Install and configure 编辑

Before you start

You can use the following preinstallation checklist to note the prerequisites and settings for installing XenMobile on-premises. Each task or note includes a column indicating the component or function for which the requirement applies.

Planning a XenMobile deployment involves many considerations. For recommendations, common questions, and use cases for your complete XenMobile environment, see the XenMobile Deployment Handbook.

For installation steps, see the Install XenMobile section later in this article.

Preinstallation checklist

Basic Network Connectivity

The following are the network settings you need for the XenMobile solution.

Licensing

XenMobile requires you to purchase licensing options for Citrix Gateway and XenMobile. For more information about Citrix Licensing, see The Citrix Licensing System.

Certificates

XenMobile and Citrix Gateway require certificates to enable connections with other Citrix products and app and from user devices. For details, see the Certificates and Authentication section in the XenMobile documentation.

Ports

Open ports to allow communication with the XenMobile components.

Database

XenMobile requires database connection configuration. The XenMobile repository requires a Microsoft SQL Server database running on one of the supported versions noted in System requirements and compatibility. Citrix recommends using Microsoft SQL remotely. PostgreSQL is included with XenMobile. Use PostgreSQL locally or remotely only in test environments.

By default, XenMobile uses the jTDS database driver. To use the Microsoft JDBC driver for on-premises installations of XenMobile Server, see SQL Server drivers.

Active Directory Settings

Connections between XenMobile and Citrix Gateway

User Connections: Access to Citrix Virtual Apps and Desktops and Citrix Secure Hub

Citrix recommends that you use the Quick Configuration wizard in Citrix ADC to configure connection settings between XenMobile and Citrix Gateway and between XenMobile and Secure Hub. You create a second virtual server to enable user connections from Citrix Receiver and web browsers. Those connections are to Windows-based applications and virtual desktops in Virtual Apps and Desktops. Citrix recommends that you also use the Quick Configuration wizard in Citrix ADC to configure these settings.

Flowchart for XenMobile deployment

You can use this flowchart to guide you through the main steps for deploying XenMobile. Links to topics on each step follow the figure.

1: System requirements and compatibility

2: Install and configure

3 and 4: Preinstallation checklist (this article)

5: Configure XenMobile in the Command Prompt Window (this article)

6: Configure XenMobile in a web browser (this article)

7: Configuring Settings for Your XenMobile Environment

8: Port requirements

Install XenMobile

The XenMobile virtual machine (VM) runs on Citrix XenServer, VMware ESXi, or Microsoft Hyper-V. You can use XenCenter or vSphere management consoles to install XenMobile.

Note:

Ensure that the hypervisor is configured with the correct time – either using an NTP server or a manual configuration - because XenMobile uses that time. If you have time zone issues when syncing XenMobile time with a hypervisor, you can avoid the issues by pointing XenMobile to an NTP server. To do that, use the XenMobile CLI, as described in Command-line interface options.

XenServer or VMware ESXi prerequisites. Before installing XenMobile on XenServer or VMware ESXi, you must do the following. For details, see your XenServer or VMware documentation.

• Install XenServer or VMware ESXi on a computer with adequate hardware resources.
• Install XenCenter or vSphere on a separate computer. The computer that hosts XenCenter or vSphere connects to the XenServer or VMware ESXi host through the network.

Hyper-V prerequisites. Before installing XenMobile on Hyper-V, you must do the following. For details, see your Hyper-V documentation.

• Install Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 with Hyper-V enabled, role enabled, on a computer with adequate system resources. While installing the Hyper-V role, be sure to specify the NICs on the server that Hyper-V uses to create the virtual networks. You can reserve some NICs for the host.
• Delete the file Virtual Machines/<build-specific UUID>.xml
• Move the file Legacy/<build-specific UUID>.exp into Virtual Machines

If you install Windows Server 2008 R2 or Windows Server 2012, do the following:

These steps are necessary because there are two different versions of the Hyper-V manifest file representing the VM configuration (.exp and .xml). The Windows Server 2008 R2 and Windows Server 2012 releases support only .exp. For these releases, you must have only the .exp manifest file in place before installation.

Windows Server 2012 R2 does not require these extra steps.

FIPS 140-2 mode. To install XenMobile Server in FIPS mode, complete a prerequisite group, as discussed in Configure FIPS with XenMobile.

Download XenMobile product software

You can download product software from the Citrix website. Log on to the site and then use the Downloads link to navigate to the page containing the software you want to download.

To download the software for XenMobile

1. Go to the Citrix website.

2. Next to the Search box, click Log On and log on to your account.

3. Click the Downloads tab.

4. On the Downloads page, from the select a product list, click Citrix Endpoint Management (and Citrix XenMobile Server). The Citrix Endpoint Management (and Citrix XenMobile Server) page automatically appears.

   

5. Expand XenMobile Server (on-premises).

6. Expand Product Software.

7. Click XenMobile Server 10.

8. Click the Jump to Download menu and choose the appropriate virtual image to use to install XenMobile. Alternatively, scroll down the page to locate the Download File button for the image you want to install.

9. Follow the instructions on your screen to download the software.

To download the software for Citrix Gateway

You can use this procedure to download the Citrix Gateway virtual appliance or software upgrades to your existing Citrix Gateway appliance.

1. Go to the Citrix website.
2. If you are not already logged on to the Citrix website, next to the Search box, click Log On and log on to your account.
3. Click the Downloads tab.
4. On the Downloads page, from the select product list, click Citrix Gateway.
5. Click Go. The Citrix Gateway page appears.
6. On the Citrix Gateway page, expand the version of Citrix Gateway you are running.

7. Under Firmware, click the appliance software version you want to download.

   Note:

   You can also click Virtual Appliances to download Citrix ADC VPX. When you select this option, you receive a list of software for the virtual machine for each hypervisor.

8. Click the appliance software version you want to download.
9. On the appliance software page for the version you want to download, click Download for the appropriate virtual appliance.
10. Follow the instructions on your screen to download the software.

Configure XenMobile for First-Time Use

1. To configure the IP address and subnet mask, default gateway, DNS servers, and other settings for XenMobile: Use the XenCenter or vSphere command-line console.

   Note:

   When you use a vSphere web client: We recommend that you don’t configure networking properties during the time you deploy the OVF template on the Customize template page. By doing so in a high availability configuration: You avoid an issue with the IP address that occurs when you clone and then restart the second XenMobile virtual machine.

2. Access the XenMobile management console only through the XenMobile Server fully qualified domain name or the IP addresses of the node.

3. Log on and then follow the steps in the initial logon screens.

Configure XenMobile in the Command Prompt Window

1. Import the XenMobile virtual machine into Citrix XenServer, Microsoft Hyper-V, or VMware ESXi. For details, see XenServer, Hyper-V, or VMware documentation.
2. In your hypervisor, select the imported XenMobile virtual machine and start the command prompt view. For details, see the documentation for your hypervisor.

3. From the hypervisor console page, create an administrator account for XenMobile in the command prompt window by typing the administrator user name and password.

   When you create or change passwords for the command prompt administrator account, Public Key Infrastructure (PKI) server certificates, and FIPS: XenMobile enforces the following rules for all users except Active Directory users whose passwords are managed outside of XenMobile.

   • The password must be at least eight characters long.
   • The password must meet at least three of the following complexity criteria:
     • Uppercase letters (A through Z)
     • Lowercase letters (a through z)
     • Numerals (0 through 9)
     • Special characters (such as ! # $ %)

   

   No characters, such as asterisks, appear when you type the new password.

4. Provide the following network information and then, type y to commit the settings:
   1. IP address of the XenMobile Server
   2. Netmask
   3. Default gateway, which is the IP address of the default gateway in the DMZ
   4. Primary DNS server, which is the IP address of the DNS server

   5. Secondary DNS server (optional)

      

      Note:

      The addresses shown in this and following images are non-working and are provided as examples only.

5. Type y to increase security by generating a random encryption passphrase or n to provide your own passphrase. Citrix recommends typing y to generate a random passphrase.

   The passphrase is used as part of the protection of the encryption keys used to secure your sensitive data. A hash of the passphrase, stored in the server file system, is used to retrieve the keys during the encryption and decryption of data. The passphrase cannot be viewed.

   Note:

   If you intend to extend your environment and configure more servers, provide your own passphrase. If you select a random passphrase, you can’t view it.

   

6. Optionally, enable Federal Information Processing Standard (FIPS). For details about FIPS, see FIPS. Also, be sure to complete a prerequisite group, as discussed in Configure FIPS with XenMobile.

   

7. Provide the following information to configure the database connection.

   

   • Your database can be local or remote. Type l for local or r for remote.

   • Select the database type. Type mi for Microsoft SQL or type p for PostgreSQL.

     Important:

     • Citrix recommends using Microsoft SQL remotely. PostgreSQL is included with XenMobile. Use PostgreSQL locally or remotely only in test environments.
     • Database migration is not supported. Databases created in a test environment cannot be moved to a production environment.

   • Optionally, type y to use SSL authentication for your database.
   • Provide the fully qualified domain name (FQDN) for the server hosting XenMobile. This one host server provides both device management and app management services.
   • Type your database port number if it is different from the default port number. The default port for Microsoft SQL is 1433 and the default port for PostgreSQL is 5432.
   • Type your database administrator user name.
   • Type your database administrator password.
   • Type the database name.
   • Press Enter to commit the database settings.

8. Optionally, type y to enable clustering XenMobile nodes, or instances.

   Important:

   If you enable a XenMobile cluster, after system configuration completes, open port 80 to enable real-time communication between cluster members. Complete that setup on all cluster nodes.

9. Type the XenMobile Server fully qualified domain name (FQDN).

   

10. Press Enter to commit the settings.
11. Identify the communication ports. For details on ports and their uses, see Port Requirements.

    Note:

    Accept the default ports by pressing Enter (Return on a Mac).

    

12. Skip the next question about upgrading from a previous XenMobile release because you are installing XenMobile for the first time.

13. Type y if you want to use the same password for each Public Key Infrastructure (PKI) certificate. For details on the XenMobile PKI feature, see Uploading Certificates.

    

    Important:

    If you intend to cluster nodes, or instances, of XenMobile together, provide identical passwords for subsequent nodes.

14. Type the new password and then, reenter the new password to confirm it.

    No characters, such as asterisks, appear when you type the new password.

15. Press Enter to commit the settings.

16. Create an administrator account for logging on to the XenMobile console with a web browser. Be sure to record these credentials for later use.

    

    Note:

    No characters, such as asterisks, appear when you type the new password.

17. Press Enter to commit the settings. The initial system configuration is saved.
18. When asked if you’re upgrading, type n because it is a new installation.

19. Copy the complete URL that appears on the screen and continue this initial XenMobile configuration in your web browser.

    

Configure XenMobile in a web browser

After completing the initial portion of the XenMobile configuration in your hypervisor command prompt window, complete the process in your web browser.

1. In your web browser, navigate to the location provided at the conclusion of the command prompt window configuration.

2. Type the XenMobile console administrator account user name and password you created in the command prompt window.

   

3. On the Get Started page, click Start. The Licensing page appears.

4. Configure the license. If you don’t upload a license, you use an evaluation license valid for 30 days. For details on adding and configuring licenses and configuring expiration notifications, see Licensing.

   Important:

   If you intend to use XenMobile clustering by adding cluster nodes, or instances, of XenMobile, you must use the Citrix Licensing on a remote server.

5. On the Certificates page, click Import. The Import dialog box appears.

6. Import your APNs and SSL Listener certificate. iOS device management requires an APNs certificate. For details on working with certificates, see Certificates.

   Note:

   This step requires restarting the server.

7. If appropriate to the environment, configure Citrix Gateway. For details on configuring Citrix Gateway, see Citrix Gateway and XenMobile and Configuring Settings for Your XenMobile Environment.

   Note:

   • You can deploy Citrix Gateway at the perimeter of your internal network (or intranet). That deployment provides a secure single point of access to the servers, apps, and other network resources that reside in the internal network. In this deployment, all remote users must connect to Citrix Gateway before they can access any resources in the internal network.
   • Although Citrix Gateway is an optional setting: After you enter data on the page, you must clear or complete the required fields before you can leave the page.

8. Complete the LDAP configuration to access users and groups from Active Directory. For details on configuring the LDAP connection, see LDAP Configuration.

9. Configure the notification server to be able to send messages to users. For details on notification server configuration, see Notifications.

Post-requisite. Restart the XenMobile Server to activate your certificates.