ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Going native with mobile applications:
XenMobile and beyond!
Citrix Synergy 2014
#SYN322
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
About Esther
 15+ years of Technical Consulting





Senior Consultant at PepperByte
MSc Computer Science
Design | Implement | Troubleshooting
Small <-> Large infrastructures
Government | Industry | Commerce
Your Presenter:
@virtues_IT
Citrix Synergy 2014
Esther Barthel
Senior Technical Consultant
http://nl.linkedin.com/in/ebarthel
#SYN322
http://www.virtues.it
2
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
About Esther
 15+ years of Technical Consulting





Senior Consultant at PepperByte
MSc Computer Science
Design | Implement | Troubleshooting
Small <-> Large infrastructures
Government | Industry | Commerce
 Author of:
 Citrix XenApp 6.5 Expert Cookbook
Your Presenter:
@virtues_IT
Citrix Synergy 2014
Esther Barthel
Senior Technical Consultant
http://nl.linkedin.com/in/ebarthel
#SYN322
http://www.virtues.it
3
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
About Sander
 15+ years working in IT
Technology Specialist
 Last 4 years at CononScenza
 Worked for government and
commerce companies
 Implementing and
troubleshooting environments
 Passion for IT
Soccer referee
Your Presenter:
@Bierpuffo
Citrix Synergy 2014
Sander Bierman
Technology Specialist
http://nl.linkedin.com/in/sbierman
#SYN322
http://www.conoscenza.nl/blogs.nl
4
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
About Sander
 15+ years working in IT
Technology Specialist
 Last 4 years at CononScenza
 Worked for government and
commerce companies
 Implementing and
troubleshooting environments
 Passion for IT
 Married and father of two daughters.
 Soccer referee
Soccer referee
Your Presenter:
@Bierpuffo
Citrix Synergy 2014
Sander Bierman
Technology Specialist
http://nl.linkedin.com/in/sbierman
#SYN322
http://www.conoscenza.nl/blogs.nl
5
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Agenda
 XenMobile Editions, Features & Architecture
 XenMobile Device Manager
 XenMobile AppController
 XenMobile Enterprise
 Lessons Learned
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
6
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Agenda
 XenMobile Editions, Features & Architecture
 XenMobile Device Manager
 XenMobile AppController
 XenMobile Enterprise
 Lessons Learned
Important notes during presentation!
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
7
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Definitions & Features
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
8
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Definitions & Features
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
9
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Definitions & Features
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
10
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Definitions & Features
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
11
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise (Architecture)
Citrix Synergy 2014
#SYN322
12
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise (Architecture)
Citrix Synergy 2014
#SYN322
13
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise (Architecture)
Citrix Synergy 2014
#SYN322
14
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise (Architecture)
Citrix Synergy 2014
#SYN322
15
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise (Architecture)
Citrix Synergy 2014
#SYN322
16
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Device Manager
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
17
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Pre-install checklist
 XenMobile Pre-install checklist
 eDocs: http://tinyurl.com/XMPreInstallChecklist
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
18
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Pre-install checklist
 XenMobile Pre-install checklist
 eDocs: http://tinyurl.com/XMPreInstallChecklist
All pre-install checks are required to install XenMobile Device
Manager, without licenses, certificates and FQDNs the
installation cannot complete.
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
19
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Installation & Configuration
 XenMobile Device Manager installation
 eDocs: http://tinyurl.com/XDMInstall
 NetScaler configuration
 Citrix Blog: http://tinyurl.com/XDMSSLOffloading
 Citrix Blog: http://tinyurl.com/XDMSSLOffloading2
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
20
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: XenMobile Device Manager
 64-bits install on Windows
 Windows Server 2003/2008/2008R2
 SQL Server (Express/Standard/Enterprise)
 PostgreSQL is installed by default
 Apache Web services (don’t install IIS)
 Apple Push Notification Service certificate
 Additional Java components
 Java Standard Edition 7 Deployment Kit
 Java Cryptography Extension (JCE) Unlimited
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
21
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: XenMobile Device Manager
 64-bits install on Windows
 Windows Server 2003/2008/2008R2
 SQL Server
(Express/Standard/Enterprise)
Ensure
User Access Control and TCP/IP 6 are disabled before
 PostgreSQL
is the
installed
by default
installing
XenMobile
Device Manager
 Apache Web services (don’t install IIS)
 Apple Push Notification Service certificate
 Additional Java components
 Java Standard Edition 7 Deployment Kit
 Java Cryptography Extension (JCE) Unlimited
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
22
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Manage corporate devices
 Create a LDAP connection to a user directory
 Define users and groups
 Create policies
 Create deployment packages
 Enroll users and devices
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
23
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Manage corporate devices
 Create a LDAP connection to a user directory
 Define users and groups
Separate policies and deployment packages need to be
 Create policies
created for each device (OS) type
 Create deployment packages
 Enroll users and devices
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
24
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: MDM Policies
 Create MDM policies per OS type
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
25
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: MDM Policies
 Create MDM policies per OS type
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
26
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Automated actions
 Automated action settings:




Trigger
Condition
Action
Option
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
27
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Deployment packages
 Use deployment packages to enforce device configurations
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
28
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Deployment packages
 Use deployment packages to enforce device configurations
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
29
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Deployment packages
 Use deployment packages to enforce device configurations
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
30
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Enrolling Users and Devices
 Invite users to enroll their devices
 Configure the notification server, templates & enrollment settings
 Send out the enrollment notification
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
31
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Enrolling Users and Devices
 Invite users to enroll their devices
 Configure the notification server, templates & enrollment settings
 Send outTothe
enrollment notification
enroll iOS devices an APNS certificate is required.
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
32
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XDM: Helpful tips
 Use macros to populate user or device property data
 Syntax: ${type.PROPERTYNAME}
 Check XenMobile logs
 Logs collection guide: http://support.citrix.com/article/CTX139421
 Create custom dashboards
 Use Client Certificate authentication
 Supported for XDM 8.6 and up
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
33
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile AppController
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
34
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Installation & Configuration
 App Controller configuration:
 eDocs: http://tinyurl.com/XACConfig
 NetScaler configuration:
 Knowledge Center: http://support.citrix.com/article/CTX139319
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
35
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: AppController
 Virtual appliance
 XenServer/vShpere/Hyper-V
 Initial network config in console
 Additional config in web console
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
36
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Enterprise App Store
 Deploy sandboxed Mobile Apps (Android & iOS),
Web & SaaS and Windows (published apps)
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
37
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Enterprise App Store
 Deploy sandboxed Mobile Apps (Android & iOS),
Web & SaaS and Windows (published apps)
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
38
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Enterprise App Store
 Deploy sandboxed Mobile Apps (Android & iOS),
Web & SaaS and Windows (published apps)
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
39
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Enterprise App Store
 Deploy sandboxed Mobile Apps (Android & iOS),
Web & SaaS and Windows (published apps)
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
40
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Enterprise App Store
 Deploy sandboxed Mobile Apps (Android & iOS),
Web & SaaS and Windows (published apps)
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
41
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: MDX enabled apps
 MDX Toolkit (a.k.a. Worx App SDK)
 Wrap native iOS (.ipa) / Android (.apk) packages
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
42
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: MDX enabled apps
 MDX Toolkit (a.k.a. Worx App SDK)
 Wrap native iOS (.ipa) / Android (.apk) packages
 Include application policies (restrictions/pre-config)
 iOS MDX Policies: http://tinyurl.com/MDXPoliOS
 Android MDX Policies: http://tinyurl.com/MDXPolAndroid
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
43
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: MDX enabled apps
 MDX Toolkit (a.k.a. Worx App SDK)
 Wrap native iOS (.ipa) / Android (.apk) packages
 Include application policies (restrictions/pre-config)
The MDX Toolkit only runs on Mac OSX
 iOS MDX Policies: http://tinyurl.com/MDXPoliOS
 Android MDX Policies: http://tinyurl.com/MDXPolAndroid
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
44
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: microVPN tunnel
 microVPN tunnel to internal resources
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
45
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: microVPN tunnel
 microVPN tunnel to internal resources
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
46
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Application Containers
 MDX App Vault (sandboxed on device)
 MDX App Interaction
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
47
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Application Containers
 MDX App Vault (sandboxed on device)
 MDX App Interaction
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
48
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: Application Containers
 MDX App Vault (sandboxed on device)
 MDX App Interaction
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
49
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: WorxWeb
 MDX Enabled
 Pre configured Intranet Browser
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
50
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: WorxWeb
 MDX Enabled
 Pre configured Intranet Browser
WorxWeb is not MDX enabled by default.
You’ll need to wrap it yourself with the MDX Toolkit.
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
51
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: WorxMail
 MDX Enabled
 Pre configured Mail client
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
52
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XAC: WorxMail
 MDX Enabled
 Pre configured Mail client
Save mobile device battery life and check out the
new STA method with WorxMail!
Citrix Blog: http://tinyurl.com/XACSTAtotherescue
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
53
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise
XenMobile
Enterprise
Edition
EMM
Attachment Encryption
ShareFile Enterprise
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
54
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Enterprise: Component integration
 Connect Device Manager to App Controller
 eDocs: http://tinyurl.com/XDMXACIntegration
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
55
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Enterprise: Component integration
 Connect Device Manager to App Controller
 eDocs: http://tinyurl.com/XDMXACIntegration
 Connect App Controller to ShareFile
 ShareFile support: http://tinyurl.com/XACSFIntegration
 eDocs: http://tinyurl.com/XACSFIntegration2
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
56
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
ShareFile Enterprise: StorageZone Connectors
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
57
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Enterprise: How to enable mobile computing?
Citrix Synergy 2014
#SYN322
58
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Enterprise: How to enable mobile computing?
 Choose Your Own (CYO)
 Corporate Devices are owned; can be controlled
 Bring Your Own (BYO)
=> XenMobile Device Manager
 Devices are not owned; less control
 Corporate apps are owned; can be controlled
 Enterprise App Store:
 MDX wrapped = Secure corporate apps & interactions
 Single store for all corporate apps
 Seamless migrate from Windows apps => Mobile apps
=> XenMobile AppController
Citrix Synergy 2014
#SYN322
59
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Lessons Learned
 Use a wildcard certificate for external SSL
 Use your own root CA/PKI for internal SSL
 Add root CA to NS, XDM and XAC cert store
 Use XDM self-signed certificates
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
60
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Lessons Learned
 Use a wildcard certificate for external SSL
 Use your own root CA/PKI for internal SSL
 Add root CA to NS, XDM and XAC cert store
 Use XDM self-signed certificates
 Get all DNS FQDNs in place before install
 Auto discovery record => Citrix Cloud Ops
 Auto discover => UPN instead of SAMAccountName
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
61
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Lessons Learned
 Get an Enterprise Apple Developer Account
 Personal account is limited to max. 100 devices
 MDX wrapper only runs on Mac OSX
 Virtual Mac doesn’t work
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
62
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Lessons Learned
 Get an Enterprise Apple Developer Account
 Personal account is limited to max. 100 devices
 MDX wrapper only runs on Mac OSX
 Virtual Mac doesn’t work
 Always use a test device!
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
63
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Lessons Learned
 Get an Enterprise Apple Developer Account
 Personal account is limited to max. 100 devices
 MDX wrapper only runs on Mac OSX
 Virtual Mac doesn’t work
 Always use a test device!
 Check the XenMobile Logs Collection Guide
 http://support.citrix.com/article/CTX139421
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
64
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
XenMobile Enterprise
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
65
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Community Help
 Visio stencils provided by @iainbrighton
 XenMobile experience shared by @Rink76 & @MartijnHS
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
66
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Presented by:
@virtues_IT
@Bierpuffo
Citrix Synergy 2014
Esther Barthel
Sander Bierman
Senior Technical Consultant
Technology Professional
http://nl.linkedin.com/in/ebarthel
http://nl.linkedin.com/in/sbierman
#SYN322
http://www.virtues.it
http://http://www.conoscenza.nl/nl/blog
67
ConoScenza: Sander Bierman
PepperByte: Esther Barthel
Resources
 Citrix eDocs
 XenMobile Solution Pre-Installation Checklist
http://support.citrix.com/proddocs/topic/xenmobile-87/xmob-prepare-xenmobile-checklist-con.html
 XenMobile Logs collection guide
http://support.citrix.com/article/CTX139421
 Community
 Robin Hobo: Installing and Configuring Citrix XenMobile MDM 8.6
http://www.robinhobo.com/installing-configuring-citrix-xenmobile-mdm-8-6/
 Adam Gamble: How to XenMobile MDM 8.5 Deployment
http://adamgamble.org/2013/09/08/how-to-xenmobile-mdm-8-5-deployment-part-3-policies/
Agenda > Architecture > XDM > XAC > Enterprise > Lessons Learned
Citrix Synergy 2014
#SYN322
68