Overview
This guide provides instructions on how to install ZENworks Mobile Workspace without graphical user interface. Before you start with the installation, it is recommended that you review your environment with the help of the integration document.
Installation
To start the setup, go to the location of the installation archive on your computer. Extract its content to a new folder.
mkdir -p 3.16; cd 3.16; tar xf ../ zmw_316_linux.tar.gz
To run properly, installation script must be started in privileged mode (as root).
sudo ./install.sh
Language selection
Start by selecting your language and click OK.
Please select your language below, type: 0 for eng 1 for fra language [0]:
Welcome
A welcome screen will be displayed
Welcome to the installation of ZENworks Mobile Workspace 3.16.0! - Micro Focus <support@microfocus.com> The homepage is at: http://www.microfocus.com/ press 1 to continue, 2 to quit, 3 to redisplay 1
After each screen, type 1 and press Enter to go next.
License agreement
In order to continue the installation, you must read and accept the terms of the presented license agreement.
Set installation path
Here you select where you want to install the ZENworks Mobile Workspace server. The setup program suggests a default
target path. You can accept it by pressing Enter or type the path of your choice and press Enter to validate.
Select ZENworks Mobile Workspace installation path [/opt/zenworksmobileworkspace] press 1 to continue, 2 to quit, 3 to redisplay 1
After selecting the installation path, some required data will be generated.
Shared key generated Database password generated
Synchronization settings
Enter the settings for one of the following infrastructure configurations:
-
ZENworks Mobile Workspace with Active Directory
-
ZENworks Mobile Workspace with IBM Lotus Domino server
-
ZENworks Mobile Workspace with NetIQ eDirectory
Bind ZENworks Mobile Workspace with Active Directory
To set up LDAP synchronization with Active Directory, ensure to fill in the following required information:
-
LDAP hostname (e.g. ldap://example.local): The URL of your Active Directory domain (or single Active Directory Domain Controller).
-
LDAP base (e.g. dc=example,dc=local): The base context under which users to synchronize are located in Active Directory.
-
Domain name alias (e.g. example): The ZENworks Mobile Workspace domain that end users may use to login into the workspace. (e.g. With the domain alias example.local,” end users will be allowed to login with username@example.local.)
-
Username for LDAP queries (e.g. bind-user@example.local): A service account with read rights.
-
Password for LDAP queries: The password related to the above account.
Bind ZENworks Mobile Workspace with an IBM Lotus Domino server
ZENworks Mobile Workspace, when used with your own Lotus Domino server, will synchronize groups and users with the LDAP server within your Domino environment. You will need to enter the following information to accommodate that:
-
LDAP hostname (e.g. ldap://ldap.domino.local): The URL of your Lotus Domino server
-
LDAP base: Leave blank.
-
Domain name alias (e.g. domino): The ZENworks Mobile Workspace domain that end users may use to login into the workspace. (e.g. With the domain alias domino end users will be allowed to login with username@domino.)
-
Username for LDAP queries (e.g. bind-user): An user’s account with read rights.
-
Password for LDAP queries: The password related to the above account.
Bind ZENworks Mobile Workspace with NetIQ eDirectory
ZENworks Mobile Workspace, when used with NetIQ eDirectory, will synchronize groups and users with your eDirectory server. You will need to enter the following information to accommodate that:
-
LDAP hostname (e.g. ldap://edirectroy.example.local): The URL of your eDirectory server
-
LDAP base (e.g. O=example): The base context under which users to synchronize are located in the LDAP directory.
-
Domain name alias (e.g. groupwise): The ZENworks Mobile Workspace domain that end users may use to login into the workspace. (e.g. With the domain alias groupwise end users will be allowed to login with username@groupwise.)
-
Username for LDAP queries (e.g. cn=bind-user,ou=users,O=example): The distinguished name (DN) of an account with read rights.
-
Password for LDAP queries: The password related to the above account.
| If you want to use a limited rights account for the eDirectory synchronization, the selected account needs to have read rights to the CN attribute for group objects. |
ZENworks Mobile Workspace External address
In this panel you must specify the external address which will be used by the ZENworks Mobile Workspace client to reach the server. The address must be entered as it will be seen from the internet.
| Examples: https://mobile.example.com, http://mobile.example.com:8080, https://mobile.example.com:9443 |
Trusted TLS/SSL certificate
To follow best practices, Sysmosoft strongly recommend to purchase a SSL certificate from a well-known certificate authority. This is mandatory to ensure best in class security and user friendliness.
ZENworks Mobile Workspace in front
The presented certificate will be directly installed on ZENworks Mobile Workspace server. You will be able to provide the certificate in the next panel.
The presented certificate is installed on a reverse proxy. You will be requested to install a certificate in the next panel.
Internally signed TLS certificate
If you have an internal PKI, you could use your certificate signed by your CA but the CA certificate must be installed and trusted on the device as well. You will be able to provide the certificate in the next panel.
Self-Signed TLS certificate
Self-signed certificates are not accepted by mobile constructor. Therefore, no TLS connection can established using this method. Use HTTP connection instead.
ZENworks Mobile Workspace Encryption only
For testing or demonstration purpose, it is possible to use ZENworks Mobile Workspace without TLS connection. Then, only the ZENworks Mobile Workspace encryption will keep your data safe.
Import TLS certificate
Here you must enter the location and password of your server certificate key pairs (PKCS12 format).
--- SENSE TLS settings --- Select the certificate to import [/path/to/certificate.p12]: /root/downloads/example.p12 Private key's password: example Import successful! press 1 to continue, 2 to quit, 3 to redisplay 1
Email settings
Enter the settings that match your mail server:
-
Server type (e.g. Exchange, Office365, Domino or GroupWise): Select the type of mail server you have according to your infrastructure. If you select Office365, Connect using TLS ? and Hostname fields will be automatically filled in.
-
Hostname (e.g. exchange.example.com): The hostname or ip address of your mail server.
-
Connect using TLS ?: Select it if your Exchange server needs to be connected with an SSL connection. For Domino, please follow instructions in the knowledge base article: Enable TLS Connection Between ZENworks Mobile Workspace and IBM Domino
-
Always trust TLS connection: This option must be used only if your mail server does not use an TLS certificate signed by a trusted CA or uses a self-signed certificate.
-
Username and password for test: Enter username or password if you want to test entered information.
--- ZENworks Mobile Workspace Mail settings --- Options are: - type 1 for Microsoft Exchange - type 2 for Lotus Domino - type 3 for Microsoft Office 365 - type 4 for Micro Focus GroupWise Select mail server type [1]: Please enter hostname: exchange.example.com Connect using TLS ? [1]: Always trust TLS connection [0]: Do you want to test this settings? [0]: 1 Enter test username: Enter test password: Connection succeed! 197 folders has been found. press 1 to continue, 2 to quit, 3 to redisplay 1
Document server settings
Use this panel to enter the configuration of your Document server:
-
Full URL This is the location of the CMIS service.
-
Always trust TLS connection This option is only used when the service requires TLS connection, but there are some issues with certificate or the trust chain.
-
You can test your connection settings with Test Connection button.
--- ZENworks Mobile Workspace Document Server settings --- Document Server type [CMIS]: Full URL: http://sharepoint.example.com/_vti_bin/cmis/rest?getRepositories Always trust TLS connection [0]: Do you want to test connection? [0]: press 1 to continue, 2 to quit, 3 to redisplay 1
Installer processes
Wait through the Pack installation progress
[ Starting to unpack ] [ Processing package: resources (1/2) ] [ Processing package: install (2/2) ] [ Unpacking finished ]
Wait through installer jobs processing
[ Starting processing ] Starting process Install Java Runtime Environment (1/10) Preparing the Java Runtime Environment... Starting process Create derby unix service (2/10) Created symlink from /etc/systemd/system/multi-user.target.wants/derby.service to /usr/lib/systemd/system/derby.service. Starting process Create tomcat unix service (3/10) Created symlink from /etc/systemd/system/multi-user.target.wants/tomcat.service to /usr/lib/systemd/system/tomcat.service. Starting process Install server apps (4/10) Cleaning deployment folder and Installing server apps . . . Starting process Install DESK server apps (5/10) . . . Starting process Move common libraries (6/10) Moving SDK and logging libraries -- Moving /opt/zenworksmobileworkspace/apps-deploy/zenworksmobileworkspace-analytics-server-web-war/WEB-INF/lib/jcl-over-slf4j-1.7.21.jar to /opt/zenworksmobileworkspace/lib/... . . . Starting process Start derby unix service (7/10) Starting SENSE-DB Waiting 10 seconds for Derby to start... . . . Starting process Create databases (8/10) ij version 10.11 . . . Starting process Start server (9/10) Starting SENSE-SERVER Waiting 60 seconds for Tomcat to start... . . . Starting process Move the version file (10/10)
Installation completed
The installation completes!
[ Console installation done ]
ZENworks Mobile Workspace services
Once the installation completes, the ZENworks Mobile Workspace server services (derby and tomcat) are automatically started and are configured to start at boot time. Then check if your server is correctly running by using the following command:
curl http://localhost:8080/sense/secserver/login.html
The result should look like this.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html lang="en_GB" xmlns="http://www.w3.org/1999/xhtml"><head><title>ZENworks® Mobile Workspace</title><link class="component" href="/sense/secserver/a4j/s/3_3_1.GAorg/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAELXT5DOhSIAQ!sA18_.html" rel="stylesheet" type="text/css" /><link class="component" href="/sense/secserver/a4j/s/3_3_1.GAorg/richfaces/renderkit/html/css/extended_classes.xcss/DATB/eAELXT5DOhSIAQ!sA18_.html" media="rich-extended-skinning" rel="stylesheet" type="text/css" /><link class="component" href="/sense/secserver/a4j/s/3_3_1.GAcss/page.xcss/DATB/eAELXT5DOhSIAQ!sA18_.html" rel="stylesheet" type="text/css" /><script type="text/javascript">window.RICH_FACES_EXTENDED_SKINNING_ON=true;</script><script src="/sense/secserver/a4j/g/3_3_1.GAorg/richfaces/renderkit/html/scripts/skinning.js.html" type="text/javascript"></script><style type="text/css">.rich-page{margin:auto 10px;width:auto;}
.rich-page-body{float:none;width:auto;}
</style><html xmlns="http://www.w3.org/1999/xhtml">
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rel="stylesheet" type="text/css" href="/sense/secserver/css/sense-web.css" />
<link rel="stylesheet" type="text/css" href="/sense/secserver/css/branding-microfocus.css" />
</html></head><body><div class="rich-page " id="j_id0"><div class="rich-page-header logo" id="j_id0:hd"><div class="rich-page-header-content" id="j_id0:hdc"><!-- Git commit c2c4960b2c14b388720e87f06958b1f9bf48ebde, built on '2017-11-01 11:57:03' -->
<h1><img src="/sense/secserver/images/logoHome.png" height="70" />
</h1></div></div><div class="rich-page-content " id="j_id0:cnt"><div class="rich-page-main"><div class="rich-page-body ">
<div id="loginpage"><div style=""><div style="float:left;width:97.02%;*width:92.17%;">
<div class="loginform">
<form id="loginForm" action="/sense/secserver/j_spring_security_check" method="post" onkeypress="if (event.keyCode == 13) {this.submit(); return false;}; return true;">
<fieldset>
<p>
<label class="credentials">Please, enter your credentials:
</label>
</p>
<br />
<br />
<br />
<br />
<p>
<label class="left">Username
</label>
<input class="field" type="text" name="j_username" />
</p>
<p>
<label class="left">Password
</label>
<input class="field" type="password" name="j_password" />
</p>
<input class="button" type="submit" value="Login" />
</fieldset>
</form>
</div></div><div style="display: block; height: 0; clear: both; visibility: hidden;">.</div></div>
</div></div></div></div><div class="rich-page-footer footer" id="j_id0:ft"><div class="rich-page-footer-content" id="j_id0:ftc">
<table>
<tr>
<td>
<p>
Copyright © 2017 Micro Focus Software Inc. All rights reserved.
</p>
</td>
<td style="width: 100%;"></td>
<td>
<p>
Powered by
<a href="http://sysmosoft.com/">Sysmosoft SA</a>
(3.16.0)
</p>
</td>
</tr>
</table></div></div></div><!-- MYFACES JAVASCRIPT -->
</body></html>If your server is reachable from another computer using a Web browser, the Administration Console should appears.