Setup Guide

ManualsBrandsDell ManualsConverged InfrastructureProtected Workspace



27

DellProtectedWorkspaceManagementServer–InstallandConfigure–v2.2

ConfiguringtheDPWMSconfigurationfile

TheDPWMSconfigurationfiledefinesthenecessarysettingsneededfortheDPWMStofunction,including port

numbers,certificatelocations,MySQLsettingsandloggingsettings.Theconfigurationfileislocatedat:

 /var/www/html/ims2/ims.defaults(orims.confoncetheIMShasrunatleastonce)

Thefollowingsectionreviewstheconfigurationfileandoptions.

Thevirtualapplicationdefaultsarelisted,butcanbe

modifiedtofittheneedsoftheenvironment:

[server]

Thissectiondefinesthedefaultserversettings.ItisimportanttoproperlydefinetheportthattheDPWMSUIwillbe

availableonandtodefinetheSSLcertificatelocation.

#port to use for http

#for https make sure ssl_cert and ssl_key are defined

port = 443

 can be configured to any port, used to access the UI

#use 'localhost' to make server visible only to local machine

#use '0.0.0.0' to make server available publicly

host = 0.0.0.0

 can be used to allow another process (such as Apache or Pound) to be the front-

end webserver, rather than running directly from the application.

#use this for SSL

#if all 3 items are not blank, SSL is used

ssl_cert = /etc/pki/tls/certs/dpwms.crt

 REQUIRED for SSL: provide path to crt file

ssl_key = /etc/pki/tls/private/dpwms.key

 REQUIRED for SSL: provide path to key file

# valid ssl_versions are ['SSLv3', 'SSLv23', 'TLSv1']

# if unspecified TLSv1 is used

ssl_version = TLSv1

 REQUIRED for SSL: used to specify required client protocol

#use this to listen on another port but only expose the public request handlers

#(hearbeat, incident upload, etc.)

#will use SSL settings if specified above

api_port =

 this is the port that clients connect to, can be set to something else so that the UI

and API are on different ports. Leaving this blank means the UI and API will use the same port.

# enable FIPS mode for SSL

fips_enable = false  used to enable FIPS for SSL connections

# set session timeout in seconds for UI clients

session_timeout = 86400  used to configure the timeout for DPWMS GUI before a user is logged

out

# the location of the admin tool (ie. Webmin)

# the string "localhost" will be replaced with the server hostname as the browser sees it

platform_admin = https://localhost:10000/  used to specify the URL for the “Platform

Administration Tool” on the Platform tab of the DPWMS GUI

 