Kony Management Pre-installation Guide - Linux On-Premises Release V8 Document Relevance and Accuracy This document is considered relevant to the Release stated on this title page and the document version stated on the Revision History page. Remember to always view and download the latest document version relevant to the software release you are using. © 2017 by Kony, Inc. All rights reserved 1 of 123 Kony Management Linux Pre-install Guide Version 1.0 Copyright © 2017 Kony, Inc. All rights reserved. November, 2017 This document contains information proprietary to Kony, Inc., is bound by the Kony license agreements, and may not be used except in the context of understanding the use and methods of Kony, Inc., software without prior, express, written permission. Kony, Empowering Everywhere, Kony Fabric, Kony Nitro, and Kony Visualizer are trademarks of Kony, Inc. MobileFabric is a registered trademark of Kony, Inc. Microsoft, the Microsoft logo, Internet Explorer, Windows, and Windows Vista are registered trademarks of Microsoft Corporation. Apple, the Apple logo, iTunes, iPhone, iPad, OS X, Objective-C, Safari, Apple Pay, Apple Watch, and Xcode are trademarks or registered trademarks of Apple, Inc. Google, the Google logo, Android, and the Android logo are registered trademarks of Google, Inc. Chrome is a trademark of Google, Inc. BlackBerry, PlayBook, Research in Motion, and RIM are registered trademarks of BlackBerry. SAP® and SAP® Business Suite® are registered trademarks of SAP SE in Germany and in several other countries. All other terms, trademarks, or service marks mentioned in this document have been capitalized and are to be considered the property of their respective owners. © 2017 by Kony, Inc. All rights reserved 2 of 123 Kony Management Linux Pre-install Guide Version 1.0 Revision History Date Document Version Description of Modifications/Release 10/09/2017 1.0 Document published for V8 GA © 2017 by Kony, Inc. All rights reserved 3 of 123 Kony Management Linux Pre-install Guide Version 1.0 Table of Contents 1. Preface 6 1.1 Purpose 6 1.2 Intended Audience 6 1.3 Formatting Conventions 6 1.4 Supported Platforms 8 1.5 Contact Us 8 2. EMM Architecture and Components 9 3. EMM Disaster Recovery (DR) Architecture 13 3.1 DR Setup 13 3.2 DR Synchronization 14 4. System Requirements 15 4.1 Hardware Requirements 15 4.2 Software Requirements 18 4.3 Database Requirements 23 4.4 Linux Server Requirements 26 4.5 Linux User Requirements 29 4.6 Network-Related Prerequisites 40 4.7 Exchange Server Prerequisites 56 5. Windows 2008/2012 Server Setup 59 5.1 Setup SCEP and CA Server 60 © 2017 by Kony, Inc. All rights reserved 4 of 123 Kony Management Linux Pre-install Guide Version 1.0 5.2 Kony Exchange Service Setup 103 5.3 Kony Windows Mobile 6.x Group Policy service installation 105 5.4 Windows Server for Windows Phone App Wrapping 109 6. Apple Server for App Wrapping 114 6.1 Software Requirements 114 6.2 Install Xcode and iOS Simulators 114 6.3 Active SSH Access for Users after MAC OS Upgrade 116 6.4 Installing dos2Unix 116 7. Certificate Requirements 118 7.1 SSL Certificates 118 7.2 Device Certificates 119 8. Third-Party Systems 121 8.1 Google Maps API 121 8.2 Admin Email Settings 121 8.3 Active Directory Integration 121 8.4 Package Family Name (PFN) for Windows Notification Service (WNS) 122 9. Windows Mobile 6.x - SCMDM 2008 123 © 2017 by Kony, Inc. All rights reserved 5 of 123 1. Preface Kony Management Linux Pre-install Guide Version 1.0 1. Preface Enterprise Mobility Management (EMM) software is a policy configuration and management tool for hand-held mobile devices and corresponding applications on smartphones and tablets. EMM helps enterprises to manage complex communications between mobile devices by supporting security, network services, and software and hardware management across multiple OS platforms. EMM also supports bring your own device (BYOD) initiatives that has become the focus of many enterprises. It can support corporate and personal devices, and helps to support a more complex and heterogeneous environment. EMM supports Mobile Content Management. 1.1 Purpose The Pre-Installation Guide provides a list of resources that are to be kept ready prior to installation. Having these in place ensures a smooth installation process and easy deployment of Kony EMM. Details of installation of third-party software required shall not be provided in the document. Whereever applicable, links to appropriate resources are provided. Some elements described in this Guide will be configured / consumed after successful installation and start-up. 1.2 Intended Audience This document is intended for engineers or system administrators who will install and configure Kony EMM Console and Kony Enterprise Store. We assume that the reader of this document is familiar with deploying software on Red Hat Linux servers and installing a database on a Red Hat Linux Enterprise server. 1.3 Formatting Conventions The following formatting conventions are used throughout the document: © 2017 by Kony, Inc. All rights reserved 6 of 123 1. Preface Kony Management Linux Pre-install Guide Version 1.0 Conventions Explanation Monospace l User input text, system prompts and responses l File path l Commands l Program code l File names Italic l Emphasis l Names of books and documents l New terminology Bold l Windows l Menus l Buttons l Icons l Fields l Tabs l Folders URL Active link to a URL. Note Provides helpful hints or additional information. Important Highlights actions or information that might cause problems to systems or data. © 2017 by Kony, Inc. All rights reserved 7 of 123 1. Preface Kony Management Linux Pre-install Guide Version 1.0 1.4 Supported Platforms Supported Platforms are iOS, iPad, Android, Android Tablet, and Windows Phone 8.1. Other Device Operating Systems are not supported. 1.5 Contact Us We welcome your feedback on our documentation. Write to us at [email protected]. For technical questions, suggestions, comments or to report problems on Kony's product line, contact [email protected]. © 2017 by Kony, Inc. All rights reserved 8 of 123 2. EMM Architecture and Components Kony Management Linux Pre-install Guide Version 1.0 2. EMM Architecture and Components An overview of the EMM Architecture and Components is shown below: © 2017 by Kony, Inc. All rights reserved 9 of 123 2. EMM Architecture and Components Kony Management Linux Pre-install Guide Version 1.0 The following table describes components in more detail. Component Description Mobile Devices Mobile Devices with Launchpad application installed communicate with EMM and Tablets server over HTTPS. Also EMM console can be accessed on HTTPS port which is meant for Administrator use. Currently EMM supports iPhones, iPads, Android devices, Windows 6.x and Windows Phone 8 devices. Load Balancer SSL certificate needs to be installed on Load Balancer VIP for SSL offload. It and SSL is recommended to install “VeriSign Secure Site Pro” SSL which has the maximum device compatibility. Apache Server Apache servers will host static content, rewrite rules, maintain session affinity for backend Tomcat server based on cookies. Optionally, additional SSL certificates can be installed on Apache servers for an end to end SSL solution. Apache server allows to download binaries from device/web based on secure/encrypted URL. Encrypted URL is valid for particular amount of time (e.g. 3 minutes) NFS Server & To provide common mount solution, you need NFS server. Common mount NFS mount hosts app binaries and other static data. Common mount is attached to both Apache servers and Tomcat servers for multi-node environments. For high availability, a backup NFS server can be configured. User uploads App binaries in the Management console and Tomcat server stores these App binaries on common mount. Apache server serves App binaries from common mount to the device. Tomcat and Tomcat is the web server on which EMM is deployed. EMM app is a J2EE Memcached Web archive. Memcached is used for caching database queries. MAC Server MAC server is required to wrap and sign iOS apps. EMM server moves iOS apps on NFS mount to MAC on port 22 via SSH and performs wrap and sign /sign only actions. Signed apps are then placed on NFS mount and available for download via Apache server. This is mandatory to support App Management on iOS devices. © 2017 by Kony, Inc. All rights reserved 10 of 123 2. EMM Architecture and Components Kony Management Linux Pre-install Guide Version 1.0 Component Description Exchange Server Exchange server is required to send notification emails to users. EMM has the ability to use both SMTP port 25 and SMTPS port 465 over SMTP authentication. These ports need to be opened accordingly in the firewall. Using Kony Exchange service, you can block or unblock emails (clients). Blacklisted email clients cannot communicate with the Exchange server from your device. Active Directory EMM has the ability to import users and groups. User authentication is Server performed on Active Directory only. Please note that EMM just imports users but not their passwords. LDAP port 389 or LDAPS port 636 can be used for EMM server to connect AD server. These ports need to be opened accordingly in the firewall. Windows Server Windows Mobile 6.x devices communicate with Windows Server 2003 on 2003 HTTP/HTTPS using ports 80, 443, 8443. EMM server connects to Window Server 2003 to get device information. Windows 2003 server will also connect to the Windows Server 2008/2012 for Group policy management service. Windows Server SCEP server must be installed on Windows Server 2008/2012. Interaction 2008/2012 with SCEP server is mandatory in order to enroll iOS devices to EMM.