DDP Enterprise Server - Virtual Edition Quick Start Guide and Installation Guide
© 2014 Dell Inc. Registered trademarks and trademarks used in the DDP|E, DDP|ST, and DDP|CE suite of documents: Dell™ and the Dell logo, Dell Precision™, OptiPlex™, ControlVault™, Latitude™, XPS®, and KACE™ are trademarks of Dell Inc. Intel®, Pentium®, Intel Core Inside Duo®, Itanium®, and Xeon® are registered trademarks of Intel Corporation in the U.S. and other countries. Adobe®, Acrobat®, and Flash® are registered trademarks of Adobe Systems Incorporated.
Contents 1 Quick Start Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2 Installation Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 About DDP Enterprise Server - VE Customer Support . Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 . . . . . . .
Open the Command-line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Generate a System Snapshot Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 DDP Enterprise Server - VE Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DDP Enterprise Server - VE Troubleshooting Post-Installation Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 . . . . . . . . . . . . . .
Quick Start Guide This Quick Start Guide is for more experienced users, to get DDP Enterprise Server - VE up and running fast. As a general rule, Dell recommends installing the DDP Enterprise Server - VE first, followed by installation of clients. For more detailed instructions, see the Installation Guide on page 9. For information on how to update an existing DDP Enterprise Server - VE, see Update DDP Enterprise Server - VE on page 16.
Install DDP Enterprise Server - VE 1 Browse to the directory where the Dell Data Protection files are stored and double-click to import into VMWare DDP Enterprise Server - VE v8.x.x Build x.ova. 2 Power on DDP Enterprise Server - VE. 3 Follow the on-screen instructions.
— BitLocker management is not enabled — Cloud Edition is not enabled — Mobile Edition is not enabled See the Administrator Help topic “Manage Policies” to learn how to work with policies. Quick Start tasks are complete.
VE Quick Start Guide and Installation Guide
Installation Guide This Installation Guide is for less experienced users, to install and configure DDP Enterprise Server - VE. As a general rule, Dell recommends installing the DDP Enterprise Server - VE first, followed by installation of clients. For information on how to update an existing DDP Enterprise Server - VE, see Update DDP Enterprise Server - VE on page 16. About DDP Enterprise Server - VE The DDP Enterprise Server - VE is the security administration piece of Dell’s solution.
Requirements DDP Enterprise Server - VE Prerequisites Hardware The recommended disk space for DDP Enterprise Server - VE is 80 GB. Virtualized Environment DDP Enterprise Server - VE v8.5 has been validated with the following virtualized environments. Virtualized Environments • VMWare Workstation 9 — 64-bit CPU required — 4 GB RAM recommended — See http://www.vmware.com/resources/compatibility/search.
Hardware The following table details the minimum hardware requirements for VE Remote Management Console. Processor 2 GHz Core 2 Duo or better RAM +-2 GB, depending on configuration Free Disk Space +-250 MB free disk space (plus virtual paging space) Network Card 10/100/1000 network interface card Miscellaneous TCP/IP installed and activated Software The following table details the software requirements for the VE Remote Management Console. NOTE: Always disable UAC when using Windows Server 2008.
Proxy Mode Prerequisites The following table details the software that must be in place before installing Proxy Mode. Prerequisites • Windows Installer 3.1 or later Windows Installer 3.1 or later must be installed on the server where the installation is taking place. • Microsoft Visual C++ 2010 Redistributable Package If not installed, the installer will install it for you. • Microsoft .NET Framework Version 3.5 SP1 • Microsoft .NET Framework Version 4.0 Microsoft has published security updates for .
Software The following table details the software requirements for the Proxy Mode server. NOTE: Always disable UAC when using Windows Server 2008. After disabling UAC, the server must be rebooted for this change to take effect. Registry location for Windows Servers: HKLM\SOFTWARE\Dell.
9 In the Configure Network Settings dialog, choose either option below, then select OK. — (Default) Use DHCP. — (Recommended) In the Use DHCP field, press the Spacebar to remove the X and manually enter these addresses, as applicable: Static IP Network Mask Default Gateway DNS Server 1 DNS Server 2 DNS Server 3 NOTE: When using a static IP, you must also create a host entry in the DNS server. 10 In the Time Zone screen, use the arrow keys to highlight your time zone and select Enter.
4 Read and accept the Dell End User License Agreement, and click Next. 5 Enter the fully qualified domain name of the proxy server. 6 Select either to import an existing certificate or create and import a self-signed certificate, and click Next. — Import an existing certificate - Provide the path to the certificate and password. — Create a self-signed certificate and import it to key store - Provide the fully qualified domain name of the proxy server and information about your organization.
Change Time Zone This task can be completed at any time. It is not required to begin using DDP Enterprise Server - VE. It is a best practice to restart the services any time a settings change is made. 1 From the Basic Configuration menu, select Time Zone. 2 In the Time Zone screen, use the arrow keys to highlight your time zone and select Enter. 3 At the time zone confirmation prompt, select OK.
2 In the Change User Passwords screen, select user password to change and select Enter. 3 In the Set Password screen, enter the current password, enter the new password, re-enter the new password, and select OK. Set up File Transfer (FTP) Users This task can be completed at any time. It is not required to begin using DDP Enterprise Server - VE. It is a best practice to restart the services any time a settings change is made.
Shut down VE Perform this task only if needed. 1 From the Basic Configuration menu, scroll down and select Shutdown Appliance. 2 At the confirmation prompt, select Yes. 3 After restart, log in to DDP Enterprise Server - VE. VE Terminal - Advanced Configuration Tasks Advanced configuration tasks are accessed from the Main Menu. Set or Change the Database Password This task can be completed at any time. It is not required to begin using DDP Enterprise Server - VE.
Import an Existing Certificate or Enroll a New Server Certificate Certificates must be in place before you can activate users against DDP Enterprise Server - VE. You can import an existing certificate or create a certificate request through the DDP Enterprise Server - VE. It is a best practice to restart the services any time a settings change is made. Import an Existing Server Certificate 1 Export the existing certificate and its full chain of trust from its keystore.
Configure Log Rotation This task can be completed at any time. It is not required to begin using DDP Enterprise Server - VE. It is a best practice to restart the services any time a settings change is made. Daily log rotation is enabled by default. To change the default log rotation, from the Advanced Configuration menu, select Logrotate Configuration. To disable log rotation, use the Spacebar to enter an X in the No rotation field and select OK.
To download backups using the organization’s backup solution, obtain detailed instructions from your backup solution vendor. NOTE: Virtual Edition is based on Linux Debian Ubuntu x64.
Name Description Dell Console Web Services Supports DDP Enterprise Server - VE communication with the Dell Compatibility Server. Dell Security Server Provides the mechanism for controlling commands and communication with Active Directory. Used to communicate with the Dell Policy Proxy. Dell Compliance Reporter Provides an extensive view of the environment for auditing and compliance reporting. Dell Core Server A Service for managing the enterprise architecture.
Generate a System Snapshot Log To generate a System Snapshot Log for Dell Pro Support, in the Main Menu, select Support Tools. 1 From the Support Tools menu, select Generate System Snapshot Log. 2 At the indication that the file is created, select OK. If the ddpsupport user is activated, Dell Pro Support can retrieve the log from the DDP Enterprise Server - VE SFTP server. If the ddpsupport user is not activated, contact Dell Pro Support. For more information, see Customer Support.
During the Deployment Process If you intend to use Exchange ActiveSync to manage mobile devices through Dell Data Protection | Mobile Edition, your Exchange Server environment must be configured. Install EAS Device Manager 1 In the Dell Data Protection | Mobile Edition installation media, navigate to the EAS Management folder. In the EAS Device Manager folder, copy setup.exe to your Exchange Client Access Server(s). 2 Double-click setup.exe to begin the installation.
3 Enter the following information: DDP Enterprise Server - VE hostname Dell Policy Proxy Polling Interval (the default is 1 minute) Select the box to run EAS Device Manager in report-only mode (recommended during deployment). NOTE: The Report-only mode allows unknown devices/users to have access to Exchange ActiveSync but still reports the traffic to you. Once your deployment is up and running, you can change this setting to tighten security. Click OK. 4 A success message displays.
4 Enter a filter to search the User Name by Common Name, Universal Principal Name, or sAMAccountName. The wild card character is *. A Common Name, Universal Principal Name, and sAMAccountName must be defined in the enterprise directory server for every user. If a user is a member of a Domain or Group but does not appear in the Domain or Group Members list in the Dell Remote Management Console, ensure that all three names are properly defined for the user in the enterprise directory server.
0XXXXXA0X
