The backend of Parallels MDM, also known as the 'Server User Interface' consists of 10 tabs used to monitor, maintain and update MDM configuration and processes configured during the installation process including a few additional options.
Access the Server User Interface from the server Parallels MDM is installed on > click the MDM Program Group > click Parallels MDM Server.
The Status tab lists the Parallels MDM services, how long they have been running for and also allows for each individual service to be stopped and then started again:
- Device Server: Handles all communication between devices and the MDM Server.
- Background Services: Handles tasks which include email notification, SMS messaging, Push notifications etc.(Review 2. Status Tab for full description)
- Bridge Server: Handles Remote Control sessions via internet connection
- The server logs listed are extracted from the Windows Event logs and are useful for investigating behavior on the system.
From this tab, select to disable any of the services described in the âStatus Tabâ. In addition you can also disable any of the background tasks performed by Parallels MDM Background Services below:
- Email Sending Service: Enables the mailer thread that sends out Email notifications
- SMS Sending Service: Enables sending of SMS messages to devices
- Push Sending Service: Enables sending of Push notifications to devices
- iOS/ Android Device Wakeup: Sends push notifications to Android/ iOS devices to recreate a new session when the current session timeout is reached
- Client Offline Alert Service: Notifies administrators when a device has reached its offline alert configuration
- iOS App Refresh: Performs daily checks of applications iOS devices must install and uninstall since the last check was peformed
The settings tab consists of configuration options required for connectivity between the devices and the server running the Parallels MDM Service. The server address and certificate settings configured during the installation process may also be updated from here.
From the General section you can adjust the options below:
- Server Address: The MDM server FQDN (Example - mdm.company.com).
- Listening Port:The port used for devices to connect to the MDM server
- Minimum log level:Set the level of logging displayed on the Status tab
- Data Folder: The folder where MDM account data is stored
Optionally Enable Load Balancing Support to specify the URL used to access the MDM portal and the Subdomain URL that devices connect to:
- Portal Address: The URL pointing toward the server running the Parallels MDM Service
- MDM Service Address: The subdomain URL pointing toward the server running the Parallels MDM service
From the Bridge Server section, adjust the bridge server options below:
- HTTP Port: The port the browser connects through when using Remote Control
- Devices Port: The port devices connect through when Remote Control is enabled
- Max Connections:The number of Remote Control sessions allowed simultaneously
- Minimum log level: Set the level of logging displayed on the Status tab
From the SSL Certificate section, you can adjust the certificate settings configured during the installation process:
- Certificate (PFX Format): Define the path where the PFX file obtained by a Certificate Authority (CA) is stored
- Root Certificate:Select the Root Certificate file obtained by a Certificate Authority (CA) company. The file should end with a .cer extension
- Certificate password: Enter the certificate password
From here, configure settings required for the connection between your database and Parallels MDM Service.
From the General section configure the below:
- Server: Specify the IP address of the machine hosting your SQL database. If the database is located on the same machine you have installed Mobile Device Management on, you can also use localhost.
Connection Pooling is a cache of database connections maintained so that the connections can be reused when future requests to the database are made. If enabled, you can also adjust both the minimum and maximum connection pool size
The Roles section allows you to adjust the below roles configured during setup:
- Administrator: Username and Password of administrator account used to connect to the database
- Device: Username and Password for users created during setup process
- Common: Username and Password that can access and update all of the mdm tables
- Signup: Username and Password used to create MDM accounts
- Portal: Username and Password used to access the MDM portal
- Reports: Username and Password used by the reporting server to connect to the MDM database
Next, the Map tab allows you to configure which maps provider location updates will be resolved to and displayed on from the MDM portal.
Select the map provider you have registered with from the Provider dropdown and enter the related API key in the Provider API Key text field.
If Bing maps is selected, optionally also enable the âUse Microsoft Maps Background resolver serviceâ to resolve location points without an address.
This tab consists of settings required for both STMP and SMS message notifications to be sent by Parallels MDM. These settings were configured during setup.
From the SMTP Settings section you can adjust the settings below:
- Server:The SMTP server IP address or FQDNto be used.
- Port:The port number to be used for sending out emails.
- Email: The email address that you want to be shown when emails are sent out.
- Username:The username to be used if the mail server requires authentication.
- Password:Password for the username provided if the mail server requires authentication.
- Use Secure Connection: Tick this box if your SMTP server requires an SSL connection.
From the SMS Settings section configure the below:
- Username:Fill in the username obtained from CardBoard Fish.
- Password: Fill in the password for your CardBoard Fish account.
For MDM to communicate with GCM and send PUSH notifications to Android devices, configure or update the configuration options below:
- Project Number: The project number obtained by the Google Cloud Messaging project.
- API Key:The API Key obtained by the Google Cloud Messaging project.
Similarly, for iOS devices to be able to connect and communicate with your MDM server, configure or update the SCEP server configuration options below:
- SCEP Server URL:The URL pointing to your certificate SCEP server.
- Challenge Password:The challenge password generated by your certificate SCEP server.
- MDM Vendor PFX Path: Select the path to the certificate provided to you by Apple.
- Vendor Password: The Apple Certificate password
Parallels MDM uses AppFabric to distribute shared cache to multiple On-Premise installations of MDM. Enable AppFabric if you are hosting MDM on multiple servers. This way you can scale for different services running on different servers to share information via AppFabric.
Enable the Use AppFabric checkbox, click Add and configure the options below:
- Server Address: Server hostname to be used for AppFabric caching to store sessions of the MDM server
- Port: The port used to store sessions of the MDM server
You can alter the configuration options defined during the setup process used both to deploy and generate reports. The configuration options are listed below:
- Web Service URL: The URL pointing toward your Reporting Services end-point.
- Reporting Access: Toggle the reporting feature for the back office and admin portal.
- Portal User Login and Password: Enter Windows credentials that are configured in SSRS with browser permissions.
- Administrator Login Name and Password: Enter Windows credentials configured with administrator privileges and content management rights in SSRS.
The Advanced button allows you to define the database that will be used to generate reports. The Override Reporting Data Source option is typically enabled when the mdm database that reports will be generated with is mirrored on another server. If required, enable this feature and configure the below:
- Database Server: Specify the IP address of the machine hosting the mirrored SQL database
- Database Name:Specify the mirrored database name
- Database Username and Password: Mirrored Database credentials
- Show message in reports node: Set the value in hours equal to the mirrored database update interval used to alert administrators in the portal that report data may be as old as the value set.
Note: Setting the reporting Data Source to a mirrored mdm database takes load off the live database.
Lastly, data purging settings allow you to configure the amount of time data is retained for before being deleted from the MDM Server. You are able to control any data retention period of the data types below:
- Call History
- Session History
- Location History
- Data Usage
- Retired Devices