Brussels 2014 #E2EVC
XenMobile and beyond!
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
Agenda
XenMobile Introduction: Editions, Features & Architecture
XenMobile Device Manager: Features & Lessons Learned
XenMobile AppController: Features & Lessons Learned
XenMobile Enterprise: Features & Lessons Learned
XenMobile Deep Dive: Authentication proces Troubleshooting
Citrix Workspace Suite: The future of Xen!
2
Important notes during presentation!
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
About Esther
15+ years of Technical Consulting Senior Consultant at PepperByte MSc Computer Science Design | Implement | Troubleshooting Small <-> Large infrastructures Government | Industry | Commerce
Author of: Citrix XenApp 6.5 Expert Cookbook
3
Your Presenter: Esther Barthel Senior Technical Consultant
@virtues_IT http://nl.linkedin.com/in/ebarthel http://www.virtues.it
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
About Martijn
4
Soccer referee
15 years working in IT CCE-V, CCP-M, CCEE, MCITP, CCIA Bachelor of Engineering in Logistics Gouvernement, Healthcare, Construction Design, Build, Advice 200 – 10000+ seats Internal teacher for GO
Avid Cyclist
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Your Presenter: Martijn Hulsman Senior Technical Consultant
@MartijnHS nl.linkedin.com/pub/martijn-hulsman/6/95/371 http://martijn2share.wordpress.com/
Brussels 2014 #E2EVC
Definitions & Features
5
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Definitions & Features
6
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Definitions & Features
7
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XenMobile Enterprise (Architecture)
8
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
XenMobile Enterprise (Architecture)
9
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
XenMobile Enterprise (Architecture)
10
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
XenMobile Enterprise (Architecture)
11
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
XenMobile Enterprise (Architecture)
12
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Brussels 2014 #E2EVC
XenMobile Device Manager
13
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Device Manager
Windows Server InstallApache Web ServerDatabase is essential
Additional config in web console
14
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Pre-install checklist
XenMobile Pre-install checklist eDocs: http://tinyurl.com/XMPreInstallChecklist
15
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Pre-install checklist
XenMobile Pre-install checklist eDocs: http://tinyurl.com/XMPreInstallChecklist
16
All pre-install checks are required to install XenMobile Device Manager, without licenses, certificates and FQDNs the
installation cannot complete.
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Installation & Configuration
XenMobile Device Manager installation eDocs: http://tinyurl.com/XDMInstall
NetScaler configuration Citrix Blog: http://tinyurl.com/XDMSSLOffloading
Citrix Blog: http://tinyurl.com/XDMSSLOffloading2
17
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Installation & Configuration
XenMobile Device Manager installation eDocs: http://tinyurl.com/XDMInstall
NetScaler configuration Citrix Blog: http://tinyurl.com/XDMSSLOffloading
Citrix Blog: http://tinyurl.com/XDMSSLOffloading2
18
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Use the self signed certificates created by the installer
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Manage corporate devices
Create a LDAP connection to a user directory
Define users and groups
Create policies
Create deployment packages
Enroll users and devices
19
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Manage corporate devices
Create a LDAP connection to a user directory
Define users and groups
Create policies
Create deployment packages
Enroll users and devices
20
Separate policies and deployment packages need to be
created for each device (OS) type
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC 21
XDM: MDM Policies
Create MDM policies per OS type
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC 22
XDM: MDM Policies
Create MDM policies per OS type
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Mobile OS policy options depend upon available APIs per device (OS) type
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC 23
XDM: MDM Policies
Create MDM policies per OS type
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Android iOS Win Phone 8
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Deployment packages
24
Use deployment packages to enforce device configurations
Packages are build using configuration policies
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Enrolling Users and Devices
25
To enroll iOS devices an APNS certificate is required.
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Lessons Learned
Certificates … and more certificates: SSL certificates
Use a wildcard certificate for external SSL Use your own root CA/PKI for internal SSL
Add root CA to NS, XDM and XAC cert store
Use XDM self-signed certificates during install
Apple Push Notification Server Request certificate before XDM install Citrix is required to sign certificate
26
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XDM: Lessons Learned
URLs and FQDNs: What’s the URL again?
Get all DNS FQDNs in place before install Use simple URLs that are easily remembered
Auto Discovery Auto Discovery record => Citrix Cloud Ops Auto Discovery Windows => Citrix Cloud Ops Auto discover => UPN instead of SAMAccountName
27
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XenMobile AppController
28
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: Installation & Configuration
App Controller configuration: eDocs: http://tinyurl.com/XACConfig
NetScaler configuration: Knowledge Center: http://support.citrix.com/article/CTX139319
29
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: AppController
Virtual appliance XenServer/vShpere/Hyper-V
Initial network config in console Additional config in web console
30
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: Enterprise App Store
Deploy sandboxed Mobile Apps (Android & iOS), Web & SaaS and Windows (published apps)
31
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: MDX enabled apps
MDX Toolkit (a.k.a. Worx App SDK) Wrap native iOS (.ipa) / Android (.apk) packages Include application policies (restrictions/pre-config)
iOS MDX Policies: http://tinyurl.com/MDXPoliOS Android MDX Policies: http://tinyurl.com/MDXPolAndroid
32
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: MDX enabled apps
MDX Toolkit (a.k.a. Worx App SDK) Wrap native iOS (.ipa) / Android (.apk) packages Include application policies (restrictions/pre-config)
iOS MDX Policies: http://tinyurl.com/MDXPoliOS Android MDX Policies: http://tinyurl.com/MDXPolAndroid
33
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: MDX enabled apps
MDX Toolkit (a.k.a. Worx App SDK) Wrap native iOS (.ipa) / Android (.apk) packages Include application policies (restrictions/pre-config)
iOS MDX Policies: http://tinyurl.com/MDXPoliOS Android MDX Policies: http://tinyurl.com/MDXPolAndroid
34
The MDX Toolkit only runs on Mac OSX
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: microVPN tunnel
microVPN tunnel to internal resources
35
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: microVPN tunnel
microVPN tunnel to internal resources
36
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: Application Containers
MDX App Vault (sandboxed on device) MDX App Interaction
37
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: Application Containers
MDX App Vault (sandboxed on device) MDX App Interaction
38
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: WorxWeb
MDX Enabled Pre configured Intranet Browser
39
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: WorxWeb
MDX Enabled Pre configured Intranet Browser
40
WorxWeb is not MDX enabled by default.
You’ll need to wrap it yourself with the MDX Toolkit.
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: WorxMail
MDX Enabled Pre configured Mail client
41
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: WorxMail
MDX Enabled Pre configured Mail client
42
Save mobile device battery life and check out the
new STA method with WorxMail!
Citrix Blog: http://tinyurl.com/XACSTAtotherescue
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: Lessons Learned
Certificates … and more certificates: SSL certificates
Separate URL for AppController Direct connections to StoreFront for laptops
43
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XAC: Lessons Learned
Application wrapping: Get an Enterprise Apple Developer Account
Personal account is limited to max. 100 devices
MDX wrapper only runs on Mac OSX Virtual Mac doesn’t work Android apps also require the MDX toolkit
44
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XenMobile Enterprise
XenMobile
EnterpriseEdition
Attachment EncryptionShareFile Enterprise
EMM
45
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Enterprise: Component integration
46
Connect Device Manager to App Controller eDocs: http://tinyurl.com/XDMXACIntegration
Connect App Controller to ShareFile ShareFile support: http://tinyurl.com/XACSFIntegration
eDocs: http://tinyurl.com/XACSFIntegration2
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
ShareFile Enterprise: StorageZone Connectors
47
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Enterprise: How to enable mobile computing?
Choose Your Own (CYO) Corporate Devices are owned; can be controlled
=> XenMobile Device Manager Bring Your Own (BYO)
Devices are not owned; less control Corporate apps are owned; can be controlled Enterprise App Store:
MDX wrapped = Secure corporate apps & interactions Single store for all corporate apps Seamless migrate from Windows apps => Mobile apps
=> XenMobile AppController
48
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Enterprise: Lessons Learned
Integration challenges: Test each component and route before integratingUse internal PKI infra to enable certificated basedauthentication
Troubleshooting: Always use a test device! Check the XenMobile Logs Collection Guide
http://support.citrix.com/article/CTX139421
49
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Enterprise:Sharefile lessons learned
50
Sharefile Enterprise account provisioning https://<appcontroller>.yourdomain.domain/admin
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Enterprise: Lessons Learned
One more thing …
51
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
About Rink
52
Soccer referee
15 years working in IT CCE-V, CCP-M, CCEE, MCITP, CCP-N Gouvernement, Healthcare,
Construction Design, Build, advice 200 – 10000+ seats
PepperByte: Esther Barthel Groupe OPEN: Rink Spies
Your Presenter: Rink Spies Senior Technical Consultant
@Rink76 https://www.linkedin.com/pub/rink-spies/0/b62/792 http://Rink76.wordpress.com/
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XenMobile Enterprise
53
PepperByte: Esther Barthel Groupe OPEN: Rink Spies
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
XenMobile Deep Dive
Authentication proces Troubleshooting
54
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
PepperByte: Esther Barthel Citrix: Karen Sciberras
Brussels 2014 #E2EVC
Citrix Workspace Suite
55
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
“the most complete, integrated mobility solution for
helping people and business become more productivewith an on-demand mobile workspace.”
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Citrix Workspace Suite
56
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
XenApp mobilizes and secures Windows apps on any device
XenDesktop securely delivers virtual Windows desktops and apps on any device
XenMobile manages and secures mobile, web, and SaaS apps on mobile devices
seamlessly and securely unites apps, data and services on any device
ShareFile shares and syncs corporate data securely from any location
GoToMeeting empowers people to meet and collaborate with anyone, anywhere
NetScaler optimizes and secures app delivery on any network
CloudBridge accelerates app delivery to remote workers on any network
CloudPlatform orchestrates and provisions apps, desktops and IT services from any cloud
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Citrix Workspace Suite
57
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Citrix Workspace Suite
58
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Agenda > Introduction > XDM > XAC > Enterprise > Deep Dive > Citrix Workspace
Brussels 2014 #E2EVC
Presented by: Esther Barthel Senior Technical Consultant
@virtues_IT http://nl.linkedin.com/in/ebarthel http://www.virtues.it
Martijn Hulsman Senior Technical Consultant
@MartijnHS http://nl.linkedin.com/pub/martijn-hulsman/6/95/371 http://martijn2share.wordpress.com/
59
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman
Groupe OPEN: Rink SpiesCitrix: Karen Sciberras
Brussels 2014 #E2EVC
Resources
60
Citrix eDocs XenMobile Solution Pre-Installation Checklist
http://support.citrix.com/proddocs/topic/xenmobile-87/xmob-prepare-xenmobile-checklist-con.html
XenMobile Logs collection guidehttp://support.citrix.com/article/CTX139421
Community Robin Hobo: Installing and Configuring Citrix XenMobile MDM 8.6
http://www.robinhobo.com/installing-configuring-citrix-xenmobile-mdm-8-6/
Adam Gamble: How to XenMobile MDM 8.5 Deploymenthttp://adamgamble.org/2013/09/08/how-to-xenmobile-mdm-8-5-deployment-part-3-policies/
Rink Spies: Citrix XenMobile : Lessons learned in real lifehttp://rink76.wordpress.com/2014/05/05/citrix-xenmobile-lessons-learned-in-real-life/
PepperByte: Esther Barthel Groupe OPEN: Martijn Hulsman