which saves the current view, Delete, which deletes the current view and Cancel which cancels all the changes made. Quick search The quick search allows quick filtering of reports within the active view. Quick search only search values on the active columns (excluding any of the following fields: Report date, Erasure state, Report state, Product name). 30/52
Other options There are six extra reporting related options available. Create new report This feature is used to create customized reports. It is intended for assets that could not be erased using a standard Blancco erasure solution, or are not assets that can be erased. When the Create new report button is pressed, the following window will be shown: Select the appropriate template from the dropdown-menu and fill in the information. Available templates are: Monitor, HDD, Laptop, PC and Mobile_device. Press the Create report button when ready or Cancel if you want to exit without saving the changes. Import It is possible to import Blancco erasure reports to the Management Console. Press the Import button and the following screen is shown: Navigate to the xml file containing the reports to be imported to the system. If the person importing the reports has access to other user accounts, the user can define which users will take ownership of the reports. These accounts can only be in the same group as the user importing them or the users must be sub-users of the importer. 31/52
If the client software has not consumed a license(s), it will require licenses for the import procedure. This is why it is highly recommended that the USB HASP dongle is attached in to the machine, when importing reports from multiple sources. 32/52
Export It is possible to export Blancco erasure reports in several formats. Available formats are XML, PDF and CSV. When exporting report(s) in CSV format, it is possible to select record and sub record separators. Email It is possible to email Blancco erasure reports in several formats. Available formats are XML, PDF and CSV. Several options are available when emailing a report, such as the email recipient, email subject and attachments name. When emailing report(s) in CSV format, it is also possible to select record and sub record separators. 33/52
Print It is possible to print Blancco erasure reports. Select the report(s) to print and press the Print button. Select Print button from the popup shown below, and the browser printing options will be displayed. Delete To delete report(s), select the report(s) and click the Delete button. A confirmation popup (shown below) is displayed. By clicking Ok, the selected report(s) will be deleted from the Management Console. Note! It is not possible to recover deleted reports. 34/52
USER & LICENSING-TAB This tab is used to manage users, user roles and licenses. Buttons on the left side are used to list users, roles and licenses. Users This view is used for managing users and groups. The list shows the following information on each user and group: Group name of the group, User login name and the name of the user, Role(s) - what role(s) user has, Email - email address of the user and Available licenses -shows the number of licenses available to that user. On the top left corner of the list is a dropdown menu which can be used to select if the listing is done by group or name. Create new user/group New users and groups can be created by pressing New User or New group buttons. This brings up the following window: 35/52
New user and New Group windows contain the following fields: Name Example Description Group attributes: Group name Example com Name of the group. Group Description of the group. Example company description Group reports On or off If this is on, all the reports are shown from everyone who belongs to this group. If it is off, then the reports are only shown by individuals. Group administrator account: Email user@example.com Email-address of the group s administrator. Licenses License type. See License Distribution section for more Limited or Unlimited details. User ID admin User ID of the group s administrator. First name John First name of the of the group s administrator. Last name Doe Last name of the group s administrator. Password StrongPassword Password for the group administrators account. Re-type Password for the group administrators account. StrongPassword password User role(s) Roles for the group can be selected under this. Group can On or off have multiple roles. Account Shows if the group enabled or not. On or off status License Distribution There are two types of licenses that can be used when creating a user or group. Unlimited (all available) means that the user or group has access to all the licenses available from the managing account. Limited means that licenses are assigned individually. Licenses can be configured by clicking the details options. In order to assign licenses, expand the details option, and select the desired product from the list and fill the amount of licenses to assign In the picture below, the user is only given access to 44 (out of 99) Blancco PC Edition licenses. 36/52
Edit existing user/group There is a small pen icon at the end of the list:. If it is pressed, the Edit group/user window is opened and the user/group settings can be edited. Click the Save button to save the settings and exit the window. Click Cancel to exit the window without saving any changes. See the above table for a list of all available fields. Remove existing user/group Pressing the Remove button deletes the selected user/group. Note! The default user (user created when setting up the Management Console) cannot be removed. Roles This view is used for managing roles. The list has the following fields: Role name name of the role, Description description of the role, Authorities number of rights the role has been authorized to use Default roles There are 3 default roles, Role_admin, Role_groupadmin and Role_user. Name Role_admin Role_groupadmin Role_user Description Used for the top user (created during installation). This user has full control of the Management Console. Should be used when creating groups. Should be used when creating users. Users will have limited access to the Management Console (e.g. won t be able to create sub-users, and won t have access to license activation ) 37/52
Create new role The New Role button opens the following window: The Role name field is mandatory. Under that is the Role description which can filled with the description of the role. The rights (also called authorities) are listed below the description. They are organized in categories listed in the table below. Available authorities are following: Category Group License Process Report Statistics System User Available authorities Create, Delete and Edit Activate, Consume, Export and View Management Create, Delete, Email, ExportCSV, ExportPDF, ExportXML, Import, Print and View Statistics Configuration and Login Create, Delete, Edit, Role_Create, Role_Delete and Role_Edit Click Create to create the new role or Cancel to cancel all the changes and exit from this window without saving. Edit existing role It is possible to edit existing roles by selecting the role and clicking on the small pen icon. Click the Save button to save the settings and exit the window. Click Cancel to exit the window without saving any changes. 38/52
Licenses This is view is used for license management. The dropdown menu on the top left corner of the list is used to select if the user s licenses are shown (My licenses) or the licenses in the container are shown (Container). The listing has the following fields: Product name - name of the product the license is for, Licenses remaining - number of remaining licenses and Expiration date the last day the licenses can be used. License activation To activate new licenses, click the License activation button and the following window is opened: Click Browse and navigate to the license file and select it. The license file is delivered by Blancco s service team or sales person. It is in.hsp or.txt format. Now press Submit and the licenses are loaded into the Management Console. 39/52
ADMINISTRATION-TAB This page is used for system configuration settings. On the upper right corner are the Expand all and Collapse all which are used to expand or collapse all of the menus on this page. The Save button at the bottom must be pressed for the changes to apply. Application information Application and Java properties are displayed here: Name Application name Application version Application revision Java vendor Java version Description Name of the application (Blancco Management Console is the default value). Version of the software used. Revision of the application. Vendor of the Java used in the machine running the MC. Version of the Java used in the machine running the MC. Database settings Database related information is displayed here: Name Database Database host Database port Database name User name Description Which database is used (Embedded, MySQL ). Which server the database is located on. The port which MC uses to communicate with the database. Name of the database. User name for the database. 40/52
TFTP Service Configuration By choosing the enable TFTP Service, the internal TFTP server is turned on. This enables, among other things, remote management of Management Console s and erasure client s reports. This also enables the PXE booting possibility after the system has been set up correctly. Examples for setup in the [installation path]/tftp folder Name Description Enable tftp service Is the TFTP service turned on or off. Port Port the TFTP service uses. Read folder Where the TFTP service reads data. Write folder Where the TFTP service writes data. Mode Which mode the TFTP service is on. Options are GET_ONLY read only, GET_AND_PUT read and write mode and PUT_ONLY write only. Timeout Timeout time in milliseconds. Max timeout How many times retry is made if a timeout happens. Using PXE-boot To use the PXE-boot: 1. Make sure that no tftp- or pxe-booting related services have not been previously installed on the server, as these can interfere with the Management Console components. 2. Make sure that firewall is not blocking the TCP ports 8080, 8443 and UDP 69 (default TFTP- port). 3. Turn the tftp service on by clicking Enable tftp service and save the settings. 4. Stop and start the Management Console. 5. Configure the DHCP service. a. 066 Boot Server Host Name must point to the Management Console. b. 067Bootfile Name is \gpxelinux.0 6. Place the Blancco images to the following location: [Management Console installation folder]/apache-tomcat/webapps/root/networkboot 7. Go to Management Console s installation folder and from there, go to tftp/pxelinux.cgf and edit the file named default. The file must be edited to match the IP-address and port used by the Management Console and the image file(s) used in the PXE-boot. a. The text after LABEL is shown on the boot menu. This can be edited, but it is not required. b. Add the Management Console address to the initrd-value and change the erasure_client.iso / server_edition.iso to match the name of the Blancco image-files delivered to you. 41/52
Email Settings Email settings for Blancco Management Console to use. Name Mail server host Username Password Email server port Send mail protocol Sender field Subject field Test email address Test connection Description Mail server address. Username for the mail server. Password for the mail server. Port used for the email. Protocol used for email. What is written on the sender field. What is written on the subject field. Test email address for testing the email sending. Press this button to test the email sending. Erasure Client Settings Erasure client related settings. Name Session expiration Description Session timeout for erasure clients. Default value is 1440 minutes. 42/52
INTEGRATION Blancco Management Console supports data integration with external systems by providing web services. The web services provide a few different interfaces where the required data can be queried by using different parameters. Blancco Management Console offers several integration opportunities. The web services will remain the same after a version update. An already functional integration to the Blancco Management Console (version 3.0.0 and later) will work on the next version of the Management Console. Integration to 3 rd party application using direct database queries should be avoided. During a version update of MC, there might be changes applied to the database structure while the web services functionalities will remain the same. Example integration: https Blancco Management Console Web services request for webservice (xml) response from webservice (xml/csv/?) Integration script / application Database 3rd party software The example above describes the general flow of the integration process. The integration script (not provided by Blancco) sends a request to Management Console s web service with required parameters. Management Console processes the given parameters and returns matching results in the format specified by the parameters. The same integration script (represented above) then transforms/converts the data in a compatible format for further integration to the 3rd party software. Blancco does not provide solutions (such as integration scripts) or support (such as implementation of the integration process). The user needs to manage their own environment or seek the assistance of an expert. Examples and technical documentation can be found in Blancco Management Console s installation folder under doc/integration_package/. 43/52
CONFIGURING TOMCAT Changing the SSL Certificate in Tomcat By default, Management Console comes with a self-signed certificate installed. The following steps are needed to change the certificate to a different one: Installing The Certificates to the Keystore Obtain the certificate file from a Certificate Authority or create your own self-signed certificate. NOTE: If you are purchasing the certificate from a Certificate Authority (e.g. Thawte, VeriSign), you can follow their certificate installation guides for Tomcat. Type the following command to install the certificate file to your keystore: keytool -import -trustcacerts -file your_certificate_file -keystore your_keystore_file.jks You should receive a confirmation stating that the "Certificate reply was installed in keystore" If you are asked about trusting the certificate, choose y or yes. Your keystore file (your_keystore_file.jks) is now ready for use on your Tomcat server and you simply need to configure your server to use it. Configuring your SSL Connector Open the Tomcat server.xml file in a text editor (installation folder under apache-tomcat/conf). Find the existing SSL connector that will be secured with the new keystore. Specify the correct keystore filename and password in your connector configuration. When you are done, your connector should look something like this: <Connector executor="tomcatthreadpool" protocol="org.apache.coyote.http11.http11protocol" port="8443" SSLEnabled="true" scheme="https" secure="true" clientauth="false" sslprotocol="tls" keystorefile="conf/your_keystore_file.jks" keystorepass="your_certificate_password" acceptcount="500" connectiontimeout="30000" compression="on" enablelookups="false"/> Save your changes to the server.xml file. Restart Blancco Management Console. 44/52
CONFIGURING JAVA OPTIONS If you have problems executing the.jar installation package, do the following (Windows-systems): a. Check that the Java Runtime Environment path has been added to the (Windows) operating system's environmental variables. b. Start menu -> Right-click Computer -> Properties -> Advanced System settings -> Advanced tab -> Environment variables... -> System variables -> Scroll down and double click on Path. or Start menu-> cmd -> write path and press enter. c. If there is no mention of Java, add the location of your JRE \bin folder to the path string. For example, add the following to the end of the path string: ;C:\Program Files\Java\jre6\bin Add JRE path to the system environment variables Click on Start menu -> Right-click on Computer -> Select Properties -> Select Advanced system settings -> Select the Advanced tab -> Click on Environment variables... 45/52
Scroll down in System variables and double click on Path Add the following to the end of the path string: ;C:\Program Files\Java\jre6\bin Note! On some environment, the path might differ (e.g. ;C:\Program Files (x86)\java\jre6\bin) Changing JRE memory allocation Java memory settings can be changed by editing the wrapper.conf file located in [Installation path]\servicewrapper\yajsw\conf\ folder. Values to modify are: wrapper.java.additional.1.5 = -Xms256m wrapper.java.additional.1.6 = -Xmx1024m Note!: Xmx value needs to be 4 times bigger than Xms value (e.g. if you have -Xms1024m, then you need to have Xmx4096m) Please restart the BMC service in order to apply the changes. See the Restart BMC service for detailed instructions. 46/52
RESTART BMC SERVICE There are two methods to restart the BMC service. Restart using application shortcuts Stop BMC service Stop the BMC service by clicking the Stop Blancco Management Console shortcut. The shortcut can be found by clicking Start icon > All Programs > Blancco > Blancco Management Console > Stop Blancco Management Console. A command prompt window appears on the screen. Wait until the message The Blancco Management Console service was stopped successfully. Press any key to continue... is displayed on the screen. Press any key (e.g. Enter or Space key). The command prompt window will automatically close. Start BMC service Start the BMC service by clicking the Start Blancco Management Console shortcut. The shortcut can be found by clicking Start icon > All Programs > Blancco > Blancco Management Console > Start Blancco Management Console. A similar command prompt window than above appears on the screen. Wait until the message Service BMC started. Press any key to continue... is displayed on the screen. Press any key (e.g. Enter or Space key). The command prompt window will automatically close. 47/52
Restart using the Services menu Open the Services menu: or Start menu > Right-click Computer > Click Manage > on the left panel, expand Services and Applications > click on Services Start menu > write services.msc and press enter. Right-click on Blancco Management Console and select Restart. Wait until the popup below closes. 48/52
UNINSTALLATION If there is a need to uninstall the BMC, make sure that you have backed up all data that you want to keep (e.g. erasure reports, log files ). Back up important data In order to be sure that you do not lose any important data after uninstalling the BMC, copy the whole Blancco Management Console folder, and also the database used to a secure (external) location (e.g. shared folder, external USB memory or HDD). Backing up the database might require the use of Database software specific tools. Please read the relevant user manual to perform this action. Run the uninstall script Uninstall the BMC by clicking the Uninstall Blancco Management Console shortcut. The shortcut can be found by clicking Start icon > All Programs > Blancco > Blancco Management Console > Uninstall Blancco Management Console. A command prompt window appears on the screen. Wait until the message The Blancco Management Console service was stopped successfully. Press any key to continue... is displayed on the screen. Press any key (e.g. Enter or Space key). 49/52
The command prompt window will automatically close and the following window will be displayed. If you wish to remove the installation folder, select the Force the deletion of option. Click the Uninstall button to process with the uninstallation. Note! uninstalling BMC might take several minutes. The uninstallation has finished. Click Quit to close the Uninstaller window. Clean up the installation folder After the uninstallation has completed, there is still a need to remove the BMC installation folder. Locate the folder (usually under C:\Program Files\Blancco\ folder) and remove it. 50/52
TROUBLESHOOTING Blancco log files are in the folder [installation path]\logs\. Usually this location is: In Windows: [Installation path]\management Console\logs\ In Linux: [Installation path]/management Console/logs Blancco Management Console creates the following log files: mc_service.log - Functional activity, action specific logging. mc_repository.log - Backend activity, data storage specific logging. mc_main.log - General activity, non-specific logging. mc_libraries.log - External libraries activity, logging the actions from tools used (Spring, Hibernate etc.) mc_scheduled_tasks.log Activity related to scheduled tasks mc_communication.log Erasure control activity, communication specific logging. install.log Installation activity If the problem persists, please compress these logs to an archive package (e.g. zip file or rar file) and fill out the support form at Blancco s support portal (http://support.blancco.com/- Submit a Ticket ) with a detailed description of the problem. Add logs as an attachment. For contact information, see the next page. 51/52
CONTACT INFORMATION Visit the technical knowledgebase (FAQ) and contact Blancco Technical Support by submitting a technical support ticket at: http://support.blancco.com/ See the instructional videos for Blancco products at: http://www.blancco.com/en/videos/ For contact information and the latest information about secure data erasure solutions, visit the Blancco website at: http://www.blancco.com We are always looking for ways to improve our products. Please let us know if you have any suggestions! 52/52