Welcome to eScan Wikipedia

From eScan Wiki

Revision as of 06:41, 26 March 2018 WikiSysop (Talk | contribs) ← Previous diff		Current revision WikiSysop (Talk | contribs) (→'''Pre-Requisites for Managing iOS Devices''')
Line 3:		Line 3:
	'''Overview'''		'''Overview'''
-	The eScan EMM requires a SSL certificate to manage your iOS devices from the EMM console. This document gives you information on all the pre-requisites for managing iOS devices and how you can import the SSL certificate .It also briefs on what the certificate is about and where you can purchase the same.	+	The eScan EMM requires a SSL certificate to manage your iOS devices from the EMM console. This document gives you information on all the pre-requisites for managing iOS devices and how you can import the SSL certificate. It also briefs on what the certificate is about and where you can purchase the same.
		+
	'''Steps required:'''		'''Steps required:'''
-	1. Make sure you have a dedicated IP. You can have static IP or use NATing *	+	<ol>
		+	<li> Make sure you have a dedicated IP. You can have static IP or use NAT '''*'''</li>
-	2. Decide on a domain name.You need to decide a domain name for your EMM console to which the connecting devices are directed to your server, for ex: emm.abc.com.	+	<li> Decide on a domain name.<br>
		+	You need to decide a domain name for your EMM console to which the connecting devices are directed to your server, for eg: emm.mycompany.com</li>
-	3. Acquiring the C.A certificate from an Apple approved CA**	+	<li> Add A-record. Creating an A-record will re-direct anyone who visits emm.mycompany.com to the dedicated IP. For more information on creating your A-record please contact your DNS provider/Name Server Provider. </li>
		+	<li> Make sure that the below ports are made available for proper functionality.<br>
		+	Ports: 10443,2021,2221,2222,2225,2226,443,3333.<br>
		+	In case, you are using NAT or NO-IP, port redirection to the local Corporate 360 server will be required.
		+	</li>
-	4. Add A-record	+	<li> Acquiring the SSL certificate from an Apple approved Certificate Authority (CA) '''**'''. Refer below link for more help on "How to generate a SSL certificate using Certificate Authority (CA)".<br>
		+	http://wiki.escanav.com/wiki/index.php/Escan/english/escan11/eScan_Management_Console/EMM/Generate_SSL_Cert_iOS_Mgmt
		+	</li>
-	5. Import certificate and start managing your iOS devices *If you are using NATing please refer this document for more information.	+	<li>Import certificate and start managing your iOS devices.</li>
-	** List of Apple Approved CA	+	</ol>
		+
		+	'''*''' If you are using NATing please refer this link for more information<br>
		+	https://en.wikipedia.org/wiki/Network_address_translation
		+
		+	'''**''' List of Apple Approved CA
	https://support.apple.com/en-us/HT204132		https://support.apple.com/en-us/HT204132
-	How to import a C.A certificate on the eScan Corporate 360 EMM console?	+	'''Please Note: '''
-	To add the certificate when you log into the eScan Corporate 360 console for the first time:	+	<ol>
-	Click on eScan Mobility Management (EMM) .It opens the EMM console use only for Android and iOS devices.	+	<li> This is not the iOS certificate or some certificate that will be provided by Apple.</li>
-	Under To manage iOS devices you need to add a Trusted CA Certificate, click on Start with iOS.It opens a new window where you can import your certificate files.	+
-	Browse the file from your local drive.	+	<li> This is a normal SSL certificate that organization's use on their server for SSL communication (https). Eg: When you connect to a website www.escanav.com you are on a secured connection, as this server 'escanav.com' has a SSL certificate installed.</li>
-	Save the files.You will see a confirmation message “Certificate added successfully ”.	+
-	Note: Make sure you add an authentic CA certificate in .crt file format and .key file format for the key. Self-signed file will not be accepted.	+	<li> If you are having the server as 'emm.mycompany.com', you need to get a SSL certificate for the domain emm.mycompany.com. You will have to buy this from a CA or generate it for free. </li>
-	To add the CA certificate if	+
-	You had selected to proceed with "Start with Android (without iOS)" earlier	+	<li> The certificate thus bought from the CA has to be renewed every year or if it is for free it has to be renewed every 3 months.</li>
-	or	+
-	You have deleted the previous certificate please follow the steps below:	+	<li>This certificate needs to be imported in the console, for the server and the Apple servers to communicate securely. </li>
-	On the left menu click Settings.	+	</ol>
-	Select Certificate Management tab.	+
-	Click the Add button.The Add Certificate window is displayed.	+	'''How to import a SSL certificate in the eScan Corporate 360 EMM console?'''
-	Browse the file from your local drive.	+
-	Save the files. You will see a confirmation message “Certificate added successfully”.	+	'''A. To add the certificate when you log into the eScan Corporate 360 console for the first time:'''
-	What is a CA certificate?	+	<ol>
		+	<li>Click on '''eScan Mobility Management (EMM)'''.
		+
		+	It opens the EMM console use only for Android and iOS devices.</li>
		+
		+	<li>Under '''To manage iOS devices you need to add a Trusted CA Certificate,''' click on '''Start with iOS.'''
		+	It opens a new window where you can import your certificate files.</li>
		+
		+	<li>'''Browse''' the file from your local drive.</li>
		+
		+	<li>Save the files.<br>
		+	You will see a confirmation message '''“Certificate added successfully ”.'''</li>
		+	</ol>
		+	'''Note:''' Make sure you add an authentic CA certificate in .crt file format and .key file format for the key. Self-signed file will not be accepted.
		+
		+
		+	'''B. To add the CA certificate if '''
		+	<ol style="list-style-type:lower-roman">
		+	<li> You had selected to proceed with "'''Start with Android (without iOS)'''" earlier</li>
		+
		+	'''or'''
		+
		+	<li>You have deleted the previous certificate please follow the steps below:</li>
		+	</ol>
		+
		+	<ol >
		+	<li> On the left menu click '''Settings'''.</li>
		+
		+	<li> Select '''Certificate Management''' tab.</li>
		+
		+	<li> Click the '''Add''' button.
		+
		+	The '''Add Certificate''' window is displayed.</li>
		+
		+	<li> '''Browse''' the file from your local drive.</li>
		+
		+	<li>Save the files.
		+	You will see a confirmation message '''“Certificate added successfully”.'''</li>
		+	</ol>
		+
		+	'''What is a CA certificate?'''
		+
	To manage iOS devices on the EMM console you are required to add a trusted CA certificate.		To manage iOS devices on the EMM console you are required to add a trusted CA certificate.
	A certificate authority (CA) is a trusted entity that issues electronic documents that verify a digital entity’s identity on the Internet.		A certificate authority (CA) is a trusted entity that issues electronic documents that verify a digital entity’s identity on the Internet.
	The digital certificate is an essential part of secure communication and plays an important part in the public key infrastructure (PKI).		The digital certificate is an essential part of secure communication and plays an important part in the public key infrastructure (PKI).
	Certificates typically include the owner's public key, the expiration date of the certificate, the owner's name and other information about the public key owner.		Certificates typically include the owner's public key, the expiration date of the certificate, the owner's name and other information about the public key owner.
-	Why is a CA Certificate required?	+
-	The certificate is from a trusted third party who is responsible for physically verifying the legitimacy of the identity of an individual or organization before issuing a digital certificate. It guarantees that the individual granted the unique certificate is, in fact, who he or she claims to be. This allows others (relying parties) to rely upon signatures or on assertions made about the private key that corresponds to the certified public key.	+
-	How to purchase a CA certificate?	+	'''Why is a CA Certificate required?'''
-	Please contact an authentic SSL certificate issuing authority (like Lets Encrypt (free provider), Rapid SSL , Comodo etc.) to purchase a CA certificate. Make sure the certificate they issue is mentioned among the list in the link below.	+
-	List of Apple Approved CA https://support.apple.com/en-us/HT204132	+	The certificate is from a trusted third party who is responsible for physically verifying the legitimacy of the identity of an individual or organization before issuing a digital certificate. It guarantees that the individual granted the unique certificate is, in fact, who he or she claims to be. This allows others (relying parties) to rely upon signatures or on assertions made about the private key that corresponds to the certified public key.
-	How to create your A-record for the dedicate IP?	+
		+
		+	'''How to purchase a CA certificate?'''
		+
		+	Please contact an authentic SSL certificate issuing authority (like '''Lets Encrypt''' (free provider), '''Rapid SSL , Comodo''' etc.) to purchase a CA certificate. Make sure the certificate they issue is mentioned among the list in the link below.
		+
		+	List of Apple Approved CA '''[https://support.apple.com/en-us/HT204132 https://support.apple.com/en-us/HT204132]'''
		+
		+
		+	'''How to create your A-record for the dedicate IP?'''
		+
	Creating an A- record will re-direct anyone who visits your EMM to the dedicated IP. For more information on creating your A-record please contact your ISP.		Creating an A- record will re-direct anyone who visits your EMM to the dedicated IP. For more information on creating your A-record please contact your ISP.
-	Deployment Scenarios	+
-	The eScan EMM for iOS devies can be used in the scenarios recommended as below.	+
-	Scenario 1: eScan server is installed on a system and a Static IP (Public IP) is assigned to the system. Scenario 2: eScan server is installed on a system locally and NAT with port redirection is done to the server system. Scenario 3: Usage of Dynamic DNS as an alternative for Native DNS services is not recommended.	+	'''Deployment Scenarios'''
-	Note:	+
-	SSL Sniffing devices provide their own Certificate, which would be rejected by EMM and iOS during the validation process. Disable SSL Sniffing for Network Interfaces of EMM.	+	The eScan EMM for iOS devies can be used in different scenarios as below.
-	Self-Signed Certificates are not accepted.	+
		+	'''Scenario 1:''' eScan server is installed on a system and a Static IP (Public IP) is assigned to the system.
		+
		+	'''Scenario 2:''' eScan server is installed on a system locally and NAT with port redirection is done to the server system.
		+
		+
		+	'''Note:'''
		+
		+	1. SSL Sniffing devices provide their own Certificate, which would be rejected by EMM and iOS during the validation process. Disable SSL Sniffing for Network Interfaces of EMM.
		+
		+	2. Self-Signed Certificates are not accepted.

---

Current revision

Pre-Requisites for Managing iOS Devices

Overview

The eScan EMM requires a SSL certificate to manage your iOS devices from the EMM console. This document gives you information on all the pre-requisites for managing iOS devices and how you can import the SSL certificate. It also briefs on what the certificate is about and where you can purchase the same.

Steps required:

1. Make sure you have a dedicated IP. You can have static IP or use NAT *
2. Decide on a domain name.
   You need to decide a domain name for your EMM console to which the connecting devices are directed to your server, for eg: emm.mycompany.com
3. Add A-record. Creating an A-record will re-direct anyone who visits emm.mycompany.com to the dedicated IP. For more information on creating your A-record please contact your DNS provider/Name Server Provider.
4. Make sure that the below ports are made available for proper functionality.
   Ports: 10443,2021,2221,2222,2225,2226,443,3333.
   In case, you are using NAT or NO-IP, port redirection to the local Corporate 360 server will be required.
5. Acquiring the SSL certificate from an Apple approved Certificate Authority (CA) **. Refer below link for more help on "How to generate a SSL certificate using Certificate Authority (CA)".
   http://wiki.escanav.com/wiki/index.php/Escan/english/escan11/eScan_Management_Console/EMM/Generate_SSL_Cert_iOS_Mgmt
6. Import certificate and start managing your iOS devices.

* If you are using NATing please refer this link for more information
https://en.wikipedia.org/wiki/Network_address_translation

** List of Apple Approved CA https://support.apple.com/en-us/HT204132

Please Note:

1. This is not the iOS certificate or some certificate that will be provided by Apple.
2. This is a normal SSL certificate that organization's use on their server for SSL communication (https). Eg: When you connect to a website www.escanav.com you are on a secured connection, as this server 'escanav.com' has a SSL certificate installed.
3. If you are having the server as 'emm.mycompany.com', you need to get a SSL certificate for the domain emm.mycompany.com. You will have to buy this from a CA or generate it for free.
4. The certificate thus bought from the CA has to be renewed every year or if it is for free it has to be renewed every 3 months.
5. This certificate needs to be imported in the console, for the server and the Apple servers to communicate securely.

How to import a SSL certificate in the eScan Corporate 360 EMM console?

A. To add the certificate when you log into the eScan Corporate 360 console for the first time:

1. Click on eScan Mobility Management (EMM). It opens the EMM console use only for Android and iOS devices.
2. Under To manage iOS devices you need to add a Trusted CA Certificate, click on Start with iOS. It opens a new window where you can import your certificate files.
3. Browse the file from your local drive.
4. Save the files.
   You will see a confirmation message “Certificate added successfully ”.

Note: Make sure you add an authentic CA certificate in .crt file format and .key file format for the key. Self-signed file will not be accepted.

B. To add the CA certificate if

1. You had selected to proceed with "Start with Android (without iOS)" earlier

or

2. You have deleted the previous certificate please follow the steps below:

1. On the left menu click Settings.
2. Select Certificate Management tab.
3. Click the Add button. The Add Certificate window is displayed.
4. Browse the file from your local drive.
5. Save the files. You will see a confirmation message “Certificate added successfully”.

What is a CA certificate?

To manage iOS devices on the EMM console you are required to add a trusted CA certificate. A certificate authority (CA) is a trusted entity that issues electronic documents that verify a digital entity’s identity on the Internet. The digital certificate is an essential part of secure communication and plays an important part in the public key infrastructure (PKI). Certificates typically include the owner's public key, the expiration date of the certificate, the owner's name and other information about the public key owner.

Why is a CA Certificate required?

The certificate is from a trusted third party who is responsible for physically verifying the legitimacy of the identity of an individual or organization before issuing a digital certificate. It guarantees that the individual granted the unique certificate is, in fact, who he or she claims to be. This allows others (relying parties) to rely upon signatures or on assertions made about the private key that corresponds to the certified public key.

How to purchase a CA certificate?

Please contact an authentic SSL certificate issuing authority (like Lets Encrypt (free provider), Rapid SSL , Comodo etc.) to purchase a CA certificate. Make sure the certificate they issue is mentioned among the list in the link below.

List of Apple Approved CA https://support.apple.com/en-us/HT204132

How to create your A-record for the dedicate IP?

Creating an A- record will re-direct anyone who visits your EMM to the dedicated IP. For more information on creating your A-record please contact your ISP.

Deployment Scenarios

The eScan EMM for iOS devies can be used in different scenarios as below.

Scenario 1: eScan server is installed on a system and a Static IP (Public IP) is assigned to the system.

Scenario 2: eScan server is installed on a system locally and NAT with port redirection is done to the server system.

Note:

1. SSL Sniffing devices provide their own Certificate, which would be rejected by EMM and iOS during the validation process. Disable SSL Sniffing for Network Interfaces of EMM.

2. Self-Signed Certificates are not accepted.

• Main Page

  • HOME

• Latest Developments

  • Virus - Alerts
  • News
  • Press Releases
  • Event Feeds
  • Marketing
  • Advertisement

• Product Information

  • eScan for Windows
  • MailScan for Windows
  • Nemasis

• Knowledge Base

  • eScan
  • MailScan
  • Technologies
  • Technical Information
  • Security Awareness
  • User Guides
  • eScan Tutorials (Videos)
  • Online Guide for eScan for Windows
  • Online Guide for eScan for Linux
  • Online Guide for eScan for Mac

• For Windows Downloads

  • eScan for Windows ver.22
  • eScan for Windows ver.14
  • eScan for Windows ver.11
  • eScan for Windows ver.10
  • eScan for Windows ver.9
  • MailScan for Windows 7.x
  • MailScan for Windows 6.x
  • MailScan for Windows 5.x
  • Anti-Virus Toolkit
  • Hotfixes
  • Weekly Updates
  • User Guide

• For Linux Downloads

  • Linux Products List
  • Hotfixes
  • User Guide

• For MAC Downloads

  • eScan for Mac
  • Product Documents

• General

  • Beta Testing
  • Release Candidate
  • Glossary
  • Customer Testimonials

• Support

  • eMail
  • Online Chat
  • Telephonic Support
  • Remote Support

Views

• Article
• Discussion
• Edit
• History