Learn More Cloud Extender Requirements Cheat Sheet Overview This document defines all requirements to ensure a successful installation of the MaaS360 Cloud Extender to enable use of ActiveSync Manager or Lotus Notes Traveler and/or the BlackBerry Enterprise Server. Active Directory Authentication can also be configured for ios and Android enrollment. Use the checklists to be sure you have met all requirements for installation. General Requirements Checklist Recommended: Windows Server 2008 R2 (64-bit) Supported: Windows 7, Windows Server 2003 R2 2 GB Memory Dual Core Note: The Cloud Extender can be installed directly on the Exchange Server or Active Directory Server, but this is not recommended. Access to the following URLs from the Cloud Extender machine. (You should receive either the message 1234567890 or a blank page when the URL is referenced from a browser.) https://mpns.maas360.com 208.76.128.168 208.76.131.110 https://services.fiberlink.com 208.76.128.153 208.76.130.181 http://internettest.fiberlink.com 208.76.128.58 208.76.130.58 http://upload.fiberlink.com 72.21.0.0/16 What is the MaaS360 Cloud Extender for Exchange and ActiveSync? The MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the MaaS360 portal that is used as a bidirectional communication facility and allows the MaaS360 portal to integrate with your Exchange Server. It performs the following functions: 1
Uses Microsoft PowerShell commands to query the Exchange Server for vital information related to the ActiveSync enabled devices on the Exchange Server. Processes device and policy information and transmits it to the MaaS360 portal for reporting and management functions. Receives information from the MaaS360 portal including: ActiveSync policies Device visibility Device actions Policy assignments Uses Microsoft PowerShell commands to execute policy assignments and actions. The MaaS360 Cloud Extender requires that it be configured with an account with sufficient rights to run as a service and to access Exchange Servers. ActiveSync Requirements Checklist Exchange Server 2007, 2010, 2013; Office 365; BPOS-D Domain User and Exchange Organization Administrator (2007) or Organization Management (2010/2013) Access Rights Local Admin access is required on the machine the Cloud Extender is installed on. Exchange Management tools installed on the Cloud Extender machine. (The tools must match both the year and the service pack version of the Exchange Server; not required for Office 365 or Remote PowerShell options). Windows PowerShell Version 2 or higher What is the Cloud Extender for Active Directory? MaaS360 Active Directory integration provides customers with the ability to leverage their existing corporate directory information as they manage devices. Administrators can choose to use Active Directory to authenticate enrollment requests and to place users into logical groupings to streamline the application of policies, actions and rules. The MaaS360 Active Directory integration capability is an optional component that can be configured to provide the following: Device authentication Access group information 2
The MaaS360 Cloud-Extender for Active Directory integrates with your Active Directory Server to provide the necessary interaction. Active Directory Requirements Checklist Domain User Access Rights Local Admin access is required on the machine the Cloud Extender is installed on Windows PowerShell Version 2 or higher What is the Cloud Extender for LDAP? MaaS360 LDAP integration provides customers with the ability to leverage their existing corporate directory information as they manage devices. Administrators can choose to use LDAP to authenticate enrollment requests and to place users into logical groupings to streamline the application of policies, actions and rules. The MaaS360 LDAP integration capability is an optional component that can be configured to provide the following: Device authentication Access group information The MaaS360 Cloud-Extender for LDAP integrates with your LDAP Server to provide the necessary interaction. LDAP Requirements Checklist Domain User Access Rights Local Admin access is required on the machine the Cloud Extender is installed on Windows PowerShell Version 2 or higher What is the MaaS360 Cloud Extender for Lotus Traveler? The MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the MaaS360 portal that is used as a bidirectional communication facility and allows the MaaS360 portal to integrate with your Lotus Traveler Server. It performs the following functions: Processes device and policy information and transmits it to the MaaS360 portal for reporting and management functions. Receives information from the MaaS360 portal including: 3
Device visibility Device actions The MaaS360 Cloud Extender requires that it be configured with an account with sufficient rights to run as a service and to access Traveler Servers. Lotus Traveler Requirements Checklist Lotus Domino 8.5.2 or greater Lotus Traveler 8.5.2 or greater The Cloud Extender must be installed on a machine that has the Notes client installed. A Domino account and credentials with sufficient rights to perform Domino/Traveler Admin functions. You should have at least access level of Server Remote Admin, Manager with delete access to Traveler.nsf..NET 3.5 or higher What is the MaaS360 Cloud Extender for BlackBerry Enterprise Server? The MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the MaaS360 portal that is used as a bidirectional communication facility and allows the MaaS360 portal to integrate with your BlackBerry Enterprise Server. It performs the following functions: Processes device and policy information and transmits it to the MaaS360 portal for reporting and management functions. Receives information from the MaaS360 portal including: Device visibility Device actions Policy assignments Device Activation Uses BlackBerry Administration Service and APIs commands to execute policy assignments and actions Performs Device Activation using BES APIs The MaaS360 Cloud Extender requires that it be configured with a BlackBerry Administrator Account with sufficient rights to run as a service and to access run the Administrator APIs. BlackBerry Enterprise Server Requirements Checklist 4
BlackBerry Enterprise Server, for Microsoft Exchange or Lotus Notes, version 5.0 and above BlackBerry Administrator Account with the following details: Supported Authentication Types Exchange: Active Directory, BlackBerry Administration Account (Local Account) Domino: BlackBerry Administration Account (Local Account) Administrator Account should have the following access rights Following pre-defined BES Roles can be used Security Manager The Service Account under with Cloud Extender will operate should have https access to the APIs. BlackBerry Administrator APIs installed on the server that hosts the BlackBerry Administrative Console (BES 5.0 SP1 and above preinstalls these automatically)..net 3.5 or higher. What is the MaaS360 Cloud Extender for Certificate Services? MaaS360 Certificate Services Integration provides customers with the ability to leverage their existing Certificate Authority (CA) and auto-provision User Certificates to enrolled ios Devices. Administrators can create Email, Wi-Fi, and VPN policies & profiles that can use user-based Certificates for authentication. The Cloud Extender interacts with Certificate Authority, and pushes the issued certificates down to enrolled ios devices. It performs the following functions: Processes User Certificate requests from MaaS360 when the users enroll their ios devices against a policy that requires User Certificates. Authenticates against the Certificate Authority (CA) / Registration Authority (RA) before requesting for Certificates. Requests User Certificates on behalf of enrolled ios devices. Encrypts the issued User Certificates and uploads the same to MaaS360. MaaS360 then pushes these certificates to these devices. Cloud Extender can Integrate with Microsoft CA installed on 2003 or 2008R2 and Symantec Managed PKI The MaaS360 Cloud Extender requires that it be configured with a Certificate Template with information regarding the CA server, and administrative credentials to authenticate and request device certificates. 5
Certificate Service Integration Requirements Checklist Microsoft: Administrative Access to Microsoft Certificate Authority (CA) Server Symantec: Administrative Access to Symantec MPKI environment (Web URL) Microsoft: Administrative Access to a server on which Network Device Enrollment Service (NDES) can be installed. Could be 2003 or 2008R2. Can be enabled on either the Cloud Extender server or the CA server itself. Symantec: Administrative Access to Symantec MPKI environment with admin access to get an RA certificate. Microsoft: Device Administrator credentials for the NDES environment Symantec: Administrative credentials on Symantec MPKI environment. Please refer to the detailed certificate integration guides for more details on Certificate Integration. Copyright 2013 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software described in this document is furnished under a license agreement or nondisclosure agreement. The software may be used or copied only in accordance with the terms of those agreements. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or any means electronic or mechanical, including photocopying and recording for any purpose other than the purchaser s personal use without the written permission of Fiberlink Communications Corporation. All brands and their products are trademarks or registered trademarks of their respective holders and should be noted as such. Fiberlink Communications Corporation 1787 Sentry Parkway West Blue Bell, PA 19422 July 2013 001 6