Systemwalker Desktop Keeper Installation Guide

2.9.3 Configuring the Operating Environment of the Smart Device Relay Server

This section explains how to configure the operating environment of the Smart Device Relay Server.

2.9.3.1 Setting Smart Device Information

For each smart device (Android device or iOS device) to be managed, configure the settings below.

• Android device:

  1. Use SDSVSetMS.EXE (change configuration of Smart Device Relay Server command) to set the following:

     - Enable management of Android devices: Specify the -Android.enabled option.

     - Set the Management Server or Master Management Server: Specify the -h option.

  2. If the default port number (48080) must be changed, refer to "How to Modify the Port Number Being Used" in the Systemwalker Desktop Keeper Reference Manual and change the port number.

  3. To perform HTTPS communication with a smart device (agent) (Android), build a certificate environment for HTTPS communication.
     Refer to "2.9.3.2 Configuring HTTPS Communication" for details. The procedure is the same as that for managing iOS devices, so you do not need to configure the settings if you have done so on an iOS device.

  4. Use SDSVService.bat (start/stop service of Smart Device Relay Server command) to start the Smart Device Relay Server.

  Note

  The items set in steps 2 and 3 (except for the Management Server and Master Management Server ports in step 2) are also used by Systemwalker Desktop Patrol. If you have already set these items in Systemwalker Desktop Patrol, you do not need to set them here.

• iOS device:

  Point

  You can configure the settings in steps 1 to 4 below at one time.

  1. Enable management of iOS devices.
     Execute SDSVSetMS.EXE (change configuration of Smart Device Relay Server command) with the -iOS.enabled option.

  2. Set the Management Server and Master Management Server.
     Execute SDSVSetMS.EXE with the -h option.
     This procedure is the same as that for managing Android devices, so you do not need to configure the settings if you have done so on an Android device.

  3. Set the server or reverse proxy that is to be connected to from the iOS device.
     Execute SDSVSetMS.EXE with the -iOS.connect.h, -iOS.connect.p, and -iOS.connect.profile.p options.

  4. Set the iOS management database.
     Execute SDSVSetMS.EXE with the -iOSmgr.h option.
     To manage iOS devices with Systemwalker Desktop Keeper only, specify the Management Server.
     To manage iOS devices even with Systemwalker Desktop Patrol, specify the Management Servers or Systemwalker Desktop Patrol CSs that are running the iOS management database.
     Do not change this setting after configuring it.

  5. If necessary, change the default port number (55432) to be used for communication with the iOS management database.,
     Refer to "How to Modify the Port Number Being Used" in the Systemwalker Desktop Keeper Reference Manual for details.

  6. Build the certificate environment to perform HTTPS communication with a smart device (agent) (iOS),.
     Refer to "2.9.3.2 Configuring HTTPS Communication" for details.
     The procedure is the same as that for managing Android devices, so you do not need to configure the settings if you have done so on an Android device.

  7. Install the MDM certificate prepared in "2.2 Advance Preparation".
     Execute swss_ImportAppleCert.bat (register Apple Inc. certificate command).

  8. Start the Smart Device Relay Server.
     Execute SDSVService.bat (start/stop service of Smart Device Relay Server command).

Refer to "Command Reference" in the Systemwalker Desktop Keeper Reference Manual for details on each command.

Note

Notes regarding coexistence with Systemwalker Desktop Patrol SS

• The following options of SDSVSetMS.EXE (change configuration of Smart Device Relay Server command) in steps 1 to 4 are used only in Systemwalker Desktop Keeper:

  • -h

  • -p

  • -Android.http.p

  • -Android.https.p

  • -Android.enabled

  • -iOS.enabled

• The following items options of SDSVSetMS.EXE (change configuration of Smart Device Relay Server command) are also used in Systemwalker Desktop Patrol:

  • -iOSmgr.h

  • -iOSmgr.p

  • -iOS.profile.p

  • -iOS.https.p

  • -iOS.connect.h

  • -iOS.connect.p

  • -iOS.connect.profile.p

• The items set in steps 6 and 7 are also used in Systemwalker Desktop Patrol.

• For items also used in Systemwalker Desktop Patrol, specify the same values in both products.
  After the items are set in Systemwalker Desktop Keeper, specifying different values in the same items in Systemwalker Desktop Patrol will result in the settings initially configured in this product changed to the new values specified in Systemwalker Desktop Patrol. After the items are set in Systemwalker Desktop Patrol, specifying different values in the same items in this product will result in the settings initially configured in Systemwalker Desktop Patrol changed to the new values specified in this product.

2.9.3.2 Configuring HTTPS Communication

This section describes how to configure HTTPS communication between the Smart Device Relay Server and a smart device (agent). The configuration procedure depends on whether the server certificate used is prepared by the user or is the Systemwalker certificate.

Settings during installation of the certificate

Perform the procedure below to configure the settings:

If using a server certificate prepared by the user:

1. Use SDSVMakeCSR.exe to generate the certificate signature request for the server certificate.

2. Send the certificate signature request that was generated in step 1 to the CA, to obtain the CA certificate (intermediate CA certificate) and server certificate issued by the CA.

3. Use SDSVService.bat to stop the Smart Device Relay Server.

4. Use SDSVImportCert.exe to register the CA certificate (intermediate CA certificate) obtained in step 2.

5. Use SDSVImportCert.exe to register the server certificate obtained in step 2.

6. Use SDSVConfig.exe to enable the use of the server certificate prepared by the user.

7. Use SDSVService.bat to start the Smart Device Relay Server.

Note

If step 5 is mistakenly performed before step 4, repeat the procedure from step 1.

If using the Systemwalker server certificate:

1. Use SDSVMakeCSR.exe, and specify the -certfile option to generate a server certificate.

2. Use SDSVService.bat to stop the Smart Device Relay Server.

3. Execute SDSVImportCert.exe with the -CACERT option specified.

4. Use SDSVImportCert.exe to register the server certificate generated in step 1.

5. Use SDSVConfig.exe to enable the use of the server certificate that you registered in step 4.

6. Use SDSVService.bat to start the Smart Device Relay Server.

Note

If step 4 is mistakenly performed before step 3, repeat the procedure from step 1.

Certificate renewal settings

Perform the procedures below to configure the settings:

If using a server certificate prepared by the user:

1. Use SDSVMakeCSR.exe to generate the certificate signature request for the server certificate.

2. Send the certificate signature request that was generated in step 1 to the CA, to obtain the server certificate issued by the CA.

3. Use SDSVService.bat to stop the Smart Device Relay Server.

4. Use SDSVImportCert.exe to register the server certificate obtained in step 2.

5. Use SDSVService.bat to start the Smart Device Relay Server.

If using the Systemwalker server certificate:

1. Use SDSVMakeCSR.exe, and specify the -certfile option to generate a server certificate.

2. Use SDSVService.bat to stop the Smart Device Relay Server.

3. Use SDSVImportCert.exe to register the server certificate generated in step 1.

4. Use SDSVService.bat to start the Smart Device Relay Server.

Refer to "Command Reference" in the Systemwalker Desktop Keeper Reference Manual for details on each command.

Note

In coexistence with the SS of Systemwalker Desktop Patrol V15.0.0 or later, if a certificate is registered in Systemwalker Desktop Patrol after another certificate is registered in Systemwalker Desktop Keeper, then the certificate registered in Systemwalker Desktop Patrol will be used for HTTPS communication between iOS devices and the Smart Device Relay Server.