Updating the Client Access URL using IBM Traveler Server. OPEN MIC WEBCAST March 22, 2017 Alvin John Marron L2 Software Engineer IBM Traveler

Transcription

1 Updating the Client Access URL using IBM Traveler Server OPEN MIC WEBCAST March 22, 2017 Alvin John Marron L2 Software Engineer IBM Traveler

2 AGENDA: Overview Why use HTTPS instead of HTTP? Required Components Steps to Update the Client Access URL Troubleshooting 2017 IBM Corporation 2

3 Overview: Updating the client access URL using IBM Traveler server IBM Corporation 3

4 This technote describes a new feature for dynamically updating the IBM Traveler server connection URL configuration setting in the IBM Verse for Android app. This feature is currently applicable only for Android devices using IBM Verse app IBM Corporation 4

5 Why use HTTPS instead of HTTP? As part of enhancing the Traveler Clients, IBM requires the use of SSL for secure connection between the mobile application and the endpoint used for connecting to the IBM Traveler server. HTTPS uses 2 types of secure protocol to encrypt communications between client and server; SSL (Secure sockets layer) and TLS (Transport layer security) IBM Corporation 5

6 Required Components IBM Traveler server version (or later) and IBM Verse App for Android version (or later) 2017 IBM Corporation 6

7 Steps to Update the Client Access URL 1. Enable your IBM Traveler server to use HTTPS. Setting up SHA-2 Certificate on Domino using KYRtool and OpenSSL IBM Corporation 7

8 2. Update the "External Server URL" field on the Traveler Server document tab or from the notes.ini (NTS_EXTERNAL_URL= Note: If there is a reverse proxy in use, the URL should be set using this reverse proxy name IBM Corporation 8

9 3. Test the HTTPS connection before forcing all the IBM Verse App devices to use the new URL. Make sure that the HTTP port is routing to the IBM Traveler Server properly IBM Corporation 9

10 4. Test the setup with a few devices that are connected to your IBM Traveler server using the HTTP connection. (IBM Verse Menu > Settings > Server) 2017 IBM Corporation 10

11 Issue these commands at the Domino console: tell traveler policy setdevice tsexternalurlenforced=1 <deviceid> <user> 2017 IBM Corporation 11

12 tell traveler push flagsadd serviceability configget <deviceid> <user> 2017 IBM Corporation 12

13 5. Sync the test devices to ensure that the sync is working properly. From within the Verse for Android app, open Settings > Server and validate that the field called Use Secure Protocol is checked. Under IBM Verse Menu > Settings > Server 2017 IBM Corporation 13

14 6. After you have verified that the External Server URL is correct and your migrated device can sync, set the IBM Traveler server to enforce this property for all devices by entering the following command into the Domino server console: set config NTS_EXTERNAL_URL_ENFORCED=true 2017 IBM Corporation 14

15 7. Restart the IBM Traveler server to have the settings take effect. 8. Once all your IBM Verse for Android apps have been updated, you can disable the HTTP port on your Domino server, assuming it is not required for other applications that are using the same server IBM Corporation 15

16 Troubleshooting: If devices cannot connect to the Traveler server - Verify that you push a correct server URL to the IBM Verse app. If the server URL is incorrect the only way to recover is to remove and reinstall the IBM Verse app on the device IBM Corporation 16

17 References: Setting up SSL on Domino Server: Securing connections for IBM Traveler mobile applications: Setting the external server URL: Setting up SHA-2 Certificate on Domino using KYRtool and OpenSSL2 Updating the client access URL using IBM Traveler server IBM Corporation 17

18 Questions? 2017 IBM Corporation 18