Parallels Mobile Device Managment 8.1 Installation guide

Product Manual

MDM On Premise Installaon

Version 8.1

Last Updated: 06/07/15



ParallelsIPHoldingsGmbH

Vordergasse59

8200Schaffhausen

Switzerland

Tel:+41526320411

Fax:+41526722010

www.parallels.com



Copyright©19992015ParallelsIPHoldingsGmbHanditsaffiliates.Allrightsreserved.



Parallels,2XandtheParallelslogoaretrademarksorregisteredtrademarksofParallelsIPHoldings

GmbHintheUnitedStatesand/orothercountries.Allothertrademarksarethepropertyoftheir

respectiveowners.



Microsoft,Windows,WindowsServer,WindowsNT,WindowsVista,andMSDOSareregistered

trademarksofMicrosoftCorporation.

Apple,Mac,theMaclogo,MacOS,iPad,iPhone,iPodtouch,FaceTimeHDcameraandiSightare

trademarksofAppleInc.,registeredintheUSandothercountries.

LinuxisaregisteredtrademarkofLinusTorvalds.

Allothermarksandnamesmentionedhereinmaybetrademarksoftheirrespectiveowners.



Version8.1–Lastupdated6thJuly2015

ManualIndex

Section1OnPremiseEditionRequirementsandInstallation



1.Introduction,Benefits&EditionsAvailable

2.SystemRequirements.

3.InstallingMobileDeviceManagerOnPremiseEdition

4.ConfiguringMobileDeviceManager

Section2Accounts&BackOffice



5.CreatingtheMDMAccounts

6.AccessingBackOffice



Section3TheServerUserInterface



7.UsingtheServerUserInterface

SystemRequirements

Prerequisites

1. AmachinerunningWindowsServer2008R264Bit,WindowsServer201264Bitor

WindowsServer2012R264BitwithMicrosoft.NETFramework4.5andInternetInformation

Services(IIS)installed.

2. AccesstoanSMTPservertousetosendemails(canbelocalorremote)

3. MicrosoftSQLServer2012Youarerequiredtohaveadatabaseinstanceinstalledeither

onthesamemachinerunningMobileDeviceManagementoronadifferentmachinewithin

yournetwork.TheSA(SystemAdministrator)accountneedstobeenabled.SQLServer

ReportingServicesisrequiredtobeenabled.IfusingtheExpresseditionofSQLServer,

advancedfeaturesarerequired.

4. AdigitalcertificatevalidforthehostingdomainsignedbyatrustedCertificateAuthority.A

SSLsignedcertificatefromacompanywhichprovidesdigitalcertificates.Thiscertificate

shouldalsosupportwildcardfunctionality.

5. GoogleCloudMessagingAPIAGoogleaccountwithGoogleCloudMessagingAPI

enabledisrequired.FormoreinformationonhowtoenabletheGCMserviceandobtaining

theServerAPIKey,pleasehavealookatthefollowinglink:

http://developer.android.com/google/gcm/gs.html

6. SMSGatewayaccountwithCardBoardFish.AHTTPSSMSaccountwithCardBoard

Fishisrequiredforthemessagingfeaturetowork.Moreinformationcanbefoundatthe

followinglink:http://www.cardboardfish.com/products/http_sms

7. Makesurethatthefollowingfirewallportsareopenandinthecaseoftheincoming,

preferablyportforwardedtotheMDMserverIPastheyarevitalforcommunicationbetween

yourdevicesandyourMDMserver:



AppleDevicesRunningiOS:

IfyouhaveanyAppledevicesyouwillalsoneedtomakesurethatyouhaveinadditiontothe

above:

1. ASimpleCertificateEnrollmentProtocol(SCEP)AseparateserverrunningtheSCEP

serviceisrequiredtoissuedigitalcertificatestoiOSdevices.Thisisvitalifyouwantto

manageiOSdevicesviatheMDMportal.Theserviceshouldalsobeconfiguredtorunusing

singlepasswordmode.Moreinformationcanbefoundatthefollowinglink:

http://social.technet.microsoft.com/wiki/contents/articles/9063.networkdeviceenrollmentser

vicendesinactivedirectorycertificateservicesadcs.aspx

2. AnAppleEnterpriseAccountAnAppleEnterpriseAccountisrequiredinordertoobtain

thenecessaryMDMVendorCertificateprovidedbyAppleina.pemformat.Moreinformation

canbefoundatthefollowinglink:https://developer.apple.com/programs/ios/enterprise/



IMPORTANTNOTE:AllCertificatesshouldbelocatedinafolderthatgrantsfullaccessatleastto

theIISusersgroup(IIS_IUSRS)andSYSTEM.Itisalsohighlyrecommendedthatallcertificates

aresavedonaphysicaldriveconnectedtotheMDMServermachine(ex.undertheC:\directory).

InstallingMobileDeviceManagementOnPremiseEdition

Introduction

BeforeyoucanmanageyourdevicesusingMDMyoufirsthavetoinstallandconfiguretheOn

Premiseeditiononyourservermachine.Beforedoingso,firstcheckwhetheryourmachine

complieswiththeminimumhardwarespecifications(seeSystemRequirements).Onceconfirmed,

downloadtheMobileDeviceManagementOnPremiseeditionsetupfilefromhere:

http://www.2x.com/mdm/downloadlinks/

SetupandFileInstallation



1. DoubleclicktheMobileDeviceManagementsetupfiletobegintheinstallation.Confirmthe

machinewhichMobileDeviceManagementisgoingtorunonmeetsthesystem

requirementsandclick“Next”tocontinue.



2. Subsequently,reviewtheEndUserLicenseAgreement,andclicknexttocontinue.Notethat

youmustacceptthetermsinordertocontinuetheinstallation.



3. Youwillthenbepromptedtodefinethepathwheretheinstallationfolderwillbecreated.

Alternatively,clickonthebrowsebuttontochangethedirectoryifneeded.



4. Click‘Install’toconfirmthepreviousstepsandstarttheinstallationprocess.



5. Oncesetupstartsthefileinstallationprocess,youshallbepromptedtoinstall‘MicrosoftSQL

ServerSystemCLRTypes’.Clickonthe‘Next’buttontoproceed.Notethatyoumustaccept

thetermsinordertocontinuetheinstallation.



Note:Youwillnotbepromptedtoinstallthiscomponentifitisalreadyavailable.



6. Furtherdefinethemachineadministratorandcompanyname,click‘Next’andsubsequently

‘Install’toconfirmandstarttheinstallationprocess.



TheinstallationprocessshallcompleteandtheMobileDeviceManagementOnPremiseedition

installedonyourservermachine.



ConfiguringMobileDeviceManagement

Introduction

Afterthefileinstallationiscompleted,theMDMInstallWizardwillstartupandguideyouthroughthe

necessarystagesneededtoconfigureyournewlyinstalledMDMOnPremiseeditionservice.There

areatotalof9settingstobeconfigured.

CertificateConfiguration



1. Inthispartoftheinstallationandconfigurationwizardfillinthefollowingfields:

● ServerAddress:EnteryourMDMserverFQDNhere(Example

mdm.company.com).

IfyoualreadyhaveaPFXcertificateavailable,proceedtoconfigurethebelow:

● Certificate(PFXFormat):DefinethepathwherethePFXfileisstored.

● Certificatepassword:Enterthecertificatepassword.



IfyourequiretogenerateaPFXcertificatefromscratch,enablethe‘IdonothaveaPFXCertificate’

checkboxandfurtherconfigure:



● Certificate:SelectyourSSLcertificateobtainedbyaCertificateAuthority(CA)

company.Thefileshouldendwitha.pemextension*.

● RootCertificate:SelecttheRootCertificatefileobtainedbyaCertificateAuthority

(CA)company.Thefileshouldendwitha.cerextension.

● PrivateKey:SelectthePrivateKeyyouwereprovidedwithbyyourCertificate

Authority(CA)company.Thefileshouldendwitha.pemextension.

● PrivateKeyPassword:Insertthepasswordusedduringthegenerationofyour

PrivateKey.

● ExportPassword:ThepasswordtobeusedforthenewPFXfile



* Signed digital certificate must support wildcards.

DatabaseConfiguration



2. IntheDatabaseSettingsdialogwindow,fillinthefollowing:

● Location:SpecifytheIPaddressofthemachinehostingyourSQLdatabase.Ifthe

databaseislocatedonthesamemachineyouareinstallingMobileDevice

Management,youcanalsouselocalhost.

● Password:FillinthepasswordofyourSAdatabaseaccount.



Note:Click‘TestConnection’toconfirmtheMDMserverisabletoconnecttotheconfigured

database.



3. Duringthisprocesstheinstallerwillstartperformingthefollowingoperations:

● GeneratethePFXcertificate. 

● Createthedatabaseusers.

EmailConfiguration



4. Next,youshallberequestedtofillintheEmailSettingstobeusedbyMDM.

● SMTPServer:FillintheSMTPservertobeused.

● Port:Fillintheportnumbertobeusedforsendingoutemails.

● Email:Fillintheemailaddressthatyouwanttobeshownwhenemailsaresentout.

● Username:Fillintheusernametobeusedifthemailserverrequiresauthentication.

● Password:Passwordfortheusernameprovidedifthemailserverrequires

authentication.

● UseSecureConnection:TickthisboxifyourSMTPserverrequiresanSSL

connection.

SMSSettingsConfiguration



5. InthenextpageyouarerequestedtofillintheSMSSettingsprovidedtoyoubyCardBoard

Fish.CardBoardFishisanonlineservicethatprovides,highquality,reliable,andlowcost

SMSdeliveryservices.ThisstepisnecessaryinordertobeabletosendoutSMS’sfor

featuressuchastheLock&Wipefunction:

● SMSUsername:FillintheusernameobtainedfromCardBoardFish.

● SMSPassword:FillinthepasswordforyourCardBoardFishaccount.

iOSSettingsConfiguration



6. Next,youwillbeaskedtofillintheiOSsettingsobtainedfromyourSCEPserverinorderfor

iOSdevicestobeabletoconnectandcommunicatewithyourMDMserver:

● SCEPServerURL:TheURLpointingtoyourcertificateSCEPserver.

● ChallengePassword:Inputthechallengepasswordgeneratedbyyourcertificate

SCEPserver.

● MDMVendorCertificatePath:Selectthepathtothecertificateprovidedtoyouby

Apple.

● MDMVendorPrivateKeyPath:Selectthepathtotheprivatekeypreviously

generatedtoobtainthecertificatebyApple.

● MDMVendorPrivateKeyPassword:InsertthepasswordofyourPrivateKey.

● MDMVendorExportPassword:DefinethepasswordfortheApplecertificatewhich

willbegenerated.



* Signed digital certificate must support wildcards

GoogleMessagingSettings



7. InthenextdialogwindowyouareaskedtofillintheGCMsettingsobtainedfromyour

GoogleCloudMessagingproject.ThisisusedtosendPUSHnotificationstoAndroid

devices.

● ProjectNumber/GCMAPIKey:InserttheProjectNumberobtainedbytheGoogle

CloudMessagingproject.

● APIKey/GCMProjectId:InserttheAPIKeyobtainedbytheGoogleCloud

Messagingproject.

Note:TheGCMProjectIdisalsoknownastheProjectNumber.Extractthisnumberfromthe

GoogleDevelopersConsole>APIProject>Overview>ProjectNumber(TopLeftCorner)as

shownbelow.



BackOfficeAccountConfiguration



8. Afterthat,youwillbeaskedtofilloutthedetailsfortheadminaccounttoaccesstheMobile

DeviceManagementBackOffice.

● Name,Surname:Inserttheadministrator’snameandsurname.

● Email:Inserttheadministrator’semailaddress.

● Username:TheusernamethatwillbeusedbytheadmintologintoBackOffice.

● Password:Thepasswordthatwillbeusedbytheadministratortologinto

BackOffice.

● ConfirmPassword:ReinsertthepasswordtobeusedbytheadmintologintoBack

Office.



SQLServerReportingServiceConfiguration



9. Next,youwillbeaskedtoenterSSRSsettingsrequiredbysetuptodeploySSRS

configurationforMDMandalsogeneratereports.Uponcompletionclick‘Next’toinitialise

finalsetup.

● WebServiceURL:TheURLpointingtowardyourReportingServicesendpoint.



PortalUsercredentialsarerequiredtoauthenticateconnectionsfromtheMDMportalwhen

generatingreports.IftheSQLServerReportingServices(SSRS)isnotinstalledonthesameserver

thatMDMsetupisrunningon,enablethe“PortalUserCredentials”checkboxandconfigurethe

below:

● UserLoginandPassword:EnterWindowscredentialsthatareconfiguredinSSRSwith

browserpermissions.



Note:IfSetupisrunningonthesamemachineSSRSwillautomaticallybeconfiguredto

authenticatecredentialsfromtheMDMportal.

Page is loading ...

Parallels Mobile Device Managment 8.1 Installation guide

Parallels Mobile Device Managment 8.1 Installation guide

Related papers

Other documents