FUSION UNIVERSAL DEVICE MANAGER

Transcription

1 FUSION UNIVERSAL DEVICE MANAGER INSTALLATION GUIDE Fusion UDM Installation Guide P a g e i

2 Installation Guide Published on 15 th July 2015 Last Updated on 10 th Sept 2015 Document Version 1.3 Documentation Disclaimer Screenshots and graphics in this manual may differ slightly from your product due to differences in your product release version or your computer operating system. Reasonable efforts were made to ensure that the information in this document was complete and accurate. VXL Instruments Ltd. assumes no liability for any errors. Changes and corrections to the information in this document may be incorporated in future releases. Copyright VXL Instruments Limited. Information in this document is subject to change without prior notice and does not represent a commitment on the part of the manufacturer. No part of this guide may be reproduced or transmitted in any form or means, electronic or mechanical, including photocopying and recording, for any purpose, without the express written permission of the manufacturer. Registered trademarks are properties of their respective owners. Every effort has been made to make this guide as complete and as accurate as possible, but no warranty of fitness is implied. The authors and the publisher shall have neither responsibility nor liability to any person or entity with respect to loss or damages arising from the use of information contained in this guide. Trademarks The VXL Logo, Fusion UDM, Fusion UDM Logo, VXL Software logo are all trademarks and registered trademarks of VXL Instruments Ltd. All other logos and names are the trademarks and registered trademarks of the respective owners. VXL Support VXL Instruments Ltd provides a telephone number for you to report problems or to ask questions about the product. For support telephone numbers, see the VXL Instruments Ltd Web site: VXL Instruments Ltd. House of Excellence, No. 17, Electronics City, Hosur Road, Bangalore , INDIA Fusion UDM Installation Guide P a g e ii

3 Contents INTRODUCTION... 1 ARCHITECTURE... 3 SYSTEM REQUIREMENTS... 4 COMPATIBILITY... 5 INSTALLATION PREREQUISITES... 6 Prerequisite for server... 6 Prerequisite for end point... 9 INSTALLATION ON A SINGLE SERVER INSTALLATION ON DISTRIBUTED SERVERS UPGRADATION OF FUSION UDM SERVER INSTALLATION OF FUSION UDM AGENT APPENDIX FURTHER READING REFERENCE Fusion UDM Installation Guide P a g e iii

4 INTRODUCTION This document consists of pre requisite & installation guide for Fusion UDM Software. This document provides the following details: Architecture & deployment scenarios Pre requisite, system requirements& software compatibility details Getting started with the installation Installation procedure for Fusion UDM on single server Installation procedure for Fusion UDM on distributed servers Installation procedure for Fusion UDM Agent on Windows OS Procedure for creation of self-signed SSL Certificate using OpenSSL Procedure of installing SSL Certificate on the IIS server Further reading references Fusion UDM Installation Guide P a g e 1

5 WEB SERVICES LISTENER HTTPS/FTPS SECURITY LAYER ARCHITECTURE Fusion UDM Premium software is based on multi-tier Service oriented architecture (SOA) consisting of Smart client agent, SOAP based messaging framework and web services based middleware. The core application framework is based on web services architecture using SOAP over HTTP(S) protocol, thus inherits & exhibits the robustness, reliability, scalability, security & high availability features over LAN and WAN networks. The software can connect over Wireless (VSAT, GPRS, CDMA, and 3G) & wired networks (Dial up, Broadband & Leased line). The solution consists of following elements: Fusion UDM Premium middleware software (IIS, MS SQL) Fusion UDM Premium administrator GUI software (IIS) Fusion UDM Agent software Windows XP / 7 / 8 / 10 / Embedded Versions GNU Linux / Gio Linux v6 Desktop w Monitor ThinClient w Monitor Laptop Operating System Agent Data Area Fusion Server SCHEDULER UI HANDLER ASP ENGINE DB HANDLER Operating System Agent Data Area SQL Database Fusion UDM Premium supports the following deployment scenarios: Apple ios / Google Android / Windows Phone/10 Installation on a single server Installation on distributed servers or multitier Fusion Device Manager P a g e 3

6 SYSTEM REQUIREMENTS The Fusion UDM Premium product has the following recommended system requirements: Minimum recommended hardware configuration for POC/testing: Windows server 2008 OS and above, Intel Core i7 / Xeon processer, 4 GB ram & 4 GB free hard drive space. Recommended production server sizing for managing 1000 end points: OS options: Microsoft Windows 2008/2012 R2 64 bit Server Standard Edition Server software: IIS 7.0 or above, Microsoft SQL Server 2008/2012. Architecture: Central system, no high availability Average System utilization:< 70% Processor options: Intel Xeon / AMD Opteron Recommended hardware configuration: 1 x Quad core Intel Xeon 3.0 GHz processor based system or above, 8 GB ECC RAM, 2 x 1TB SAS HDD for RAID configuration, 2 x 1/10 GBPS Ethernet port, Redundant power supply. Fusion UDM Installation Guide P a g e 4

7 COMPATIBILITY This product has been tested on the following platforms and/or with the following products: Software Type Compatibility detail Fusion UDM server application & its installer Desktop OS Server OS Microsoft Windows 7 Professional, Enterprise & Ultimate edition; Microsoft Windows 8 Pro & Enterprise edition. Citrix Xen Desktop, Microsoft Hyper V &VMware based virtualized instances of the above Microsoft Windows Server 2008, 2008 R2 64 bit all editions; Microsoft Windows Server 2012 all editions; Citrix Xen Desktop, Microsoft Hyper V &VMware virtualized instances of any of the above IIS Version IIS 7.0 for Microsoft Windows Server 2008;.net runtime version Database: SSL certificate IIS 7.5 for Windows Server 2008 R2; IIS 8.0 for Windows Server 2012 Microsoft.NET Framework 4.5 full version ( ). Microsoft.NET Framework full version ( ). SQL Server 2008, SQL Server 2012 and its express editions Openssl compatible SSL certificate for HTTPS & FTPS communication. Admin console End point Internet browser VXL Thin client Model Nos. Thin client devices Desktop OS Microsoft Internet explorer Version 9.0, 10.0 & 11.0; Mozilla Firefox version 21 and above (for Windows, Linux & Android OS); Google Chrome version 28 and above (for Windows, Linux & Android OS); Microsoft XP Embedded: C21, Cs21, Ds21, F21, Md21, 6520, 6521; Microsoft WES7-E & P: C24, C27, Cs24, Cs27, Ds24,Ds27, F24, F27, Md24, Md27, Md+27, 6524, 6527; Microsoft WES8: Md,LQ,IQB,65 Series,etc Microsoft WES 2009: C23, C26, Cs23, Cs26, Ds23,Ds26, F23, F26, Md23, Md26, Md+26, 6523, 6526; VXL Gio6 Linux OS : IQ,LQ, F, Md and 65 Series, J,K Series Devices based upon Microsoft XP Embedded, Microsoft WES 2009, Microsoft WES8,WES7&P-(32,64 Bit) Microsoft Windows XP/ Microsoft Windows 7 Professional, Enterprise & Ultimate edition; Microsoft Windows 8 Pro & Enterprise edition; Citrix Xen Desktop, Microsoft Hyper V &VMware based virtualized instances of the above. Fusion UDM Installation Guide P a g e 5

8 INSTALLATION PREREQUISITES Prerequisite for server The Fusion UDM Server has the following installation pre requisites on the Windows server system Following packages need to be installed on Windows server system before starting Fusion UDM Server installation: IIS 7 or later with components (In Web management tools choose IIS management console, IIS management scripts and tools, IIS management service, default document, directory browsing, static content, http errors, Static content compression, Request filtering, Web sockets support). In case of IIS 8.0 include the optional asp.net 4.5 component as well. MS SQL 2008 / SQL Express 2008 or above Microsoft.NET Framework or above full version is required to be installed User rights requirement for Fusion UDM Server installation process: The Fusion UDM Premium installer requires administrator user login (local / domain) on the host/server OS to install the Fusion UDM server application, a service module & components. An SQL user having database creation and modification rights is required to install the Fusion UDM database on SQL Server. The following network ports need to be permitted for FUSION UDM server application communication: HTTP/S Port 80 /Port 443 for application communication. Optional for FTP server: FTP port no 21 or the configured FTPS port For HTML5 based VNC shadowing, the following port should be permitted on the server: TCP Port nos , 5500 & In the installer we have included script to add exception to windows firewall. Port no is used by the browser to connect to Fusion UDM server. Port no 5500 is used by agent to connect to FUSION UDM Server. Port no 5901 is used for connection within 2 processes on the server itself. For Configuration and Installation of IIS components for FUDM server: If proper version of IIS and its modules are not installed then it will be upgraded by following procedure: IIS Version and its modules in the installation console will be as per the installed version of IIS in server operating system. Installing IIS 7.5 Modules: IIS Management Console, IIS Management Scripts and Tools, IIS Management service, Default Document, Directory Browsing, Static Content, HTTP Errors Static Content Compression, Request Filtering, ASP NET 4.5 For Windows Server 2012/2008: Go to Control Panel Fusion UDM Installation Guide P a g e 6

9 Select Server Manager Click on Manage Select Add Roles and Features At Server Roles scroll up to Web Server (IIS) Navigate to different modules as follows: 1) IIS Management Console:- Web Server (IIS)-> Web Server ->Management Tools-> IIS Management Console 2) IIS Management Scripts and Tools:- Web Server (IIS)-> Web Server ->Management Tools-> IIS Management Scripts and Tools 3) IIS Management service:- Web Server (IIS)-> Web Server ->Management Tools-> IIS Management service 4) Default Document:- Web Server (IIS)-> Web Server ->Common HTTP Features-> Default Document 5) Directory Browsing:- Web Server (IIS)-> Web Server ->Common HTTP Features-> Directory Browsing 6) Static Content:- Web Server (IIS)-> Web Server ->Common HTTP Features-> Static Content 7) HTTP Errors Static Content Compression:- :- Web Server (IIS)-> Web Server ->Performance-> Static Content Compression 8) Request Filtering:- Web Server (IIS)-> Web Server ->Security-> Request Filtering 9) ASP NET 4.5:- Web Server (IIS)-> Web Server ->Application Development-> ASP NET 4.5 After checking enable to above mentioned modules click next up to WSUS Select Content Uncheck Store updates in the following location option On Confirmation Check on Restart the destination server automatically, if required. Click install Close the window Restart the IIS. Fusion UDM Installation Guide P a g e 7

10 Configuration and Installation Prerequisite during database installation During the FUDM server installation following are prerequisite needed regarding SQL database installation: Make sure that during installation of SQL management that sa account should be enabled with valid credentials. Step1: 1) Open SQL Server Configuration Manager. 2) Expand SQL Native Client 10.0 Configuration module 3) Select Client Protocols There are four options: Shared Memory TCP/IP Named Pipes VIA We have to ensure that All these options are enabled. To enable these right clicks on each option and select enabled option. Step2: Select SQL Server Network Configuration Select Protocols for SQL EXPRESS Right click on TCP/IP Select IP Addresses. In IP All module Change TCP Port to Click apply Step 3: Restart SQL Server Services. To restart SQL Server Services select SQL Server Services. Select SQL Server(SQLEXPRESS) Right click SQL Server(SQLEXPRESS) Click restart Close the SQL Server Configuration Manager. Fusion UDM Installation Guide P a g e 8

11 Prerequisite for end point The Fusion UDM Agent has the following installation pre requisites on the Windows end point system Following package need to be installed on end point in case of Windows XP SP2 The FUSION UDM Agent also requires installing updated windows Installer for windows XP-SP2 system. User rights requirement on Windows end point for installation of Fusion UDM Agent: The Fusion UDM Agent installer requires Administrator or Run As Administrator user on the end point to install Fusion UDM Agent manually on the end point systems. Following services need to be running on the end point for patch management Windows update agent (WUA) service needs to be running on the PC/End point having Microsoft Windows OS for the patch management feature. For agent based discovery the following network ports need to be permitted on end point: UDP &TCP Port 9000 on client pc for server initiated device discovery. For Agent less discovery and remote installation (Push) in LAN (Across subnets), the following services, corresponding ports need to running and permitted on the endpoint: File and printer sharing service needs to be running on the end point. Set windows firewall to allow File and printer sharing service. TCP port nos 139, 445 & UDP port nos 137,138 Recommendations for agent less discovery across VLAN & VPN: In case of VPN, the particular VPN product should allow NetBIOS broadcast forwarding alternatively WINS should be implemented on each side of VPN. In case of VLAN s in Domain environment the WINS/computer browsing service needs to running in all domain controllers. All endpoints should be configured as WINS clients. For Wake On LAN (WOL) the following settings should be enabled on the end point: WOL in BIOS should be enabled. Wake on Magic Packet option in Ethernet/NIC properties and power management tab should be enabled using device manager. Simple TCP/IP services should be running Open UDP port for port 9 in windows firewall settings For WOL in VLAN: Directed broadcasts should be enabled on the router and enable UDP port no 7 and 9. Fusion UDM Installation Guide P a g e 9

12 INSTALLATION ON A SINGLE SERVER Download the latest version of Fusion UDM Software packages from download link received from VXL sales. Copy the Installer package into the hard drive of the computer system prepared for installation. Check the mentioned pre requisite s before beginning the installation. Run the Fusion UDM setup MSI file, and follow the steps as mentioned below. Step 1 When you are ready, click on setup file from extracted folder, the following startup screen will appear. Step 2 Click on Next button, the End User License screen will be displayed. Select the I accept the terms in the license Agreement check box and then click the Next button. Step 3 The following screen is displayed to choose the installation path, here you can change the default installation path which is set to C:\VXL or choose using Browse button. Click the Next button to continue. Fusion UDM Installation Guide P a g e 10

13 Step 4 The following screen will be displayed to choose installation types. For installation on a single server choose complete installation option. Click the Next button to continue. Fusion UDM Installation Guide P a g e 11

14 Step 5 Once you press next to proceed on the above screen, an information screen is displayed as below, listing the components that will be installed on your system and will display the required hard disk space. Keep the defaults options and Click the Next button to continue. Step 6 The Requirements screen will be displayed. The installer will automatically identify and display the status of desired component checklist indicating whether the component is installed or unavailable on your system. In case the installation pre requisites are met the next button will be visible and one can proceed with the installation. Click the Next button to continue. Note: If the prerequisites are found to be installed on your System, a tick mark () will be displayed indicating component wise compliance. In case any prerequisite is not fulfilled, a Red Cross (X) in front of the missing component will be visible. The setup will end prematurely. The prerequisite needs to be installed before restarting the installation. Fusion UDM Installation Guide P a g e 12

15 Step 7 The Database setup screen will be visible. The administrator will need to select/enter correct information for Sql server connection parameters including selection of Instance Type, Authentication Mode, username & password. Click on Next Button to proceed, in case the Sql server connection parameters are found to be valid the installer will proceed to next screen. Step 8 After SQL Server connection is established the next screen will be displayed consisting of web server Host Name and port no configuration. It will have pre populated information of local IIS Host Name and port no. In case your server system has more than one Ethernet / communication ports and corresponding ip addresses, one can change the server communication IP and port binding for Fusion UDM Premium server site. If server is in domain then hostname would be like Hostname.Fulldomainname. Fusion UDM Installation Guide P a g e 13

16 In case a default website is already running it will disable the same and the following message will be prompted. Step 9 The next screen to start Installation process will be displayed. The setup is now ready to start the installation process. If you want to Review or change any of your installation settings, click on Back button else click on Next button to begin the installation Process. Step 10 During the installation process the installer will display the installation progress, after successful completion the installer will display the final status. Click the Finish button to finish the installation process. Fusion UDM Installation Guide P a g e 14

17 Step 11 After completion of the installation process in case the default launch option is enabled then the installer will launch the server application web console. The login page for Fusion UDM software will be displayed. Fusion UDM Installation Guide P a g e 15

18 The default user logon credentials are: Username: admin Password: admin Fusion UDM Installation Guide P a g e 16

19 INSTALLATION ON DISTRIBUTED SERVERS Prerequisite for distributed server is similar to that of single server installation. It is consider that both the servers used for distributed server are of similar configuration and Copy the Installer package into the hard drive of the computer system prepared for installation. Run the Fusion UDM Server setup file, and follow the steps as mentioned below. In case of distributed server deployment consisting of IIS and database (MSSQL) on separate server, the following options needs to be selected during the installation process. Step 1 to step 3 are similar to that of normal installation for that please refer page no 14. During Step 4 of single server installation process, choose the custom installation option and proceed to next step. The following screen will be displayed. The administrator will require to choose either the IIS application or database to be installed on the respective server. The setup will be required to run twice, that s once on each server for the respective component. Make sure that Database (Install Fusion UDM Database feature) installed first. Figure 1:Install Fusion UDM Database Figure 2:Install Fusion UDM Server Application The administrator will require specifying database server & providing connection parameters: Fusion UDM Installation Guide P a g e 17

20 Remaining steps are common from single server installation process. (Refer Step 7 to Steps 11). Fusion UDM Installation Guide P a g e 18

21 UPGRADATION OF FUSION UDM SERVER Download the latest version of Fusion UDM Server Software packages from download link received from VXL sales. Copy the Installer package into the hard drive of the computer system prepared for installation. Run the Fusion UDM Server setup file, and follow the steps as mentioned below. The Fusion UDM Server upgradation is a simple and straight forward process. Step 1: Click on FUSION UDM Server setup file, the following start up screen will appear Step 2: After click on Next button upgradation & confirmation message will appear. Step 3: Click on Yes for upgradation. During the upgradation process the installer will display the upgradation progress, after successful completion the installer will display the final status. Click the Finish button to finish the upgradation process. Fusion UDM Installation Guide P a g e 19

22 INSTALLATION OF FUSION UDM AGENT Download the latest version of Fusion UDM Agent Software packages from download link received from VXL sales. Copy the Installer package into the hard drive of the computer system prepared for installation. Check the mentioned pre requisite s before beginning the installation Page No:6 Run the Fusion UDM Agent setup file, and follow the steps as mentioned below. The Fusion UDM agent installation is a simple and straight forward process. NOTE: For Windows XP-SP2 os based end point system, latest version of windows Installer component is required to be installed. Step 1 Click on FUSION UDM Agent setup file, the following start up screen will appear Step 2 Here are the lists of changes that will make by this installer and Pre-requisite which required to install the setup. Select the checkbox and click on Next button to proceed. Fusion UDM Installation Guide P a g e 20

23 Step 4 The following screen will appear, showing status of agent installation. Step 5 Click finish button to complete the installation of FUSION UDM Agent setup. Fusion UDM Installation Guide P a g e 21

24 APPENDIX Procedure to create self signed SSL certificate using OpenSSL In case you plan to use self-signed SSL certificate, certificate generation using OpenSSL tool is recommended. Procedure to create self signed certificate using Open SSL is as follows: There are two options to create self signed certificate using Open SSL: OPTION 1: Access the following link After extracting the zip file folder contains following files: CreateCertificate.bat OpenSSL.exe ReadME.txt Now to create certificate follow the procedure as follows: 1. Install OpenSSL.exe application 2. Copy CreateCertificate.bat file in the directory C:\OpenSSL-Win32\bin\ 3. Run Batch file CreateCertificate.bat 4. Enter require details. **Common Name (eg, your name) - Enter Hostname of FUDM Installed sever System. (MUST) **other details are optional user can ignore that and processed with blank details also. 5. After finish all the steps following files get generated in to "C:\OpenSSL-Win32\bin\": 1. fusion.ca.cert.pfx 2.fusion.ca.cert 3.fusion.ca.key OPTION 2: Step 1 Download and Install latest version of precompiled win-32 binaries of OpenSSL for windows from the following link Step 2 Open Command prompt, Go to c:\openssl-win32\bin Path Step 3 Type the following command and input desired information to generate a certificate request: openssl.exe req pass out pass: abcdefg -new >fudm.csr Enter Country Name e.g US, UK, IN, etc. (country name is in 2 alphabets only) Enter CN Name: IP Address of IIS Server. Fusion UDM Installation Guide P a g e 22

25 Step 4 Type the following command to create the key openssl.exe rsa passin pass:abcdefg -in privkey.pem out fudm.ca.key Step 6 Type the following command to generate certificate file for the agent. Openssl.exe x509 -in fudm.csr out fudm.cert -req signkey fudm.ca.key -days 365 (It will generate the certificate to be used for the Agent/End point - fudm.cert.) Upload the certificate to Fusion server repository using the repository module on Fusion server, to be used for automatic transfer to the agent during the discovery and enrolment process. Fusion UDM Installation Guide P a g e 23

26 Step 7 Generate.pfx certificate for use with IIS openssl pkcs12 passout pass:fusion -export -cacerts -in fudm.cert -out fudm.pfx inkey fudm.key Step 8 Import the generated.pfx certificate in the certificate store of server certificates. Use the password specified in above command (pass: fusion) Fusion UDM Installation Guide P a g e 24

27 Procedure to install SSL certificate Step 1: Run->inetmgr on the server system, Open IIS -> Start- Administrative tools IIS manager. Step 2 Select Server Certificates, then select Import certificate, enter the path of certificate file & password then press OK Fusion UDM Installation Guide P a g e 25

28 Step 3 After successful import you can see the newly added certificate ie: fusion Step 4 Go to Sites Site name (FDM Site) - select Bindings- add select type: https-port: 443 Fusion UDM Installation Guide P a g e 26

29 Go to SSL Certificate: select added certificate & click ok. Restart the Webserver. After successful completion the binding will be active and you can access the site using https request After completion of the installation and certificate binding process in case the default launch option is enabled then the installer will launch the server application web console with https request. The login page for Fusion UDM software will be displayed as follows. Fusion UDM Installation Guide P a g e 27

30 Fusion UDM Installation Guide P a g e 28

31 FURTHER READING REFERENCE For Software usage please refers to Fusion UDM User Manual. Document Revision History Document Version Date Summary of Changes Author th July 2015 Initial version. VXL Instruments Limited th July 2015 Updated version. VXL Instruments Limited th July 2015 Steps and snaps of Installer updated with new screens. VXL Instruments Limited th September 2015 Updated new version process and distributed installation process, added up gradation process. VXL Instruments Limited Fusion UDM Installation Guide P a g e 29