In multi-tier configurations, you install the back-end server after installing the front-end server. If you have not already, perform the steps described in Install the VMware Tunnel Front-End Server(Linux).

Note:

If you are installing the Proxy component either alone or in combination with the Per-App Tunnel component, the installer refers to the back-end server as the endpoint server. Proxy uses the relay-endpoint mode for communication. The relay-endpoint deploys alongside the cascade mode services on the same server. Consider using just the Per-App Tunnel component for your VMware Tunnel solution as it has additional features and functionality that the Proxy component does not.

Prerequisites

  • Download the installer onto the server. The link in the Workspace ONE UEM console directs you to Workspace ONE UEM Resources to download the installer.
  • Download the config.xml file from the Workspace ONE UEM console onto the server.

Procedure

Perform the following steps on the endpoint server:

  1. Create a dedicated install directory for the installer on the back-end server (for example, /tmp/Install/) and copy the BIN file to this location. You can use file transfer software such as FileZilla or WinSCP to perform the action.

  2. Once on the Linux server, navigate to the folder you copied the file to and then run the BIN file by using the following command:

    $ sudo ./VMwareTunnel.bin
                            				
                            
                            
                            
                         

    If you are installing for the first time, the following screen displays:

    MAGforLinuxInstall1-a

    Press Enter.

  3. Read and accept the licensing agreement by entering ' y'.

  4. After accepting the licensing agreement, you must choose your installation method.

    TunnelInstaller_InstallMethod

    • Option 1: Provide API Server Information
      1. Enter the following information. After entering each value, the system dialog asks you to confirm the entry.
        • VMware API URL
        • Organization Group Code
        • Console Server Username
        • Console Server Password
      2. Enter the hostname of the Tunnel server.
      3. The installer chooses the components to install based on the Workspace ONE UEM console configuration.

        Press Enter.

    • Option 2: Import Config.xml file
      1. Download and copy the Tunnel Proxy and Per-app VPN configuration files to a single directory on the server. Confirm that the Proxy and Per-app VPN configuration file names are not modified from their original config.xml and vpn_config.xml names, respectively. If they have been modified, rename the files to match these names when copied into the common directory on the Linux server. If you are installing one of the Tunnel services, copy the respective configuration file.
      2. Enter the directory path that contains both configuration files.

      3. Enter the certificate password for both configuration files when prompted.
  5. Enter the hostname of the Tunnel server. The hostname must match the hostname that is used to configure VMware Tunnel in Workspace UEM. For example, if your VMware Tunnel Back-End server is configured to use tunnel.acme.com, enter the same address.
  6. Enter Y or N for whether you want to use an outbound proxy as part of your VMware Tunnel configuration.

    This option only displays if you are installing the Proxy component.

  7. Enter Y to grant the installer firewall permissions needed for VMware Tunnel.

    Note:

    Note: The ports you see may differ from the ones shown because the installer shows the values you set during VMware Tunnel configuration.

  8. Review and verify the summary information.

    TunnelInstaller_Summary

    When the installer finishes, press Enter to exit the installer.

The product begins installation. If there were any errors, the installer displays an error message with details and logs the error in the installation log file. The log file is saved in the directory that you installed the VMware Tunnel in.