DME 4.5 Partner Event January 2016 We will start at 10:00 CET Frank Fjordvald Head of Technical Services
Agenda DME Server 4.5 highlights New SSL proxy server in front of the DME Server New settings and features on the DME Server Upgrading DME to 4.5 on Windows (Demo) Questions Extra: install Nginx on Linux (Demo)
DME 4.5 Server New features Push to multiple devices Push is supported on all DME devices Pre-cache for all devices No limit for number of devices New MDM features (ios) New ios Enrollment Status page shows current status for all MDM enrolled IOS devices New MDM polices like Lock device New SSL proxy server DME now uses Nginx as HTTPS engine
Improvements ios MDM DME 4.5 server ios devices are not deleted after 60 days (30/30 days rule) Allow un-enrolled ios devices Better contact sync Improved comparison of contacts, including phonetic fields Pictures on contacts More pictures are now included with an improved integration to Exchange Bringing back the "Release license" button 20+ bug fixes More info in the release notes: https://resources.excitor.com/docs/release-notes
DME 4.5 Client New features Open attachments outside secure DME container Attachments like: mp3, mp4 files, also RSA client configuration files Based on a whitelist on the server ios and Android Search for rooms and resources New search option ios and Android Support for multi push pull down in inbox is now using the push flag ios and Android
Improvements DME 4.5 Clients Better support for Touch ID (ios) Two security levels Language 25+ bug fixes Level one: Password is saved in memory Level two: Password is saved in device keychain New security setting Translation into Traditional Chinese in the File Browser Support for Traditional Chinese characters More info in the release notes: https://resources.excitor.com/docs/release-notes
Next version of DME DME updates DME server 4.5 sp1 Full support for Exchange 2016 Apple MDM fix (this can be sent out as a HotFix) Minor bug fixes ETA Q1 2016 DME Client Updated version of the build in viewer ENTWRX ETA Q1 2016 Next major version of DME is 4.6 New features (candidates) Support for multiple mail boxes Support for eml attachments Upgrade to Jboss 6.x ETA Q3 2016
Agenda DME 4.5 Server highlights New SSL proxy server in front of the DME Server New settings and features on the DME Server Upgrading DME to 4.5 on Windows (Demo) Questions Extra: install Nginx on Linux (Demo)
Why do we need a new proxy server?
SSL Labs result on DME 4.4.x
New SSL proxy server Nginx Why Nginx? Installing Nginx Stronger SSL support, supports TLS 1.2 and Forward Secrecy Separated SSL termination from the Jboss server Easy to install and upgrade High power and low impact on the DME server Can be used as load balancer in a DME cluster Can be use as a SSL push notification from O365 Nginx is open source, no additional cost Windows: The installer will install and configure the Nginx server on Windows Linux: This is a manual installation, with an install document at: https://resources.excitor.com/sites/resources/files/docs/installing_n ginx.pdf A default Nginx configuration file is distributed by the DME installer More information http://nginx.org/en/docs/
SSL Labs result on DME 4.5 with Nginx
Nginx Visio diagram
Agenda DME 4.5 Server highlights New SSL proxy server in front of the DME server New settings and features on the DME Server Upgrading DME to 4.5 on Windows (Demo) Questions Extra: install Nginx on Linux (Demo)
Web interface New settings and functions Push to multi devices No settings Works by default No performance impact on the DME server Apple MDM settings New ios Enrollment Status page, show current status for all MDM enrolled ios devices New Setting: Lock devices after (number of days) Default value: 30 New setting: Allow un-enrolled devices ( On/Off ) Default value: Off New security settings New Touch ID setting: Allow device to store password in keychain (fingerprint only) Default value: On Allowed files to open outside DME Default value: empty. Format:.mp4;.pptx;.p12;.mov;
Agenda DME 4.5 Server highlights New SSL proxy server in front of the DME server New settings and features on the DME Server Upgrading DME to 4.5 on Windows (Demo) Questions Extra: install Nginx on Linux (Demo)
DME install / Upgrade Demo of the Upgrade on Windows
Nginx details File location Nginx and original DME SSL certificates:..\dme\certs\ Nginx install:..\dme\nginx\ Nginx conf file:..\dme\nginx\conf\default.conf This file is configured by the Windows installer Nginx log files: \dme\nginx\logs access.log and error.log New Nginx SSL files server.key Old sslprivatekey.pem without SSL password server-ca-cert-bundle.pem Old sslcertificate.pem and rootca.pem in that order dh4096.pem New 4096 bit Diffie-Hellman parameter New Nginx tool ConvertToNginxCert.bat This tool will create a new set of Nginx SSL files based on the original DME SSL files, the default SSL password is rmi+ssl NewCertRequestNginx.bat Create a new set of SSL files and certificate request CreateDH4096.bat This will create a new dh4096.pem file (used by the Windows installer)
Agenda DME 4.5 Server highlights New SSL proxy server in front of the DME server New settings and features on the DME Server Upgrading DME to 4.5 on Windows (Demo) Questions Extra: install Nginx on Linux (Demo)
Questions?
Agenda DME 4.5 Server highlights New SSL proxy server in front of the DME server New settings and features on the DME Server Upgrading DME to 4.5 on Windows (Demo) Questions Extra: Install Nginx on Linux (Demo)