Intel Small Business Extended Access Deployment
Legal Notices and Disclaimers Disclaimers INTEL CORPORATION MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. INTEL CORPORATION ASSUMES NO RESPONSIBILITY FOR ANY ERRORS THAT MAY APPEAR IN THIS DOCUMENT. INTEL CORPORATION MAKES NO COMMITMENT TO UPDATE NOR TO KEEP CURRENT THE INFORMATION CONTAINED IN THIS DOCUMENT. THIS PRODUCT INCLUDES SOFTWARE DEVELOPED BY THE OPENSSL PROJECT* FOR USE IN THE OPENSSL TOOLKIT (HTTP://WWW.OPENSSL.ORG) THIS SPECIFICATION IS COPYRIGHTED BY AND SHALL REMAIN THE PROPERTY OF INTEL CORPORATION. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED HEREIN. INTEL DISCLAIMS ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PROPRIETARY RIGHTS, RELATING TO IMPLEMENTATION OF INFORMATION IN THIS SPECIFICATION. INTEL DOES NOT WARRANT OR REPRESENT THAT SUCH IMPLEMENTATIONS WILL NOT INFRINGE SUCH RIGHTS. NO PART OF THIS DOCUMENT MAY BE COPIED OR REPRODUCED IN ANY FORM OR BY ANY MEANS WITHOUT PRIOR WRITTEN CONSENT OF INTEL CORPORATION. INTEL CORPORATION RETAINS THE RIGHT TO MAKE CHANGES TO THESE SPECIFICATIONS AT ANY TIME, WITHOUT NOTICE. Legal Notices Intel software products are copyrighted by and shall remain the property of Intel Corporation. Use, duplication or disclosure is subject to restrictions stated in the Intel Software License Agreement, or in the case of software delivered to the government, in accordance with the software license agreement as defined in FAR 52.227-7013. The Intel logo is a registered trademark of Intel Corporation. Other brands and names are the property of their respective owners. ii
Table of Contents Legal Notices and Disclaimers... ii Disclaimers... ii Legal Notices... ii 1. Overview... 2 1.1 Audience... 2 1.2 Set up Time... 2 1.3 Cost Estimate... 2 1.4 Intel Small Business Extended Access Architecture... 2 1.5 Intel Small Business Extended Access Security... 2 1.6 Intel Small Business Extended Access Terminology and Definitions... 2 2. Intel Small Business Extended Access Requirements... 3 2.1 Software Requirements... 3 2.2 Hardware Requirements... 3 2.3 Network Requirements... 3 2.3.1 Getting a host name... 3 2.3.2 Purchasing a SSL certificate... 4 2.3.3... 4 2.3.4 Mapping ports... 4 2.4 Other Requirements... 5 3. Intel Small Business Extended Access Deployment... 6 3.1 Pre- installation Requirement... 6 3.2 Appliance Deployment Overview... 6 3.3 Appliance Deployment... 6 4. Trouble Shooting... 16 Deleted: 15 1
1. Overview Intel Small Business Extended Access allows businesses to collaborate across internet in conjunction with the Intel Small Business Advantage software. This document provides a quick setup guide for installing Intel Small Business Extended Access on a desktop computer. 1.1 Audience This document is designed for use by small business users with no IT environment, resellers, Channel Partners and OEMs. 1.2 Set up Time Set up time can vary based on network configuration. 1.3 Cost Estimate 1.4 Intel Small Business Extended Access Architecture MeshCentral is the underlying technology behind Intel Small Business Extended Access. The collaboration features of Intel Small Business Advantage utilize Intel Small Business Extended Access to setup the WebRTC connections. 1.5 Intel Small Business Extended Access Security The application relies upon Datagram Transport Layer Security (DTLS) to secure communications. 1.6 Intel Small Business Extended Access Terminology and Definitions Client system with Intel Small Business Advantage installed. Appliance system with Intel Small Business Extended Access installed FQDN Fully Qualified Domain Name IP Address Internet Protocol Address IIS - Internet Information Services SSL Secure Socket Layer UPnP Universal Plug and Play 2
2. Intel Small Business Extended Access Requirements Deployment of Intel Small Business Extended Access software consists of installing two components: Client Appliance 2.1 Software Requirements A computer running one of the following operating systems: o Microsoft* Windows* 8.1 o Microsoft* Windows* 10 o Microsoft* Windows Server* 2012 Microsoft* SQL Server* 2010 or Microsoft* SQL Server* 2012 must be installed Microsoft*.NET 4.5 framework must be installed IIS enabled as a features of Microsoft* Windows* 2.2 Hardware Requirements Minimum requirements: Intel Core i3 or greater 2 GB RAM or greater 250 GB HDD or greater Recommended Requirements: Intel Core i5 4 GB RAM 500 GB HDD 2.3 Network Requirements When setting up an Intel Small Business Extended Access instance within a small office network you will need to make changes to your network so that devices outside of your local network can communicate with the Intel Small Business Extended Access appliance. 2.3.1 Getting a host name In order to properly communicate over the internet, the Intel Small Business Extended Access appliance needs an external host name. Public host names can be registered through Doman Name Service providers (example: GoDaddy, No-IP). Additionally, your host name will need to be able to be linked to your network s external IP address. If you have a static IP address, you can link your external IP address to your host name with your DNS provider when you register your host name. If you do not have a static IP address and hostname already, the best option is to register your host name through a dynamic 3
DNS provider (example: No-IP, ) and follow their instructions for linking your dynamic IP address to your host name. Once you know your host name, run the Intel Small Business Extended Access installer and enter the hostname when prompted by the installer. 2.3.2 Purchasing a SSL certificate SSL certificates are used for secure communications between the Intel Small Business Extended Access appliance and the Intel Small Business Advantage software. This helps to verify that your Intel SBA clients can verify that they are communicating with your Intel Small Business Extended Access appliance and not an imposter. Purchasing a SSL certificate can generally be done at the same time you are purchasing the host name. Each provider has slightly different purchasing flows, just follow the instructions on the web site for purchasing and signing a SSL certificate. 2.3.3 Mapping ports After you get an external hostname that resolves to your router, you need to map certain external ports to the ports on the Intel Small Business Extended Access. Here are the ports that will need to be mapped to the internal IP address of the Intel Small Business Extended Access appliance: Port Usage Notes TCP 80 TCP 443 TCP 3478 UDP 3478 TCP 8000 TCP 8080 TCP 8084 HTTP web server port HTTPS web server port WebRTC TURN server Platform Manager default port Mesh agent, console and Intel AMT CIRA port Web redirection port Optional TCP 9971 Intel AMT Hello setup port Rarely used UDP 8081 UDP 55500 to 55900 UDP direct traffic coordination port Port Range assigned to the Mesh Relay Server Rarely used 4
2.4 Other Requirements Windows firewall may not cause any difficulty during installation but if you have third party firewall then you should create an exception in your firewall for the Extended Access installer. You should contact your firewall vendor for specific details on how to create application exceptions. 5
3. Intel Small Business Extended Access Deployment 3.1 Pre- installation Requirement When you are ready to deploy Intel Small Business Extended Access, it is important that you meet pre-installation requirements. To get started, make sure SQL Server and.net 4.5 are already installed. 3.2 Appliance Deployment Overview Verify that the appliance that you are using meets the minimum software and hardware requirements specified in section 2. 3.3 Appliance Deployment Once you have verified all the pre requirements, continue with the Intel Small Business Extended Access software installers. To get started, you will need to run the IntelSmallBusinessExtendedAccessInstaller.exe. 1. Accept the prompt for administrator access to the system. This is required for installation. 2. The Intel Update Manager will be installed (unless already currently installed on system). This application will notify you of future release updates for the Intel Small Business Extended Access. 6
3. The Intel Small Business Extended Access installer will display the license agreement. Review and accept the license agreement, then click the Install button to continue. 4. The next screen has two buttons: the top one to continue the installation flow and the second to start Platform Manager. In the file menu, you can select Advanced Mode to get more installation options. For this document, we will focus on the simple installation. Click on the top button to launch the install wizard. Note: The top button will be grayed out while system checks are being performed. Depending on your network configuration, this may take a few minutes to complete. 7
5. On the welcome page you are reminded that the content of the folder C:\inetpub\wwwroot will be replaced. If necessary move or backup this folder before clicking Next to continue. 6. On the next page, enter a SQL database settings and credentials if needed. You must have administrator access to the database for the installation to work. If you are using Microsoft SQL Server Express, you may need to enter.\sqlexpress as the server name. 8
7. Next is the external identity of this Intel Small Business Extended Access installation. This is the external hostname and IP address used to access this Extended Access. These values will be used to configure certificates and initiliaze the settings needed to connect to the Extended Access. These values are very important. If these values are not correctly setup, you will have to uninstall and reinstall the Intel Small Business Extended Access. Note: You must set it up using the external host name that was purchased in section 2.3.1. 9
8. This screen will be shown only if your computer is part of a Windows Domain. If it s the case, you can setup the Extended Access so users will login using domain authentication. This is useful if you are on a corporate network. Normally the user admin is the default administrator, but if domain authentication is selected, enter the domain\username of the user that will be the administrator of the site. 9. Next we have settings for the Platform Manager. This is a tool used to manage the Extended Access. You need to set an external port and an administrator password. Note: It is not recommended to leave the password blank. 10
10. Finally, review the settings and click Install. The installer will start by creating the database, setting up account access, installing certificates and much more. 11
11. During installation the Platform Manager tool will be installed. After installing this tool, the installer will be done and the Platform Manager will take over for the rest of the package setup. Click the second button to launch the Platform Manager and connect to the server. Note: This process may take some time depending on network configuration. 12
12. Accept the remote certificate 13. Click on Localhost and then click Connect button to connect to the server. 13
14. Click the Events tab. You can follow the rest of the setup there. You should see 4 green circles in the tree view along with many web packages in two different web sites on the left. 14
15. When it s done, open a browser to https://<externalhostname>/createnewaccount.aspx. Create an admin account and assign a password. The admin account is a reserved account which has special privileges in Intel Small Business Extended Access. 15
4. Trouble Shooting If any problem occurs during the installation, enter advanced mode in the Installer and take a look at the logs. 16