Run the Enterprise Systems Connector installer on a Windows server that meets all the requirements.
About this task
The installer includes the AirWatch Cloud Connector and VMware Identity Manager Connector components. You can install one or both components. After the initial installation, you can run the installer again to modify any features or update your installation.
Prerequisites
The following prerequisites apply to the AirWatch Cloud Connector (ACC) component.
Before beginning, on-premises customers should ensure the server on which Enterprise Systems Connector is being installed can reach AWCM by browsing to
https://{url}:port/awcm/status, where {url} is the AirWatch environment URL and port is the external port you configured for AWCM to communicate. You should see the status of the AWCM with no SSL errors. If there are errors, resolve them before continuing or ACC does not function properly.SaaS customers should ensure the server on which you are installing Enterprise Systems Connector can reach AWCM by browsing to https://awcmXXX.awmdm.com/awcm/status. Replace XXX with the same number as used in your environment URL, for example,'100' for cn100. You should see the status of the AWCM with no SSL errors. If there are errors, resolve them before continuing or the ACC will not function properly.
The following prerequisites apply to the VMware Identity Manager Connector component.
Ports 80 and 8443 must be available on the Windows server. If these ports are being used by other services, you will not be able to install the VMware Identity Manager Connector component.
The Windows server must be joined to the domain, and you must install the VMware Identity Manager Connector component as a domain user that is part of the administrator group on the Windows server, in the following cases.
If you plan to connect to Active Directory (Integrated Windows Authentication)
If you plan to use Kerberos authentication
If you plan to integrate Horizon View with VMware Identity Manager and want to use the Perform Directory Sync or Configuring 5.x Connection Server options
In these cases, you must also choose to run the IDM Connector service as a domain user during installation.
For the installer to be able to browse to and validate domains and users during installation, the following requirements must be met.
The target system must be domain joined.
The Computer Browser service must be enabled and running.
Firewall must be configured with an exception for the Computer Browser service.
NetBIOS over TCP/IP must be enabled on the target system.
A master browser system should be configured on the network.
Broadcast traffic should be enabled on the network.
Procedure
- In the Custom Setup page, select the components to install.
By default, both AirWatch Cloud Connector and VMware Identity Manager Connector are selected. To deselect a component, click the expansion arrow and select This feature will not be available.
For more information about the components, see Determine Which Components to Install.
- Enter the ACC certificate password that you provided on the System Settings page in AirWatch, then click Next.
- If you plan on proxying ACC traffic through an outbound proxy, select the check box and provide proxy server information.
If required, enter the user name and password.
Note:The settings on this page apply only to ACC. Proxy server information for the VMware Identity Manager Connector is entered separately later.
- (VMware Identity Manager Connector only) In the IDM Connector Configuration page, enter the following information, then click Next.
Option
Description
IDM Connector Port
Enter a port number if you want the VMware Identity Manager Connector to run on a port other than 443.
Would you like to use your own SSL certificate?
By default, a self-signed certificate is generated for the VMware Identity Manager Connector during the installation process. You can install a signed certificate later by logging into the connector admin pages at https://vidmConnectorHostname:8443/cfg/login and navigating to the Install Certificate page.
If you already have a certificate and want to install it now, select the check box, then select the certificate and enter the certificate password. The certificate must be in the PFX format.
Are you using an HTTPS proxy?
Select to configure an HTTPS proxy server for outbound communications, if required.
HTTPS Proxy: The proxy server URL. Proxy servers that require authentication are not supported.
Proxy Port: The HTTPS proxy server port.
Non-Proxied Hosts: Hosts that the VMware Identity Manager Connector can access without going through the proxy server. For example, localhost or hosts on the same subnet.
- (VMware Identity Manager Connector only) In the VMware IDM Connector Activation page, select the check box if you want to activate the connector now.
Option
Description
Activation Code
If VMware Identity Manager is configured in the AirWatch Organization Group from which you downloaded the installer, this field is pre-populated with the activation code.
If the field is not pre-populated, generate an activation code in the VMware Identity Manager administration console and copy and paste it here. See Generate Activation Code for VMware Identity Manager Connector for information.
Admin Password
Create a password for the connector admin pages. You can access these pages to collect log file bundles and upload certificates.
Confirm Password
Enter the password again.
If you do not activate the VMware Identity Manager Connector now, you can activate it later from https://vidmConnectorHostname:8443. For example, https://myconnector.example.com:8443.
- (VMware Identity Manager Connector only) In the IDM Connector Service Account page, select the check box if you want to run the IDM Connector service as a Windows domain user.
You must run the service as a domain user in the following cases.
If you plan to connect to Active Directory (Integrated Windows Authentication)
If you plan to use Kerberos authentication
If you plan to integrate Horizon View with VMware Identity Manager and want to use the Perform Directory Sync or Configuring 5.x Connection Server options
Note:To make any selections on this page, you must be running the installer as a domain user that is part of the administrator group on the Windows server.
Note:If you are unable to locate domains or users when you click Browse, verify that you have met the prerequisites.