Run the Enterprise Systems Connector installer on a Windows server that meets all the requirements.

About this task

The installer includes the AirWatch Cloud Connector and VMware Identity Manager Connector components. You can install one or both components. After the initial installation, you can run the installer again to modify any features or update your installation.

Prerequisites

The following prerequisites apply to the AirWatch Cloud Connector (ACC) component.

  • Before beginning, on-premises customers should ensure the server on which Enterprise Systems Connector is being installed can reach AWCM by browsing to https://{url}:port/awcm/status, where {url} is the AirWatch environment URL and port is the external port you configured for AWCM to communicate. You should see the status of the AWCM with no SSL errors. If there are errors, resolve them before continuing or ACC does not function properly.

  • SaaS customers should ensure the server on which you are installing Enterprise Systems Connector can reach AWCM by browsing to https://awcmXXX.awmdm.com/awcm/status. Replace XXX with the same number as used in your environment URL, for example,'100' for cn100. You should see the status of the AWCM with no SSL errors. If there are errors, resolve them before continuing or the ACC will not function properly.

The following prerequisites apply to the VMware Identity Manager Connector component.

  • Ports 80 and 8443 must be available on the Windows server. If these ports are being used by other services, you will not be able to install the VMware Identity Manager Connector component.

  • The Windows server must be joined to the domain, and you must install the VMware Identity Manager Connector component as a domain user that is part of the administrator group on the Windows server, in the following cases.

    • If you plan to connect to Active Directory (Integrated Windows Authentication)

    • If you plan to use Kerberos authentication

    • If you plan to integrate Horizon View with VMware Identity Manager and want to use the Perform Directory Sync or Configuring 5.x Connection Server options

    In these cases, you must also choose to run the IDM Connector service as a domain user during installation.

  • For the installer to be able to browse to and validate domains and users during installation, the following requirements must be met.

    • The target system must be domain joined.

    • The Computer Browser service must be enabled and running.

    • Firewall must be configured with an exception for the Computer Browser service.

    • NetBIOS over TCP/IP must be enabled on the target system.

    • A master browser system should be configured on the network.

    • Broadcast traffic should be enabled on the network.

Procedure

  1. Double-click the installer.
  2. On the Welcome screen, click Next.

    The installer verifies prerequisites on the server. If .NET Framework is not installed, you will be prompted to install it and to restart the server. After restarting, run the Enterprise Systems Connector installer again to resume the installation process.

    If a previous version of ACC is installed, the installer auto-detects it and offers the option to upgrade to the latest version. For more information on updating ACC, see ACC Updates.

  3. Accept the license agreement, then click Next.
  4. In the Custom Setup page, select the components to install.

    By default, both AirWatch Cloud Connector and VMware Identity Manager Connector are selected. To deselect a component, click the expansion arrow and select This feature will not be available.

    For more information about the components, see Determine Which Components to Install.



    custom setup


  5. Select Change... to change the installation directory, if required, then click Next.

    The VMware Identity Manager Connector component requires the Java Runtime Environment (JRE™). If the Windows server does not have JRE installed, or if it has a version lower than the one packaged with the installer, you are prompted to install it. Note that existing JRE versions are not deleted when the required version is installed.

  6. Verify the destination folder, then click Next.
  7. Enter the ACC certificate password that you provided on the System Settings page in AirWatch, then click Next.


    ACC password


  8. If you plan on proxying ACC traffic through an outbound proxy, select the check box and provide proxy server information.

    If required, enter the user name and password.

    Note:

    The settings on this page apply only to ACC. Proxy server information for the VMware Identity Manager Connector is entered separately later.



    ACC proxy


  9. Click Next.
  10. (VMware Identity Manager Connector only) In the IDM Connector Configuration page, enter the following information, then click Next.

    Option

    Description

    IDM Connector Port

    Enter a port number if you want the VMware Identity Manager Connector to run on a port other than 443.

    Would you like to use your own SSL certificate?

    By default, a self-signed certificate is generated for the VMware Identity Manager Connector during the installation process. You can install a signed certificate later by logging into the connector admin pages at https://vidmConnectorHostname:8443/cfg/login and navigating to the Install Certificate page.

    If you already have a certificate and want to install it now, select the check box, then select the certificate and enter the certificate password. The certificate must be in the PFX format.

    Are you using an HTTPS proxy?

    Select to configure an HTTPS proxy server for outbound communications, if required.

    HTTPS Proxy: The proxy server URL. Proxy servers that require authentication are not supported.

    Proxy Port: The HTTPS proxy server port.

    Non-Proxied Hosts: Hosts that the VMware Identity Manager Connector can access without going through the proxy server. For example, localhost or hosts on the same subnet.



    vidm configuration


  11. (VMware Identity Manager Connector only) In the VMware IDM Connector Activation page, select the check box if you want to activate the connector now.

    Option

    Description

    Activation Code

    If VMware Identity Manager is configured in the AirWatch Organization Group from which you downloaded the installer, this field is pre-populated with the activation code.

    If the field is not pre-populated, generate an activation code in the VMware Identity Manager administration console and copy and paste it here. See Generate Activation Code for VMware Identity Manager Connector for information.

    Admin Password

    Create a password for the connector admin pages. You can access these pages to collect log file bundles and upload certificates.

    Confirm Password

    Enter the password again.

    If you do not activate the VMware Identity Manager Connector now, you can activate it later from https://vidmConnectorHostname:8443. For example, https://myconnector.example.com:8443.



    activate VIDM connector


  12. Click Next.
  13. (VMware Identity Manager Connector only) In the IDM Connector Service Account page, select the check box if you want to run the IDM Connector service as a Windows domain user.

    You must run the service as a domain user in the following cases.

    • If you plan to connect to Active Directory (Integrated Windows Authentication)

    • If you plan to use Kerberos authentication

    • If you plan to integrate Horizon View with VMware Identity Manager and want to use the Perform Directory Sync or Configuring 5.x Connection Server options



    run as domain user


    Note:

    To make any selections on this page, you must be running the installer as a domain user that is part of the administrator group on the Windows server.

    Note:

    If you are unable to locate domains or users when you click Browse, verify that you have met the prerequisites.

  14. Click Next.
  15. Click Install to begin the installation.

    The installer displays a checkbox for auto-updating ACC. For more information on auto-update, see the ACC Auto-Update Option.

  16. Click Finish.