xenmobile and beyond! · => xenmobile device manager bring your own (byo) devices are not owned;...

Brussels 2014 #E2EVC

XenMobile and beyond!

PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman

http://www.citrix.nl/



Agenda

XenMobile Introduction: Editions, Features & Architecture

XenMobile Device Manager: Features & Lessons Learned

XenMobile AppController: Features & Lessons Learned

XenMobile Enterprise: Features & Lessons Learned

XenMobile Deep Dive: Authentication proces Troubleshooting

Citrix Workspace Suite: The future of Xen!

2

Important notes during presentation!


Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace


About Esther

15+ years of Technical Consulting Senior Consultant at PepperByte MSc Computer Science Design | Implement | Troubleshooting Small <-> Large infrastructures Government | Industry | Commerce

Author of: Citrix XenApp 6.5 Expert Cookbook

3

Your Presenter: Esther Barthel Senior Technical Consultant

@virtues_IT http://nl.linkedin.com/in/ebarthel http://www.virtues.it



About Martijn

4

Soccer referee

15 years working in IT CCE-V, CCP-M, CCEE, MCITP, CCIA Bachelor of Engineering in Logistics Gouvernement, Healthcare, Construction Design, Build, Advice 200 – 10000+ seats Internal teacher for GO

Avid Cyclist


Your Presenter: Martijn Hulsman Senior Technical Consultant

@MartijnHS nl.linkedin.com/pub/martijn-hulsman/6/95/371 http://martijn2share.wordpress.com/


Definitions & Features

5





6





7




XenMobile Enterprise (Architecture)

8




9




10




11




12



XenMobile Device Manager

13




XDM: Device Manager

Windows Server InstallApache Web ServerDatabase is essential

Additional config in web console

14




XDM: Pre-install checklist

XenMobile Pre-install checklist eDocs: http://tinyurl.com/XMPreInstallChecklist

15



http://tinyurl.com/XMPreInstallChecklist


XDM: Pre-install checklist

XenMobile Pre-install checklist eDocs: http://tinyurl.com/XMPreInstallChecklist

16

All pre-install checks are required to install XenMobile Device Manager, without licenses, certificates and FQDNs the

installation cannot complete.



http://tinyurl.com/XMPreInstallChecklist


XDM: Installation & Configuration

XenMobile Device Manager installation eDocs: http://tinyurl.com/XDMInstall

NetScaler configuration Citrix Blog: http://tinyurl.com/XDMSSLOffloading

Citrix Blog: http://tinyurl.com/XDMSSLOffloading2

17



http://tinyurl.com/XDMInstall

http://tinyurl.com/XDMSSLOffloading

http://tinyurl.com/XDMSSLOffloading2


XDM: Installation & Configuration

XenMobile Device Manager installation eDocs: http://tinyurl.com/XDMInstall

NetScaler configuration Citrix Blog: http://tinyurl.com/XDMSSLOffloading

Citrix Blog: http://tinyurl.com/XDMSSLOffloading2

18


Use the self signed certificates created by the installer


http://tinyurl.com/XDMInstall

http://tinyurl.com/XDMSSLOffloading

http://tinyurl.com/XDMSSLOffloading2


XDM: Manage corporate devices

Create a LDAP connection to a user directory

Define users and groups

Create policies

Create deployment packages

Enroll users and devices

19




XDM: Manage corporate devices

Create a LDAP connection to a user directory

Define users and groups

Create policies

Create deployment packages

Enroll users and devices

20

Separate policies and deployment packages need to be

created for each device (OS) type



Brussels 2014 #E2EVC 21

XDM: MDM Policies

Create MDM policies per OS type




XDM: MDM Policies



Mobile OS policy options depend upon available APIs per device (OS) type



XDM: MDM Policies



Android iOS Win Phone 8



XDM: Deployment packages

24

Use deployment packages to enforce device configurations

Packages are build using configuration policies




XDM: Enrolling Users and Devices

25

To enroll iOS devices an APNS certificate is required.




XDM: Lessons Learned

Certificates … and more certificates: SSL certificates

Use a wildcard certificate for external SSL Use your own root CA/PKI for internal SSL

Add root CA to NS, XDM and XAC cert store

Use XDM self-signed certificates during install

Apple Push Notification Server Request certificate before XDM install Citrix is required to sign certificate

26




XDM: Lessons Learned

URLs and FQDNs: What’s the URL again?

Get all DNS FQDNs in place before install Use simple URLs that are easily remembered

Auto Discovery Auto Discovery record => Citrix Cloud Ops Auto Discovery Windows => Citrix Cloud Ops Auto discover => UPN instead of SAMAccountName

27




XenMobile AppController

28




XAC: Installation & Configuration

App Controller configuration: eDocs: http://tinyurl.com/XACConfig

NetScaler configuration: Knowledge Center: http://support.citrix.com/article/CTX139319

29



http://tinyurl.com/XACConfig

http://support.citrix.com/article/CTX139319


XAC: AppController

Virtual appliance XenServer/vShpere/Hyper-V

Initial network config in console Additional config in web console

30




XAC: Enterprise App Store

Deploy sandboxed Mobile Apps (Android & iOS), Web & SaaS and Windows (published apps)

31




XAC: MDX enabled apps

MDX Toolkit (a.k.a. Worx App SDK) Wrap native iOS (.ipa) / Android (.apk) packages Include application policies (restrictions/pre-config)

iOS MDX Policies: http://tinyurl.com/MDXPoliOS Android MDX Policies: http://tinyurl.com/MDXPolAndroid

32



http://tinyurl.com/MDXPoliOS

http://tinyurl.com/MDXPolAndroid





33









34

The MDX Toolkit only runs on Mac OSX






XAC: microVPN tunnel

microVPN tunnel to internal resources

35




XAC: microVPN tunnel

microVPN tunnel to internal resources

36




XAC: Application Containers

MDX App Vault (sandboxed on device) MDX App Interaction

37




XAC: Application Containers

MDX App Vault (sandboxed on device) MDX App Interaction

38




XAC: WorxWeb

MDX Enabled Pre configured Intranet Browser

39




XAC: WorxWeb

MDX Enabled Pre configured Intranet Browser

40

WorxWeb is not MDX enabled by default.

You’ll need to wrap it yourself with the MDX Toolkit.




XAC: WorxMail

MDX Enabled Pre configured Mail client

41




XAC: WorxMail

MDX Enabled Pre configured Mail client

42

Save mobile device battery life and check out the

new STA method with WorxMail!

Citrix Blog: http://tinyurl.com/XACSTAtotherescue



http://tinyurl.com/XACSTAtotherescue


XAC: Lessons Learned

Certificates … and more certificates: SSL certificates

Separate URL for AppController Direct connections to StoreFront for laptops

43




XAC: Lessons Learned

Application wrapping: Get an Enterprise Apple Developer Account

Personal account is limited to max. 100 devices

MDX wrapper only runs on Mac OSX Virtual Mac doesn’t work Android apps also require the MDX toolkit

44




XenMobile Enterprise

XenMobile

EnterpriseEdition

Attachment EncryptionShareFile Enterprise

EMM

45




Enterprise: Component integration

46

Connect Device Manager to App Controller eDocs: http://tinyurl.com/XDMXACIntegration

Connect App Controller to ShareFile ShareFile support: http://tinyurl.com/XACSFIntegration

eDocs: http://tinyurl.com/XACSFIntegration2



http://tinyurl.com/XDMXACIntegration

http://tinyurl.com/XACSFIntegration

http://tinyurl.com/XACSFIntegration2


ShareFile Enterprise: StorageZone Connectors

47




Enterprise: How to enable mobile computing?

Choose Your Own (CYO) Corporate Devices are owned; can be controlled

=> XenMobile Device Manager Bring Your Own (BYO)

Devices are not owned; less control Corporate apps are owned; can be controlled Enterprise App Store:

MDX wrapped = Secure corporate apps & interactions Single store for all corporate apps Seamless migrate from Windows apps => Mobile apps

=> XenMobile AppController

48




Enterprise: Lessons Learned

Integration challenges: Test each component and route before integratingUse internal PKI infra to enable certificated basedauthentication

Troubleshooting: Always use a test device! Check the XenMobile Logs Collection Guide


49





Enterprise:Sharefile lessons learned

50

Sharefile Enterprise account provisioning https://<appcontroller>.yourdomain.domain/admin




Enterprise: Lessons Learned

One more thing …

51




About Rink

52

Soccer referee

15 years working in IT CCE-V, CCP-M, CCEE, MCITP, CCP-N Gouvernement, Healthcare,

Construction Design, Build, advice 200 – 10000+ seats

PepperByte: Esther Barthel Groupe OPEN: Rink Spies

Your Presenter: Rink Spies Senior Technical Consultant

@Rink76 https://www.linkedin.com/pub/rink-spies/0/b62/792 http://Rink76.wordpress.com/



XenMobile Enterprise

53

PepperByte: Esther Barthel Groupe OPEN: Rink Spies



XenMobile Deep Dive

Authentication proces Troubleshooting

54


PepperByte: Esther Barthel Citrix: Karen Sciberras


Citrix Workspace Suite

55


“the most complete, integrated mobility solution for

helping people and business become more productivewith an on-demand mobile workspace.”




56


XenApp mobilizes and secures Windows apps on any device

XenDesktop securely delivers virtual Windows desktops and apps on any device

XenMobile manages and secures mobile, web, and SaaS apps on mobile devices

seamlessly and securely unites apps, data and services on any device

ShareFile shares and syncs corporate data securely from any location

GoToMeeting empowers people to meet and collaborate with anyone, anywhere

NetScaler optimizes and secures app delivery on any network

CloudBridge accelerates app delivery to remote workers on any network

CloudPlatform orchestrates and provisions apps, desktops and IT services from any cloud




57





58




Presented by: Esther Barthel Senior Technical Consultant

@virtues_IT http://nl.linkedin.com/in/ebarthel http://www.virtues.it

Martijn Hulsman Senior Technical Consultant

@MartijnHS http://nl.linkedin.com/pub/martijn-hulsman/6/95/371 http://martijn2share.wordpress.com/

59


Groupe OPEN: Rink SpiesCitrix: Karen Sciberras




Resources

60

Citrix eDocs XenMobile Solution Pre-Installation Checklist

http://support.citrix.com/proddocs/topic/xenmobile-87/xmob-prepare-xenmobile-checklist-con.html

XenMobile Logs collection guidehttp://support.citrix.com/article/CTX139421

Community Robin Hobo: Installing and Configuring Citrix XenMobile MDM 8.6

http://www.robinhobo.com/installing-configuring-citrix-xenmobile-mdm-8-6/

Adam Gamble: How to XenMobile MDM 8.5 Deploymenthttp://adamgamble.org/2013/09/08/how-to-xenmobile-mdm-8-5-deployment-part-3-policies/

Rink Spies: Citrix XenMobile : Lessons learned in real lifehttp://rink76.wordpress.com/2014/05/05/citrix-xenmobile-lessons-learned-in-real-life/


http://support.citrix.com/proddocs/topic/xenmobile-87/xmob-prepare-xenmobile-checklist-con.html


http://www.robinhobo.com/installing-configuring-citrix-xenmobile-mdm-8-6/

http://adamgamble.org/2013/09/08/how-to-xenmobile-mdm-8-5-deployment-part-3-policies/

http://rink76.wordpress.com/2014/05/05/citrix-xenmobile-lessons-learned-in-real-life/

xenmobile and beyond! · => xenmobile device manager bring your own (byo) devices are not owned;...

Documents