Kony Management Installation Guide - Linux On-Premises Release 4.3 Document Relevance and Accuracy This document is considered relevant to the Release stated on this title page and the document version stated on the Revision History page. Remember to always view and download the latest document version relevant to the software release you are using. 2017 by Kony, Inc. All rights reserved 1 of 151
Kony Management Linux Installation Guide Copyright 2013 Kony, Inc. All rights reserved. August, 2017 This document contains information proprietary to Kony, Inc., is bound by the Kony license agreements, and may not be used except in the context of understanding the use and methods of Kony, Inc., software without prior, express, written permission. Kony, Empowering Everywhere, Kony Nitro, and Kony Visualizer are trademarks of Kony, Inc. MobileFabric is a registered trademark of Kony, Inc. Microsoft, the Microsoft logo, Internet Explorer, Windows, and Windows Vista are registered trademarks of Microsoft Corporation. Apple, the Apple logo, itunes, iphone, ipad, OS X, Objective-C, Safari, Apple Pay, Apple Watch, and Xcode are trademarks or registered trademarks of Apple, Inc. Google, the Google logo, Android, and the Android logo are registered trademarks of Google, Inc. Chrome is a trademark of Google, Inc. BlackBerry, PlayBook, Research in Motion, and RIM are registered trademarks of BlackBerry. SAP and SAP Business Suite are registered trademarks of SAP SE in Germany and in several other countries. All other terms, trademarks, or service marks mentioned in this document have been capitalized and are to be considered the property of their respective owners. 2017 by Kony, Inc. All rights reserved 2 of 151
Kony Management Linux Installation Guide Revision History Date Document Version Description of Modifications/Release 04/10/2017 1.4 Document updated for 4.3 01/23/2017 1.3 Document updated for 4.2.5 11/07/2016 1.2 Document updated for 4.2 07/15/2016 1.1 Document updated for 4.1 02/25/2016 1.0 Document updated for 4.0 2017 by Kony, Inc. All rights reserved 3 of 151
Kony Management Linux Installation Guide Table of Contents 1. Preface 6 1.1 Purpose 6 1.2 Intended Audience 6 1.3 Formatting Conventions 6 1.4 Contact Us 8 2. Installation Files 9 3. EMM Installation 11 4. EMM Installation Procedure 12 5. Uninstall EMM 86 6. EMM Upgrade Procedure 88 6.1 Automated Installation (single and multi-node) 88 6.2 Manual Multi-node Installation 106 7. EMM Rollback Procedure 113 7.1 Single node Rollback 113 7.2 Multi-node Rollback 124 8. Post Installation Tasks 126 8.1 Start Services 126 8.2 Start services for Multinode 126 8.3 Database Changes (MySQL database) 126 8.4 Tomcat Services 128 2017 by Kony, Inc. All rights reserved 4 of 151
Kony Management Linux Installation Guide 8.5 Windows Mobile 6.x 129 8.6 Troubleshooting ADS Integration 137 8.7 Troubleshooting Mac Issues 139 8.8 Other Tasks 140 8.9 How to Reset a User Account Password for Network Device Enrollment Service (NDES) 141 8.10 How to encrypt an NDES User Account Password 142 8.11 How to encrypt Database Password (EMM On-Premise build) 144 9. Post Upgrade Tasks 146 9.1 Upgrading Launchpad Details 146 9.2 Updating Tomcat Configuration 147 9.3 Replacing Apache Files 148 9.4 Updating Apache Files 148 10. Frequently Asked Questions 150 2017 by Kony, Inc. All rights reserved 5 of 151
1. Preface Kony Management Linux Installation Guide 1. Preface Enterprise Mobility Management (EMM) software is a policy configuration and management tool for hand-held mobile devices and corresponding applications on smartphones and tablets. EMM helps enterprises to manage complex communications between mobile devices by supporting security, network services, and software and hardware management across multiple OS platforms. EMM also supports bring your own device (BYOD) initiatives that has become the focus of many enterprises. It can support corporate and personal devices, and helps to support a more complex and heterogeneous environment. EMM supports Mobile Content Management. The Preinstallation Guide provides a list of resources that are to be kept ready prior to installation. Having these in place ensures a smooth installation process and easy deployment of Kony EMM. Details of installation of third-party software required shall not be provided in the document. Where ever applicable, links to appropriate resources are provided. Some elements described in this guide will be configured / consumed after successful installation and start-up. 1.1 Purpose This document provides detailed instructions on Kony EMM Linux installation. Installation, upgrade and, rollback procedures are explained in this document. 1.2 Intended Audience This document is intended for engineers or system administrators who will install and configure Kony EMM Console and Kony Enterprise Store. We assume that the reader of this document is familiar with deploying Linux software (RHEL 6.6, OEL, Centos 6.X and, Ubuntu) and installing a database on Linux Enterprise servers. 1.3 Formatting Conventions The following formatting conventions are used throughout the document: 2017 by Kony, Inc. All rights reserved 6 of 151
1. Preface Kony Management Linux Installation Guide Conventions Explanation Monospace User input text, system prompts and responses File path Commands Program code File names Italic Emphasis Names of books and documents New terminology Bold Windows Menus Buttons Icons Fields Tabs Folders URL Active link to a URL. Note Provides helpful hints or additional information. Important Highlights actions or information that might cause problems to systems or data. 2017 by Kony, Inc. All rights reserved 7 of 151
1. Preface Kony Management Linux Installation Guide 1.4 Contact Us We welcome your feedback on our documentation. Write to us at techpubs@kony.com. For technical questions, suggestions, comments, or to report problems on Kony's product line, contact support@kony.com. 2017 by Kony, Inc. All rights reserved 8 of 151
2. Installation Files Kony Management Linux Installation Guide 2. Installation Files All installation files can be found at the community Portal: http://community.kony.com/downloads/manual Navigate to the Kony Management section and click on the specific release related files you want to download. For example, if you want to download Kony Management 3.0, click on the Kony v3.0 GA tab. You can download EMM installer from the developer portal and obtain license from your sales representative or partner. Kony EMM Installer for Linux Kony Management Suite software for installing on a Linux based computer. Kony EMM Installer for Windows Kony Management Suite software for installing on a Windows computer. Exchange Security Services Installer Kony Exchange Service helps EMM server to control emails (block/unblock) on end user's enrolled devices. Kony Exchange Service must be installed on a Windows machine that supports Powershell remoting. Windows Mobile 6.x Services Installer Windows Mobile 6.x Services help EMM server manage Windows Mobile 6.x devices. Group Policy Management Installer Group Policy Management service helps EMM server manage policies for Windows Mobile 6.x devices. 2017 by Kony, Inc. All rights reserved 9 of 151
2. Installation Files Kony Management Linux Installation Guide Kony EMM API Library Kony EMM API Library comprises KonyEMM JS-SDK APIs, these are non-gui APIs that you can use on Kony Studio These APIs allow developers to build in security into the apps by invoking several EMM policies and actions at form level. Windows SCEP Installer EMM Windows Components installer helps install the following Windows components together, Standalone CA Role, NDES(SCEP service), Exchange Security Services, Group Policy Management. Important: Go through the Pre-installation guide before you start the installation process. The preinstallation guide also contains Hardware requirements and Software requirements. 2017 by Kony, Inc. All rights reserved 10 of 151
3. EMM Installation Kony Management Linux Installation Guide 3. EMM Installation If you are installing more than one instance of the Tomcat server on a computer, ensure to use an appropriate naming convention for defining each instance. For example, as suggested, the first instance is named as instance 1, second as instance 2, third as instance 3, and so on. Ensure that all files and related applications configured for the Tomcat instance follow the same naming convention. In this document, we use the sequential numbering convention. You may use own naming convention, but ensure that the instance names are unique and their respective configurations are set appropriately. 2017 by Kony, Inc. All rights reserved 11 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide 4. EMM Installation Procedure This section explains the installation procedure on a Linux platform. Prerequisites You can download the EMM Installer from http://community.kony.com/downloads/manual with your credentials. Ensure KonyEMM.bin file has execute permission. Ensure that the folder in which the executable.bin file is there does not contain any installer.properties file. To install the EMM application through an interactive mode, follow these steps: 1. Execute the KonyEMM-<version number>.ga.bin file as a root user. The files required for the EMM Console installation are extracted. [root@emm builds]]$./konyemm-<version number>.ga.bin Preparing to install... Extracting the installation resources from the installer archive... Configuring the installer for this system's environment... Launching installer... ======= KonyEMM InstallAnywhere) (created with ------------------------------------------------------------------ 2017 by Kony, Inc. All rights reserved 12 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ------ Preparing CONSOLE Mode Installation... ======= ======= Introduction ------------ InstallAnywhere will guide you through the installation of KonyEMM It is strongly recommended that you quit all programs before continuing with this installation. 2017 by Kony, Inc. All rights reserved 13 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide It is also recommended that you install this on a server with at least 4GB RAM. Self-signed certificates are not allowed. Respond to each prompt to proceed to the next step in the installation. If you want to change something on a previous step, type 'back'. You may cancel this installation at any time by typing 'quit'. PRESS <ENTER> TO CONTINUE: 2. Press Enter. The Software License Agreement details appear. ======= License Agreement ----------------- Installation and Use of KonyEMM Requires Acceptance of the Following License Agreement: 2017 by Kony, Inc. All rights reserved 14 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide KONY, INC. SOFTWARE LICENSE AGREEMENT THE TERMS AND CONDITIONS CONTAINED HEREIN CONSTITUTE A LEGAL AGREEMENT. THIS AGREEMENT ("AGREEMENT") CONTAINS THE ENTIRE AGREEMENT BETWEEN YOU ("LICENSEE") AND KONY, INC. ("KONY") WITH RESPECT TO THE TERMS AND CONDITIONS DESCRIBED HEREIN. READ THIS AGREEMENT CAREFULLY BEFORE YOU CLICK THE "I ACCEPT" BUTTON BELOW. BY CLICKING ON THE "I ACCEPT" BUTTON, YOU ACKNOWLEDGE THAT (1) YOU ARE AUTHORIZED TO ENTER THIS AGREEMENT FOR AND ON BEHALF OF YOUR COMPANY, AND ARE DOING SO, AND (2) YOU HAVE READ, UNDERSTOOD, AND AGREE THAT YOU AND THE COMPANY SHALL BE BOUND BY THESE TERMS AND CONDITIONS AND ALL MODIFICATIONS AND ADDITIONS PROVIDED FOR. IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, CLICK ON THE "I DO NOT ACCEPT" BUTTON BELOW AND INSTALLATION WILL TERMINATE. Software products included with this product that are not Kony products are 2017 by Kony, Inc. All rights reserved 15 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide licensed to you by the software provider. Please refer to the license contained in the provider's product for the terms of use before using such products. 1. License Grant. Kony grants you a limited, non-exclusive, nontransferable license to use, for developmental purposes only, the Kony software program(s), known as the KonyTM Platform (the "Software") and related product documentation at no charge subject to the terms and restrictions set forth in this License PRESS <ENTER> TO CONTINUE: ----------------- License Agreement Truncated ----------------- DO YOU ACCEPT THE TERMS OF THIS LICENSE AGREEMENT? (Y/N): Note: If you are using MAM Only or Store Only license, then you cannot use SCEP services. 3. Press Y to accept the agreement. The installer tries to find any previously installed license. If the installer does not find any license, it will provide the following options: ======= License not found ----------------- 2017 by Kony, Inc. All rights reserved 16 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide No existing license found. ->1- Provide License file path 2- Abort Installation ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT: 4. Press Enter or type 1 to provide license information. The installer prompts for the customer details as follows: ======= Customer Information -------------------- EMM License File (.lic)* (DEFAULT: ): <path of the license file> Title (DEFAULT: ): First Name* (DEFAULT: ): Last Name* (DEFAULT: ): Email (DEFAULT: ): Company* (DEFAULT: ): 5. A warning information appears to perform prerequisite steps before continuing. To perform prerequisite steps, see EMM Pre-Install Guide. 2017 by Kony, Inc. All rights reserved 17 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ======= Prerequisites -------------- Please read the Pre-Install Guide to ensure that all the prerequisites have been met. ->1- Continue with Installation 2- Abort Installation ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT: 6. To continue the installation, type 1. Or type 2 to abort and perform prerequisites. A warning message might appear to disable the Iptables. ======= New Installation or Upgrade --------------------------- Provide empty folders for a New Installation. Do not attempt to do a New Installation in the same location as an existing installation of EMM. For an upgrade process ensure you provide the same details as the initial installation. 2017 by Kony, Inc. All rights reserved 18 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ->1- New Installation 2- Upgrade 3- Rollback ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 7. In the New Installation or Upgrade section, select Option 1, the following options appear. A warning message might appear only when the Iptables is enabled. ============================================================= =========== Warning - Iptables is enabled ----------------------------- It is highly recommended to disable iptables to successfully run EMM. ->1- Continue with Installation 2- Abort Installation ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT: 8. To continue the installation type 1 or type 2 to abort and disable the Iptables. The installer prompts for the installation path as follows: 2017 by Kony, Inc. All rights reserved 19 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ======= Choose Install Folder --------------------- NOTE: Please make sure that Install Folder does not have any spaces. Where would you like to install? Default Install Folder: /home/user1/konyemm ENTER AN ABSOLUTE PATH, OR PRESS <ENTER> TO ACCEPT THE DEFAULT : 9. The folder path provided here is considered as the installation folder. All other subsequent elements are installed within this folder. Note: Remember this path as it may be needed in some steps of the installation process. To continue with the default path, press Enter or type the path. The installer displays a warning message to create a new folder as follows: 2017 by Kony, Inc. All rights reserved 20 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ======= Warning - Folder does not exist ------------------------------- /home/user1/konyemm folder is not available, do you want to create this folder? Choose appropriate option to proceed. ->1- Continue to create this folder 2- Go back to provide install folder again ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT: 10. To create the folder, press Enter or type 2 to set another path. The installer prompts for the Tomcat Server Configuration Details as follows: ======= Tomcat Server Configuration Details 2017 by Kony, Inc. All rights reserved 21 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ----------------------------------- Press <ENTER> to retain default values. Tomcat HTTP Port (DEFAULT: 8080): Tomcat Shutdown Port (DEFAULT: 8005): Tomcat HTTPS Port (DEFAULT: 8443): 11. Press Enter to set the default ports or type your desired port numbers. The installer prompts for the JVM Details as follows: ======= JVM Memory ------------------- It is recommended to use a minimum of 2048 MB of Memory for ideal performance. JVM Maximum Memory (DEFAULT: 2048): JVM Minimum Memory (DEFAULT: 2048): 2017 by Kony, Inc. All rights reserved 22 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide 12. Press Enter to set the default ports or type your desired port numbers. The installer prompts for the Apache Port Details as follows: ======= Apache Port Details ------------------- Apache HTTP Port (DEFAULT: 80): Apache HTTPS Port (DEFAULT: 443): 13. In the Connection Details section, provide the host name or URL and host IP address. ======= Connection Details ------------------ Provide hostname (ex: manage.domain.com) which is mapped to the frontend server and System Private IP address of the server EMM is being installed on. 2017 by Kony, Inc. All rights reserved 23 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide NOTE: Don't use localhost, 127.0.0.1, 0.0.0.0 for IP Address Frontend Host name (DEFAULT: ): Frontend HTTPS Port(DEFAULT: 443): Local System Private IP address (DEFAULT: ): Note: Frontend HTTPS Port (Default: 443): should be the same as Apache HTTPS port number. Enter the following file details: Host name URL: Ensure to add your domain URL. For example, test.konylabs.net Note: If you want to incorporate Load Balancer on EMM, provide your Load Balancer domain name in the Host name URL. IP address: Provide the private IP address of the EMM installation box (instance). The application server, memcache, webserver and other third-party servers communicate with the EMM server through this private IP. For example, 10.10.4.6 14. Press Enter to set the default ports or type your desired port numbers. The installer prompts for Apple server configuration as follows: ======= Apple server configuration -------------------------- 2017 by Kony, Inc. All rights reserved 24 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Do you want to enable ios app wrapping? You can configure upto 4 MAC servers for ios wrapping. ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: Note: If you selected 1, only then the SCEP server section appears after Get User Input. You can configure SCEP server at SCEP Configuration. 15. Press Enter to provide Apple server details. Type 2 if ios wrapping is not required. a. The installer prompts for Apple server #1 details: ============================================================= ====== Apple server #1 details ----------------------- Enter Details for Apple server used for ios (iphone, ipad) app wrapping. 2017 by Kony, Inc. All rights reserved 25 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide NOTE: Press <ENTER> to retain default values. Host (DEFAULT: ): <Enter the Host IP, for example, 10.10.10.111> Port (DEFAULT: 22): Username (DEFAULT: ): <mandatory field> b. Enter the host IP address, port number, and user name. The installer prompts for password or.pem key as follows: ============================================================= ======= Password or.pem key -------------------- What do you have? ->1- Password 2-.pem key ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 2017 by Kony, Inc. All rights reserved 26 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide c. Press Enter to provide password or type 2 for.pem key path. If you press Enter, then provide the password that is set on the Mac machine: ========================================================= ====== Enter Password -------------- Please Enter the Password for <your mac user>: If you type 2, then provide the.pem file path: ========================================================= ===== Enter.pem key path ------------------- Provide.pem key file full path (DEFAULT: ): d. The installer prompts if you like to configure next ios server. Type 1 to continue configuring next ios server, or type 2 to move to the next step. ============================================================= ====== 2nd Apple server configuration 2017 by Kony, Inc. All rights reserved 27 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ------------------------------ Do you want to configure one more Apple server? ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 2 16. Press Enter to set the default ports or type your desired port numbers. The installer prompts for Windows Wrapping Server Configuration as follows: ======= Windows Wrapping Server Configuration -------------------------- Do you want to enable windows app wrapping? 2017 by Kony, Inc. All rights reserved 28 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide You can configure upto 4 Windows servers for windows app wrapping. ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 1. Press Enter to provide Windows server details. Type 2 if Windows app wrapping is not required. a. The installer prompts for Windows server #1 details: ========================================================= ========== Windows server #1 details ----------------------- Enter Details for Windows server used for windows app wrapping. NOTE: Press <ENTER> to retain default values. Host (DEFAULT: ): <Enter the Host IP, for example, 2017 by Kony, Inc. All rights reserved 29 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide 10.10.10.111> Port (DEFAULT: 22): Username (DEFAULT: ): <mandatory field> b. Enter the host IP address, port number, and user name. The installer prompts for password or.pem key as follows: ========================================================= =========== Password or.pem key -------------------- What do you have? ->1- Password 2-.pem key ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: c. Press Enter to provide password or type 2 for.pem key path. If you press Enter, then provide the password that is set on the Windows machine: 2017 by Kony, Inc. All rights reserved 30 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ==================================================== =========== Enter Password -------------- Please Enter the Password for <your windows user>: Validating PreRequisites on WIndows 8.1 Machine.. Please Enter the Password for <your windows user>: If you type 2, then provide the.pem file path: ==================================================== ========== Enter.pem key path ------------------- Provide.pem key file full path (DEFAULT: ): d. The installer prompts if you like to configure next Windows server. Type 1 to continue configuring next Windows server, or type 2 to move to the next step. ========================================================= ========== 2nd Windows server configuration ------------------------------ 2017 by Kony, Inc. All rights reserved 31 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Do you want to configure one more Windows server? ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 2 17. If you wish to support Android, then following configuration is mandatory. In the Get User Input section, press Enter to enable or type 2 to disable android wrapping. ======= Get User Input -------------- Do you want to enable android wrapping? 2017 by Kony, Inc. All rights reserved 32 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 18. In the SCEP Configuration section, press Enter to configure SCEP or type 2 to not configure SCEP. ======= SCEP Configuration ------------------ Do you want to configure SCEP? NOTE: If you choose not to configure SCEP, EMM will not support ios Devices and Android Devices. ->1- Yes 2- No ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 19. If you have selected the option 1 in then, enter the following details for SCEP: All the certificates required by ios for enrollment and Android devices for secure communication between the child apps (SCEP Certificate) are distributed through SCEP server at the time of enrollment. Provide the details of the SCEP server, installed as per instructions in the Kony EMM Pre-Install Guide. 2017 by Kony, Inc. All rights reserved 33 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Important: If you choose not to configure SCEP, EMM will not support ios Devices. On Android devices,scep (Two-Way SSL) will not be supported. Note: If you are using MAM Only or Store Only license, then you cannot use SCEP services. ============================================================= = Simple Certificate Enrollment Protocol (SCEP) Configuration ----------------------------------------------------------- Enter SCEP details below. NOTE: Press <ENTER> to retain default values. SCEP Server URL (DEFAULT: ): SCEP Keysize (DEFAULT: 2048): SCEP Common Name (DEFAULT: ): SCEP CA Instance Name (DEFAULT: ): SCEP CHALLENGE URL (DEFAULT: ): 2017 by Kony, Inc. All rights reserved 34 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide SCEP CA DOMAIN (OPTIONAL: (DEFAULT: ): SCEP CA USERNAME (DEFAULT: ): administrator ============================================================= = Enter Password -------------- SCEP CA PASSWORD: Provide the following details: Note: SCEP CA user name must not contain domain name. Provide only the user name. SCEP Server URL: SCEP Service URL SCEP Keysize: RSA key size in bits either 1024 or 2048. Choosing the default option will set to 2048. SCEP Common Name: Representation of X.500 name for example, O=Company Name,CN=Foo. SCEP CA Instance Name: Certificate authority name used in SCEP installation. SCEP CHALLENGE URL: Pre-shared secret for automatic enrollment. 2017 by Kony, Inc. All rights reserved 35 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide SCEP CA DOMAIN: Domain name of the user account used while installing SCEP. SCEP CA USERNAME: Account user name used while installing SCEP service. SCEP CA PASSWORD: Password of the user account. 20. In the EMM configuration path section, provide android-sdk-linux folder path.the path you define here is used to store all dynamic content created in the EMM application such as app details and certificates of the respective device platform. And also installer copies SSL certs, vendorsigningcert, and Android wrapping scripts. ======= EMM Configuration Path ---------------------- Note: Please ensure that you have android-sdk-linux inside this directory. EMM Configuration directory (DEFAULT: ): for example, /data/ Note: If you do not provide support to Android devices, you can create a new folder to store EMM configurations. 21. Press Enter to use the default path. The path defined here is used to store static data of the EMM that includes certificates, binaries of the Kony EMM Agent and enterprise apps, images 2017 by Kony, Inc. All rights reserved 36 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide for branding and app category. This is central to the functioning of EMM. In the Docroot path section, provide docroot sub folder path from the main installation folder. For example, default path is /home/user1/konyemm/docroot. The docroot or docbase is the storage location which EMM uses to store all admin or user uploaded content. For on-premises installations, the docroot is a hard-mounted location within the application server; a local file-system or an SAN mounted device. The docroot can be hosted on an Amazon Simple Storage Service. The docroot comprises of four separate directories for the EMM modules: Store, MAM, MDM, MCM, MDM., and emm_common. For local file systems, Static resources like screenshots or header images or icons are navigable if one is familiar with directory structure and the generated filenames. There are no access regulations. Access to secure assets like binaries are restricted via apache through secure URLs over web. Ensure that unintended users do not have filesystem read/write permissions. Access to critical assets like certificates are completely blocked. They may only be accessed internally and never by a client. For Amazon Simple Storage Service file systems, access to static resources is through static URLs which are available publicly. For secure assets (for example, binaries), access is restricted through secure URLs generated with an expiry schedule. Links to critical assets like certificates are never generated. Links are used internally through secure Amazon APIs. ======= Docroot Path ------------ NOTE: Press <ENTER> to retain default values. 2017 by Kony, Inc. All rights reserved 37 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Docroot directory (DEFAULT: /home/user1/konyemm/docroot): 22. Press Enter to use the default path. ======= SSL Configuration ----------------- SSL certificates are used for secure communication between the device and EMM server. Usually, SSL certificates are installed on Load balancer. SSL certificates must be procured from trusted Certificate Authorities, GoDaddy or VeriSign. You can configure end to end SSL from device to App server. For SSL communication between Load balancer and Web server, Web server and App server, you can also use self signed SSL certificates. Load balancer SSL certificates, including private key should be provided to the EMM Server during installation. A check is performed on ios devices to ensure no tampering has been done. For ios devices, EMM server sends payload (enrollment or policy push) along with a message digest. Private key is used to encrypt the message digest creating a digitally signed message digest. This is sent along with the payload to the device. At the device end, the device in-built MDM agent uses the payload to create the message digest. Using its public key, it decrypts the digitally signed message digest sent by the server and compares these two. If the message digest is not 2017 by Kony, Inc. All rights reserved 38 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide signed with a private key, a Not verified message displays on the device. Where do you want to terminate HTTPS? ->1- HTTPS at Load Balancer 2- HTTPS at Apache 3- HTTPS for every layer (Load Balancer, Apache and Tomcat) ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 23. According to the option that you select, the following options appear: Note: Load balancer SSL certificates, including private key should be provided to the EMM Server during installation. A check is performed on ios devices to ensure no tampering has been done.for ios devices, EMM server sends payload (enrollment or policy push) along with a message digest. Private key is used to encrypt the message digest creating a digitally signed message digest. This is sent along with the payload to the device. At the device end, the device in-built MDM agent uses the payload to create the message digest. Using its public key, it decrypts the digitally signed message digest sent by the server and compares these two. If the message digest is not signed with a private key, a Not verified message displays on the device. If you select option 1 (HTTPS at Load Balancer), a. Enter the certificate details. 2017 by Kony, Inc. All rights reserved 39 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ========================================================= ====================== Load Balancer Certificates -------------------------- Please provide the full path to SSL certificates. NOTE: Self-signed certificates are not allowed for apache. SSL certificate file (DEFAULT: ): /downloads/certificateskony.com/platform.kony.com.crt SSL certificate key file (DEFAULT: ): /downloads/certificateskony.com/platform.kony.com.key SSL certificate chain file (DEFAULT: ): /downloads/certificateskony.com/gd_bundle.crt ss b. Proceed to step 20. If you select option 2(HTTPS at Apache), 2017 by Kony, Inc. All rights reserved 40 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide a. Enter Load Balancer details ========================================================= ======================LoadBalancer------------Will you be using a LoadBalancer?->1-Yes 2- NoENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 1 b. Press Enter or 1. The following details appear. Provide Load Balancer SSL certificate details. ========================================================= ======================LB SSL Certs------------Please provide the full path to LoadBalancer SSL certificates. These Frontendcerts are required for ios profile signing. SSL certificate file (DEFAULT: ): /data/certs/ssl_cert_ file.pem SSL certificate key file (DEFAULT: ): /data/certs/ssl_ cert_key_file.key SSL certificate chain file (DEFAULT: ): /data/certs/ssl_ cert_chain_file.crt c. After you enter certificate paths, press Enter. Following details appear. ========================================================= ====================== Apache SSL Configuration ------------------------ Please provide the full path to SSL certificates. 2017 by Kony, Inc. All rights reserved 41 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide NOTE: Self-signed certificates are not allowed for apache. SSL certificate file (DEFAULT: ): /downloads/certificateskony.com/platform.kony.com.crt SSL certificate key file (DEFAULT: ): /downloads/certificateskony.com/platform.kony.com.key SSL certificate chain file (DEFAULT: ): /downloads/certificateskony.com/gd_bundle.crt d. Proceed to step 20. If you have selected option 3 (HTTPS for every layer (Load Balancer, Apache and Tomcat)), the following options appear. a. Enter Load Balancer details ========================================================== =====================LoadBalancer------------Will you be using a LoadBalancer? ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 1 2017 by Kony, Inc. All rights reserved 42 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide b. Press Enter or 1. The following details appear. Enter Load Balancer SSL certificate details. ========================================================= ======================LB SSL Certs------------ Please provide the full path to LoadBalancer SSL certificates. These Frontendcerts are required for ios profile signing. SSL certificate file (DEFAULT: ): /data/certs/ssl_cert_file.pem SSL certificate key file (DEFAULT: ): /data/certs/ssl_cert_key_file.key SSL certificate chain file (DEFAULT: ): /data/certs/ssl_cert_ chain_file.crt c. Once you have provided the paths, press Enter. The following details appear. Use the SSL details created as mentioned in the Pre-Install Guide. This system does not function with self signed SSL certificates. Note: Ensure to provide appropriate certificate details. d. In the SSL configuration section, provide the SSL certificate files path as follows: ========================================================== ============== Apache SSL configuration ----------------- It is mandatory to configure SSL on Apache. Please provide the full path to SSL certificates. 2017 by Kony, Inc. All rights reserved 43 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide NOTE: Self-signed certificates are not allowed for apache. SSL certificate file (DEFAULT: ): SSL certificate key file (DEFAULT: ): SSL certificate chain file (DEFAULT: ): e. Enter the following file paths: SSL certificate file: Provide the file path. For example, /home/user1/ssl_ cert_file.pemssl certificate key file: Provide the file path: For example, /home/user1/ssl_cert_key_file.key SSL certificate chain file: Provide the file path. For example, /home/user1/ssl_cert_chain_file.crt f. The following SSL configuration section appears. ========================================================= ==========SSL configuration-----------------do you want to use same SSL for tomcat also?->1- yes 2- noenter THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: o If you select option:1, then enter the key store password you wish to use for tomcat. The option will use the same SSL certificates for Tomcat. The installer will combine the all three Apache SSL certificates into a single JKS keystore to be used by Tomcat. The password entered here will be assigned to that JKS keystore. 2017 by Kony, Inc. All rights reserved 44 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ========================================================= ===== Enter Password -------------- Destination Keystore Password o If you select option: 2, the following option appears. Enter Tomcat SSL Certificates. ========================================================= ===== Tomcat SSL Configuration ------------------------ Please select appropriate option to proceed with installation. ->1- Provide SSL Certificates 2- Create Self-Signed Certificates from Installer 2017 by Kony, Inc. All rights reserved 45 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: i. If you select option 1, the following option appears: ==================================================== ===== Tomcat SSL configuration ------------------------ SSL certificate file (DEFAULT: ): SSL certificate type (DEFAULT: JKS): ==================================================== ===== Enter Password 2017 by Kony, Inc. All rights reserved 46 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide -------------- SSL certificate Password: ii. If you select option 2, the following option appears: ==================================================== ===== Tomcat SSL configuration ------------------------ Please provide below information to create Selfsigned certificates from installer. Organizational Unit (DEFAULT: ): Company (DEFAULT: ): 2017 by Kony, Inc. All rights reserved 47 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide City (DEFAULT: ): State (DEFAULT: ): Country (DEFAULT: ): ==================================================== ===== Enter Password -------------- SSL certificate Password: 24. The Proxy Server Details option appears. If you like to configure HTTP Proxy server, select an appropriate option. ======= Proxy Server Details for Android -------------------------------- Do you wish to configure a HTTP proxy server for Android push notifications? 2017 by Kony, Inc. All rights reserved 48 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: a. If you select option 1, the HTTP Proxy Authentication option appears: ============================================================= ====== HTTP Proxy Authentication Choice -------------------------------- Please select appropriate option to proceed. ->1- With Authentication 2- Without Authentication ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 2017 by Kony, Inc. All rights reserved 49 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide If you select option 1, the HTTP proxy server for Android push notifications option appears: ========================================================= ===== HTTP proxy server for Android push notifications ------------------------------------------------ Please Provide HTTP Proxy Server Details. Hostname/IP Address (DEFAULT: ): Port (DEFAULT: ): Username (DEFAULT: ): ========================================================= ===== Enter Password -------------- 2017 by Kony, Inc. All rights reserved 50 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Please Enter the Password for user kony: If you select option 2, the HTTP proxy server for Android push notifications option appears: ========================================================= ===== HTTP proxy server for Android push notifications ------------------------------------------------ Please Provide HTTP Proxy Server Details. Hostname/IP Address (DEFAULT: ): Port (DEFAULT: ): 25. The Proxy Server Details option appears. If you like to configure SOCKS Proxy server, select an appropriate option. ======= SOCKS Proxy Server Details for Apple -------------------------------------- 2017 by Kony, Inc. All rights reserved 51 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Do you wish to configure a SOCKS proxy server for Apple push notifications? ->1- yes 2- no ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: a. If you select option 1, the SOCKS Proxy Authentication option appears: ============================================================= ====== SOCKS Proxy Authentication Choice -------------------------------- Please select appropriate option to proceed. ->1- With Authentication 2- Without Authentication 2017 by Kony, Inc. All rights reserved 52 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: If you select option 1, the SOCKS proxy server for Apple push notifications option appears: ========================================================= ===== SOCKS proxy server for Apple push notifications ------------------------------------------------ Please Provide SOCKS Proxy Server Details. Hostname/IP Address (DEFAULT: ): Port (DEFAULT: ): Username (DEFAULT: ): ========================================================= ===== Enter Password 2017 by Kony, Inc. All rights reserved 53 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide -------------- Please Enter the Password for user kony: If you select option 2, the SOCKS proxy server for Apple push notifications option appears: ========================================================= ===== SOCKS proxy server for Apple push notifications ------------------------------------------------ Please Provide SOCKS Proxy Server Details. Hostname/IP Address (DEFAULT: ): Port (DEFAULT: ): 26. In the Memcache Server Details section, press Enter to continue with default port or type your desired port number. ====== Memcache Server Details 2017 by Kony, Inc. All rights reserved 54 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ----------------------- NOTE: Press <ENTER> to retain default values. memcache Port (DEFAULT: 11211): 27. In the Database server type section, type one of the options of your choice. ======= Database server type -------------------- Choose the database server type ->1- MySQL 2- MSSQL 3- Oracle ENTER THE NUMBER FOR YOUR CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT:: 2017 by Kony, Inc. All rights reserved 55 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Note: Click on the database server type you want to configure to go to that section. MySQL, MSSQL, Oracle. 28. In the Database server details section, provide database server details. for MySQL: ======= Database server details: MySQL ------------------------------ Please ensure the DB user has permissions to create/alter/delete schemas. NOTE: Press <ENTER> to retain default values. Hostname or IP address (DEFAULT: localhost): Port (DEFAULT: 3306): Database Name (DEFAULT: konyemmmaster): 2017 by Kony, Inc. All rights reserved 56 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Username (DEFAULT: ): ======= Enter Password -------------- Please Enter the Password for dbclient: Enter the following details: Hostname or IP address: Enter the host name used while creating the database user. By default, it is set as localhost. Port: By default, it is set as 3306. Database Name: By default, it is set as konyemmmaster. konyemmmaster was created when you performed pre-installation steps. For more information, see EMM Pre-install Guide. Username: Enter the user name used while creating the database user. For example, dbclient. Password: Enter the database password used while creating the database user. Note: Click here to proceed to next step. 2017 by Kony, Inc. All rights reserved 57 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide for MSSQL ============== Database server details: MSSQL ------------------------------ Please ensure the DB user has permissions to create/alter/delete schemas. NOTE: Press <ENTER> to retain default values. Hostname or IP address (DEFAULT: ): <database IP/domain name> Port (DEFAULT: 1433): Database Name (DEFAULT: emmdb): Username (DEFAULT: ): 2017 by Kony, Inc. All rights reserved 58 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ============== Enter Password -------------- Please Enter the Password for (Username): Enter the following details: Hostname or IP address: Enter the host name used while creating the database user. By default, it is set as localhost. Port: By default, it is set as 1433. Database Name: By default, it is set as konyemmmaster. konyemmmaster was created when you performed pre-installation steps. For more information, see EMM Pre-install Guide. Username: Enter the user name used while creating the database user. For example, dbclient. Password: Enter the database password used while creating the database user. Note: Click here to proceed to next step. for Oracle 2017 by Kony, Inc. All rights reserved 59 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ================================================== ============================= Database server details: Oracle ------------------------------- Please ensure the DB user has permissions to create/alter/delete schemas. NOTE: Press <ENTER> to retain default values. Hostname or IP address (DEFAULT: ): <database IP/domain name> Port (DEFAULT: 1521): Service ID (DEFAULT: konydb): DBA Username (DEFAULT: ): User for EMM (DEFAULT: ): emmdb1 2017 by Kony, Inc. All rights reserved 60 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ============== Enter Password for system ------------------------- This installation requires a password to continue. Please Enter the Password: ============== Enter Password for emmdb1 ---------------------- This installation requires a password to continue. Please Enter the Password: Enter the following details: Hostname or IP address: Enter the host name used while creating the database user. By default, it is set as localhost. 2017 by Kony, Inc. All rights reserved 61 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Port: By default, it is set as 1521. Service ID (DEFAULT: konydb): Service ID of your Oracle database. DBA Username: Enter the user name used while creating the database user. For example, dbclient. User for EMM (DEFAULT): This user will be created during installation. Password for DBA user: Enter the database password used while creating the database user. Password for EMM user: This password will be used by the new user created during instillation. Note: If you enter incorrect details for database server or database server is not reachable, following error message appears. ============== Database server connection failed --------------------------------- Database server connection failed. Reason: The TCP/IP connection to the host dbhost, port 1433 has failed. Error: "null. Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. 2017 by Kony, Inc. All rights reserved 62 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide Make sure that TCP connections to the port are not blocked by a firewall.". PRESS <ENTER> TO CONTINUE: 29. After the JDBC is connected, the following warning message appears with options: Note: If a database schema is already exists, this following message appears while upgrading or installing. ======= Warning - Database already exists!!! ------------------------------------ Database test already exists!!! ->1- Go back to provide database details 2- Continue to drop and create database 3- Skip without creating database 2017 by Kony, Inc. All rights reserved 63 of 151
4. EMM Installation Procedure Kony Management Linux Installation Guide ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT: 2 Enter the following details: 1. Go back to provide database details: Select this option to go back to previous step. 2. Continue to drop and create database: Select this option if you are creating the database for the first time. 3. Skip without creating database: Select this option if you do not want to disturb the exiting database. 30. In the User Information Details section, provide the following details: ======= User Information Details ------------------------ Please provide below details to access Management and Self Service Consoles. NOTE: Press <ENTER> to retain default values. 2017 by Kony, Inc. All rights reserved 64 of 151