Managing Mobile Users
with Novell ZENworks®

Brian Maseck

Senior Specialist – User and Asset Management

Novell, Inc.

Scott Guscar

Senior Specialist – User and Asset Management

Novell, Inc.

Supporting Mobile Users and Devices

Securing Communications

Importing Mobile Devices

Policy-Driven Automation

Application Management

Remote Management

Inventory

Agenda

Business ramifications of mobility

What is the cost of maintaining the Mobile Workforce?

Security risks are higher to the corporation

250,000 handheld devices left behind/lost in U.S. airports in 2001

Users don't configure passwords on their own mobile devices

Competitive environment requires “real-time” access to corporate data, even while on the road

Users on the road are in front of customers and partners, magnifying the importance of timely support

No additional or separate IT staff to manage mobile devices, management of handhelds and laptops must be automated and a part of existing management processes

Polling Question:

What percentage of your users are mobile?

Novell ZENworks 7 Suite

Novell

ZENworks

Handheld Management

Linux Management

Desktop Management

Software Packaging

Patch Management

Server Management

Data Management

Complete IT resource management for enterprise-wide efficiency

Everything you need in one suite at a cost that is 30% lower than purchasing individual components or you can buy only the individual pieces you need

Novell ZENworks
delivers powerful mobile management capabilities

Novell

ZENworks

Handheld Management

Linux Management

Desktop Management

Software Packaging

Patch Management

Server Management

Data Management

Browser-based software delivery

Firewall-friendly

Manage mobile workstations

Automatic distribution of applications, updates and patches

Application self-healing

Remote management

Desktop hardware and software inventory

Controlled delivery of thin-client applications

Novell ZENworks
Desktop/Laptop Management

Novell

ZENworks

Handheld Management

Linux Management

Desktop

Management

Software Packaging

Patch Management

Server Management

Data Management

Security management and self destruct

Software and content distribution

Handheld configuration management and lockdown

Automatic file retrieval

Manage Palm, Pocket PC and BlackBerry devices

Hardware and software inventory and reports

Optimized mobile communication software and content distribution

Novell ZENworks
Handheld Management

Novell

ZENworks

Handheld Management

Linux Management

Desktop

Management

Software Packaging

Patch Management

Server Management

Data Management

Secure data access

Automatic data backup

Access data securely from any device any time, any place

Delta updates of data across all devices

Novell ZENworks
Data Management

Novell

ZENworks

Handheld Management

Linux Management

Desktop

Management

Software Packaging

Patch Management

Server Management

Data Management

Systems Up-To-Date

OS Patches

Software Patches

Centralized Management

Patch-level Baseline

Reporting and role-based

Novell ZENworks
Patch Management

Novell

ZENworks

Handheld Management

Linux Management

Desktop

Management

Software Packaging

Patch Management

Server Management

Data Management

Novell eDirectory™

Novell ConsoleOne®

ZENworks Desktop Management Server

ZENworks
Middle Tier Server

ZENworks Management Agent

Managed Mobile Architecture

ZENworks

Handheld

Access Point

ZENworks Handheld
Mgmt Server

ZENworks
Handheld Client

ZENworks
Handheld Client

Desktop
Synchronization
Interface

Novell Client

&

ZENworks Management Agent

ZENworks Desktop Management Middle Tier Server

HTTP/S access to ZENworks Desktops Management services

Based on Apache/IIS web platform

ZENworks Desktops Management Agent

Provides the ability to communicate via XML to the middle tier server

Includes all of the workstation management software

Supporting Mobile Users and Devices

ZENworks Handheld Management Access Point

HTTP/S access to ZENworks Handheld Management Services

Uses HTTP/S encapsulation to communicate with ZENworks Handheld Management client

Runs on a Windows 2000/2003 server

ZENworks Handheld Management client

Communicates with access point or desktop synchronization agent

IP connectivity (WiFi, GRPS, BlueTooth, etc.)

Provides all of the device specific components

Supporting Mobile Users and Devices

Consider creating a sub-zoned DNS environment

Makes finding import servers easier

Makes finding middle tier servers easier

Makes getting applications and policies from local servers easier

New features to specify middle tier

DHCP Option 100

Location List

Supporting Mobile Users and Devices

Place replicas of the partitions that hold users, workstations, handhelds, and other ZENworks objects close to the entity that will be reading the information

If a laptop will be roaming both inside and outside the firewall with the Novell Client™ & ZENworks Management Agent installed, users must use an alternative login method and will receive applications only

Supporting Mobile Users and Devices

ZENworks Desktop Management Middle Tier

Replace NetIdentity certificate with a certificate signed by a trusted Certificate Authority (CA)

Configure a non-administrative proxy user account for LDAP lookups

ZENworks Desktops Management Agent

Configure to use secure port

Ensure CA is trusted

Can be distributed through NAL

Securing Communications

ZENworks Handheld Management Access Point

Enable HTTP/HTTPS encapsulation

Assign a certificate, issued by a trusted CA to the Access Point

ZENworks Handheld Management Client

Configure client to communicate on secure port

Certificate will automatically be sent to the client

Securing Communications

To allow management of devices (laptops and handhelds) independent of the user you must import the device

Configure import policy

Server Package for Laptops

Handheld Service Package for Handhelds

Configure the ZENworks Middle Tier to find the import server for laptops

Importing Mobile Devices

Use policies to restrict what users can do or enforce standards

Group Policies for Laptops

Disconnected Group Policies

Enable Persist WS Settings

Enable Cache User Settings

Make sure you are using UNC paths

Policy Management

Security Policy for Handhelds

Enable self destruct if not sync’d within x number of days

Require enhanced passwords on the handheld device

Data Retrieval Policy

Can be used to automatically backup critical files from the handheld during synchronization

Policy Management

Enable and configure Remote Connection Detection in Launcher Configuration

Automatically enables checkpoint restart

Allows NAL to determine when remote alternate application should be used

Allows the use of the Remote Access system requirement

Automatically allows MSI based applications to be distributed through the middle tier

Application Management

Use Application Site List for users that roam between sites

Ensures users automatically get the closest application

Uses ICMP to cost the closest server and then context matches to find closest app

Don’t forget to sync GUIDs

ZENworks Server Management makes it really easy to use App Site List

Application Management

To allow users outside the firewall to report application management events configure the Application Management Reporting Servlet

Requires Tomcat

Installed separately from ZENworks Desktop Management

Configured through an XML file on the Tomcat server

Application Management

For users that sometimes are disconnected, use alternative sources for NAL applications

Can be used to install or verify an application while disconnected from the network

Users can access NAL via the web by opening the MyApps.html file on the Middle Tier server

Appearance can be configured in the HTML file

Application Management

Applications are distributed to handhelds via normal application distribution in the ZENworks Handheld Management client

Packets will be HTTPS encapsulated to ensure Internet readiness and security

Recurring software distributions – ZENworks Handheld Management automatically scans the application source directories and distributes new or changed files

Handheld Application Management

ZENworks Desktop Management allows you to remote manage users through NAT

Must be enabled in the policy

Requires that the administrator be able to connect to the workstation address stored in the user or workstation object

Double-NAT requires user initiated session

Password based management

Allows remote management of un-imported workstations

Could be a potential security risk

Remote Management

Inventory is sent through the middle tier server or the handheld access point

Run any time the handheld is synchronized

Run any time the laptop is connected to the network and can access the middle tier

Bandwidth required for sending inventory is minimal as just the changes are typically being sent

Device Inventory

Putting the Pieces Together

Demonstration

Closing Remarks

Keep in mind for a successful project

Patching & Policies

Other sessions

Documentation

Communication, Communication, Communication

KARLIN INSERT SPOKE GRAPHIC HERE. As I mentioned to you I like the other graphic that you made in IO 115 that included Red Hat, etc. I like the style. So I would like to see what you can design on the Suite in a circle like that which includes Desktop Management, Handheld Management, Server Management, Linux Management, Software Packaging, Patch Management -kim

2003-12-08T12:43:39