6.5.0: How to enable registration to and download of Stratodesk CID Key installer from Collector in DMZ

Problem:

Possible resolution:

1. Create a new External Collector Group for the Collectors that are external and in the DMZ.
2. Update the DNS name of Collector to be the externally resolvable DNS name:
• Within the Web UI's Administration section, navigate to the Collector Administration > Collectors tab.
• Select the external Collectors in the DMZ, click on View Properties button, and then click on the Edit Properties link.
• Update the DNS name field with the external DNS entry name.
• Update the Collector Group with the newly create External Collector Group.
• Click on Save Collector Properties button.
3. Update the Connector ID Properties:
• Select the appropriate Machine Group to update properties, either ‘All Machines or the particular ‘Machine Group’
• Select the Callback Destination for this machine group to be the ‘External Collector Group’
• Click Save button to save updated properties.
4. Download the CID Key installer for your platform. If it an EXE or MSI, install it on a test machine and navigate to Program Files (x86)\Liquidware Labs\ConnectorID\ca\public folder to edit it. If it is a ZIP, extract the mgrcert.pem file.
5. Modify the mgrcert.pem file to update the first line SOAP_URI to point to the Collector address in the DMZ.
• Liquidware recommends using Notepad++ and use Edit > EOL Conversion > Unix LF option.
• Modify the SOAP_URI line with the external resolvable address (DNS preferred) of the Collector in the DMZ and Save the file. Do not change any part of the path after nor the certificate section.
• Use this new mgrcert.pem file replacing the original file on an installation. If the file came from a ZIP, please update the ZIP with this modified file (replacing the original file in the same location within the ZIP file). Make sure there are no new relative folder structures within the ZIP file.
6. SCP the following to the Collector on the DMZ to /home/friend folder using credentials for the friend user [default=friend/sspassword]:
• install-connectorId-Key-6.5.0-1-stratodesk.zip that has the modified mgrcert.pem within and
• custom.conf – this file has the modified apache configuration that would allow downloading files from a folder on the Collector.
7. Log into the Collector console using credentials for the friend user [default=friend/sspassword] and then switch to the root user [default=su -/sspassword].
8. Move the custom.conf file to modify apache configuration:
• cd /etc/lwl/httpd/conf.d/cid
• cp /home/friend/custom.conf .
• chmod 644 custom.conf
• chown root:root custom.conf
9. Create a new folder to host the CID Key installer:
• cd /var/www/html
• mkdir stratusphere
• chmod 755 stratusphere
• cd /stratusphere
• cp /home/friend/install-connectorID-Key-6.5.0-1-stratodesk.zip .
• chmod 644 install-connectorID-Key-6.5.0-1-stratodesk.zip
• chown root:root install-connectorID-Key-6.5.0-1-stratodesk.zip
• restorecon -Rv /var/www/html/stratusphere

**Note: If for any reason, the installer needs to be updated or changed, you will have to upload the file again, and run these commands in this section again for it to be available for download.

1. Reboot Collector appliance to apply and generate new httpd configuration. Enter the following on the command line as root:
• lwl
• Select option R to R) Reboot Server
2. Once the appliance reboots and is available, test if the ZIP file can be downloaded externally using the following link:
• https://<ext.ip.of.collector>/stratusphere/install-connectorId-Key-6.5.0-1-stratodesk.zip
• Use this link within the Stratodesk management suite that needs to point to a zip file with the mgrcert.pem and .deb installer files at the top level with no additional folder structure within the zip file.
• Then follow Stratodesk related instructions to update the thin clients with our agent.

Product: Stratusphere FIT/UX

Product Version: 6.5

Expires on: 365 days from publish date

Updated: July 19, 2021