Edge Device Manager Version R16 Quick Start Guide
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 Introduction....................................................................................................................................................4 Getting started with Edge Device Manager on public cloud........................................................................................ 4 Logging in......................................................................................................................................................................
1 Introduction Edge Device Manager is the next generation management solution that lets you centrally configure, monitor, manage, and optimize your Edge Gateway devices. It offers advanced feature options such as cloud versus on-premises deployment, manage-from-anywhere using a mobile application, enhanced security such as BIOS configuration and port lockdown.
Logging in IMPORTANT: You receive your credentials when you sign up for Edge Device Manager trial on www.wysemanagementsuite.com or when you purchase your subscription. You can purchase the Edge Device Manager subscription at the Dell sales or your local Dell partner. For more details, see www.wysemanagementsuite.com. To log into the management console, do the following: 1 Start a supported web browser on any machine with access to the internet .
Minimum CPU requirements 4 Network communication ports The EDM installer adds Transfer Control Protocol (TCP) ports 443, 8080, and 1883 to the firewall exception list. The ports are added to access the EDM console and to send the push notifications to the thin clients.
2 Installing Edge Device Manager on private cloud A simple installation of Edge Device Manager consists of the following: • Edge Device Manager server that includes repository for application and operating system images • Additional Edge Device Manager repository servers for image and applications and active directory authentication—Optional • HTTPS certificate from a certificate authority. For example, certificate issued by Geotrust, www.geotrust.
Figure 2. Setup type NOTE: A notification window is displayed, when the Internet Explorer Enhanced Security Configuration feature is enabled. Select the Turn off IE Enhanced Security Configuration check box to turn off the Internet Explorer enhanced security configuration. Figure 3. IE Enhanced Security Configuration 4 Select Typical as the Setup Type. Enter the new Database Credentials for the embedded databases. Also, enter the new Administrator Credentials and click Next.
Figure 4. Credentials 5 Select a path where you want to install the software, and the path to install the local tenant file repository. The default path of the destination folder to install the software is C:\Program Files\DELL\WMS. Figure 5. Destination 6 Click Next. The Pre-Installation Summary page is displayed. You can review your selections.
Figure 6. Summary 7 Click Next. The installer takes approximately 4–5 minutes to complete the installation. However, it may take longer if the dependent components such as VC-runtime are not installed on the system. Figure 7. Installation complete status 8 Click Launch. 9 On the Wyse Management Suite web console, click Get Started.
Figure 8. Welcome page 10 To enable Edge Device Manager on-premise and cloud, select the license type as Pro. You must import a valid Edge Device Manager license. If the server has internet connection you can import the Edge Device Manager license. To import the license key, log in to Edge Device Manager public cloud portal and enter the key into the license key field. Figure 9.
Figure 10. Portal administration c Enter the number of seats. d Click Export. NOTE: To export the license, select WMS 1.1 or WMS 1.0 from the drop-down list. The summary page shows the details of the license after the license is successfully imported. 11 Enter your Simple Mail Transfer Protocol (SMTP) server information, and click Save. NOTE: You can skip this screen and complete the setup or make changes later in the console. Figure 11.
NOTE: • By default, the Wyse Management Suite imports the self-signed SSL certificate that is generated during the installation to secure communication between the client and the Wyse Management Suite server. If you do not import a valid certificate for your Wyse Management Suite server, a security warning message is displayed when you access the Wyse Management Suite from a machine other than the server where it is installed.
Figure 14. Sign in page Figure 15. Dell Management Portal NOTE: Licenses can be upgraded or extended at a later point from the Portal Administration page.
Topics: • Logging in to Edge Device Manager • Functional areas of management console • Configuring and managing Edge Gateway devices • Creating a policy group and updating configuration • Registering devices to Edge Device Manager • Edge Device Manager Jobs • Publishing application to Edge Gateway devices Logging in to Edge Device Manager To log in to the management console, do the following: 1 If you are using Internet Explorer, disable the Internet Explorer Enhanced Security and the Compati
NOTE: System administrators can add rules to create groups. They can also assign devices to an existing group depending on the device attributes such as subnet, time zone, and location. You can also configure the following: • Settings or policies that apply to all devices in the tenant account which are set at the Default Policy group. These settings and policies are the global set of parameters that all groups and subgroups inherit from.
Creating a policy group and updating configuration 1 Log in as the administrator and enter the credentials. 2 To create a policy group, do the following: 3 a Select Groups and Configs and click the + button on the left pane. b Enter the group name and description. c Enter group token. d Click Save. Select a policy group, do the following: a Click Edit Policies and select Ubuntu Core. b Select System Personalization and click Configure this item.
Option Tag Description Code—165 devices in Edge Device Manager in public cloud, see Getting started with EDM on public cloud. Description—CCMServer Name—MQTT Data Type—String NOTE: Do not use https:// in the server URL, or the device will not register in Edge Device Manager. This tag directs the device to the Edge Device Manager Push Notification server (PNS). Code—166 To register your devices in Edge Device Manager public cloud, the device must point to the PNS (MQTT) servers in public cloud.
URL/Tag Description NOTE: Do not use https:// in the server URL, or the device will not register in Edge Device Manager. Record Name—_WMS_MQTT Record FQDN—_WMS_MQTT._tcp. Record Type—SRV This record directs the device to the Edge Device Manager Push Notification server (PNS). To register your devices in Edge Device Manager public cloud, the device must point to the PNS (MQTT) servers in public cloud. For example, US1—us1-pns.wysemanagementsuite.com EU1—eu1-pns.wysemanagementsuite.
5 • Ubuntu Core/Ubuntu Desktop Devices—\root\config\ccm-wda\ • Windows Devices—C:\config\ccm-wda Restart the device. Edge Device Manager Jobs Edge Device Manager creates job for any task such as reboot, Wake On LAN, and application policy that need to be deployed to the registered devices. Administrator can track the status of job by navigating to the Jobs tab in the Edge Device Manager web console. For more information, see Edge Device Manager R16 Administrator’s guide.
Figure 17. Ubuntu Core App Policy a Enter the policy name. b From the drop-down menus, select the group, Ubuntu Core App, and task. c Enter the configuration parameters in Config Params. d From the Apply Policy Automatically drop-down list, select Apply the policy to new devices, to automatically apply this policy to a device that is registered with Edge Device Manager and belongs to a specified group or is moved to a specified group.
3 Uninstalling Edge Device Manager To uninstall Edge Device Manager, do the following: 1 Go to Add/Remove Programs and select Wyse Management Suite. The uninstaller wizard is initiated, and the Edge Device Manager uninstaller screen is displayed. 2 22 Click Next. By default, the Remove radio button is selected that uninstalls all the Edge Device Manager installer components.
4 Troubleshooting Edge Device Manager This section provides troubleshooting information for Wyse Management Suite. Problems with accessing Edge Device Manager web console • Problem: When you attempt to connect to the Edge Device Manager console, authentication GUI is not displayed and an HTTP Status 404 page is displayed.
• If automatic discover is enabled, check if DHCP or DNS SRV records are configured correctly. Also, check the server URL and the group tokens. • Check if you can register the device manually. • Check if you are using self-signed or well known certificates. NOTE: By default Wyse Management Suite installs self-signed certificates. CA validation must be disabled for devices to communicate with the Edge Device Manager server.
A Introduction to remote database A remote or cloud database (DB) is a database that is built for a virtualized environment, such as hybrid cloud, public cloud, or private cloud. In Wyse Management Suite, you can configure either the Mongo database (MongoDB) or the Maria database (MariaDB) or both databases based on your requirement.
user:"wmsuser", pwd:"PASSWORD", roles:[{role:"userAdminAnyDatabase",db:"admin"}, {role:"dbAdminAnyDatabase",db:"admin"}, {role:"readWriteAnyDatabase",db:"admin"}, {role:"dbOwner",db:"stratus"}] } ) 12 To switch to the stratus database, run the following command: use stratus; 13 To stop the MongoDB services, run the following command: net stop mongoDB 14 Add an authentication permission to the admin DB. Modify the mongod.cfg file to the following: systemLog: destination:file path:c:\data\log\mongod.
B Custom installation In custom installation, you can select a database to set up Edge Device Manager, and you must know the basic technical working knowledge of Edge Device Manager. Dell recommends custom installation only for advanced users. 1 Select the Setup Type as Custom, and click Next. Figure 18. Setup type The Mongo Database Server page is displayed. 2 Select either Embedded MongoDB or External MongoDB as the Mongo database server.
Figure 19. Mongo Database Server • If External MongoDB is selected, then provide user name, password, database server details, and the port details, and click Next. NOTE: The port field populates the default port which can be changed. Figure 20. Mongo Database Server The MariaDB Database Server page is displayed. 3 Select either Embedded MariaDB or External MariaDB as the MariaDB database server. • 28 If Embedded MariaDB is selected, provide user name and password, and click Next.
Figure 21. MariaDB Database server • If External MariaDB is selected, provide user name, password, database server details and the port details, and click Next. The port field populates the default port which can be changed. Figure 22. MariaDB Database server 4 The Port page is displayed which allows you to customize the ports for the following databases: • Apache Tomcat • MySQL database • Mongo database • MQTT v3.
Figure 23. Port Selection NOTE: Edge Device Manager uses the Maria database and Mongo database for the following: Maria database—Relational database for data that requires well-defined structure and normalization Mongo database—No-SQL database for performance and scalability To complete the installation, follow the steps in the section Installing Edge Device Manager on private cloud.
C Feature list • Highly scalable solution to manage Edge Gateway devices • Group based management • Multi Level Groups and Inheritance • Configuration Policy management • View effective configuration at device level after inheritance • Application policy management • Asset, Inventory and Systems management • Automatic device discovery • Real-time commands • Smart Scheduling • Alerts, Events and Audit logs Secure communication (HTTPS) • Manage devices behind firewalls • Mobile app •
D Creating and configuring DHCP option tags To create a DHCP option tag, do the following: 1 Open the Server Manager. 2 Go to Tools and click DHCP option. 3 Go to FQDN > IPv4 and right-click IPv4. Figure 24. DHCP 4 Click Set Predefined Options. The Predefined Options and Values window is displayed. 5 32 From the Option class drop-down menu, select the DHCP Standard Option value.
Figure 25. Predefined Options and Values 6 Click Add. The Option Type window is displayed. Figure 26. Option Type The options need to be either added to the server options of the DHCP server or scope options of the DHCP scope. Configuring the DHCP option tags • To create the 165 Wyse Management Suite server URL option tag, do the following: a Enter the following values and click OK.
• b Description—WMS_Server Enter the following value and then click OK. String—WMS FQDN For example, WMSServerName.YourDomain.Com:443. Figure 27. 165 Wyse Management Suite server URL option tag • To create the 166 MQTT server URL option tag, do the following: a b Enter the following values and click OK. • Name—MQTT • Data type—String • Code—166 • Description—MQTT Server Enter the following value and click OK. String—MQTT FQDN For example, WMSServerName.YourDomain.
Figure 28. 166 Wyse Management Suite server URL option tag • To create the 167 Wyse Management Suite CA Validation server URL option tag, do the following: a b Enter the following values and click OK. • Name—CA Validation • Data type—String • Code—167 • Description—CA Validation Enter the following values, and click OK.
Figure 29. 167 Wyse Management Suite server URL option tag • To create the 199 Wyse Management Suite Group Token server URL option tag, do the following: a b Enter the following values and click OK. • Name—Group Token • Data type—String • Code—199 • Description—Group Token Enter the following values and click OK.
Figure 30.
E Creating and configuring DNS SRV records To create a DNS SRV record, do the following: 1 Open the Server Manager. 2 Go to Tools and click DNS option. 3 Go to DNS > DNS Server Host Name > Forward Lookup Zones > Domain > _tcp and right-click the _tcp option. Figure 31. DNS Manager 4 Click Other New Records. The Resource Record Type window is displayed.
Figure 32. Resource Record Type a To create Wyse Management Suite server record, enter the following details and click OK.
Figure 33. _WMS_MGMT service b 40 To create MQTT server record, enter the following values, and then click ÓK.
Figure 34. _WMS_MQTT service 6 Go to DNS > DNS Server Host Name > Forward Lookup Zones > Domain and right-click the domain. 7 Click Other New Records.
Figure 35. Resource Record Type a 42 To create Wyse Management Suite Group Token record, enter the following values, and click OK.
Figure 36. _WMS_GROUPTOKEN record name b To create Wyse Management Suite CA validation record, enter the following values, and then click OK.
Figure 37.
F Supported devices • Edge gateway 5000 running Windows 10 LTSB 15 • Edge gateway 3000 running Ubuntu Core 16 • Edge gateway 3000 running Windows 10 IoT LTSB 2016 • Edge gateway 5000 running Ubuntu Core 16 • Edge gateway 5000 running Windows 10 IoT LTSB 2016 • Embedded PC 3000 running Windows 7 Pro • Embedded PC 3000 running Windows 7 Pro for FES • Embedded PC 3000 running Windows Embedded Standard 7P • Embedded PC 3000 running Windows Embedded Standard 7E • Embedded PC 3000 running Windo
G Support matrix Supported operating system The following are the supported operating systems for Edge Gateway and Embedded PC: Edge Gateway—3000 series • Ubuntu Core 16 • Windows 10 IoT Enterprise 2016 LTSB Edge Gateway—5000 series • Ubuntu Core 16 • Windows 10 IoT Enterprise 2015 LTSB • Windows 10 IoT Enterprise 2016 LTSB Embedded PC • Ubuntu Desktop 16.
H Terms and definitions The following table lists the terms used in this document and their definitions: Table 4. Terms and definitions Terminology Definition Private cloud Wyse Management Suite server installed on the cloud that is private to your organization’s datacenter. WDA Wyse Device Agent which resides in the device and acts as an agent for communication between server and client.