intel® small business extended access€¦ · intel® software products are copyrighted by and...

Intel® Small Business Extended Access Deployment Guide


ii

Legal Notices and Disclaimers

Disclaimers INTEL® CORPORATION MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. INTEL® CORPORATION ASSUMES NO RESPONSIBILITY FOR ANY ERRORS THAT MAY APPEAR IN THIS DOCUMENT. INTEL® CORPORATION MAKES NO COMMITMENT TO UPDATE NOR TO KEEP CURRENT THE INFORMATION CONTAINED IN THIS DOCUMENT.

THIS PRODUCT INCLUDES SOFTWARE DEVELOPED BY THE OPENSSL PROJECT* FOR USE IN THE OPENSSL TOOLKIT (HTTP://WWW.OPENSSL.ORG)

THIS SPECIFICATION IS COPYRIGHTED BY AND SHALL REMAIN THE PROPERTY OF INTEL® CORPORATION. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED HEREIN.

INTEL® DISCLAIMS ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PROPRIETARY RIGHTS, RELATING TO IMPLEMENTATION OF INFORMATION IN THIS SPECIFICATION. INTEL® DOES NOT WARRANT OR REPRESENT THAT SUCH IMPLEMENTATIONS WILL NOT INFRINGE SUCH RIGHTS.

NO PART OF THIS DOCUMENT MAY BE COPIED OR REPRODUCED IN ANY FORM OR BY ANY MEANS WITHOUT PRIOR WRITTEN CONSENT OF INTEL® CORPORATION. INTEL® CORPORATION RETAINS THE RIGHT TO MAKE CHANGES TO THESE SPECIFICATIONS AT ANY TIME, WITHOUT NOTICE.

Legal Notices Intel® software products are copyrighted by and shall remain the property of Intel® Corporation. Use, duplication or disclosure is subject to restrictions stated in the Intel® Software License Agreement, or in the case of software delivered to the government, in accordance with the software license agreement as defined in FAR 52.227-7013. The Intel® logo is a registered trademark of Intel® Corporation. Other brands and names are the property of their respective owners.


1

Table of Contents Legal Notices and Disclaimers ........................................................................................................ iiDisclaimers ..................................................................................................................................... iiLegal Notices .................................................................................................................................. ii1. Overview ................................................................................................................................. 2

1.1 Audience ........................................................................................................................ 21.2 Set up Time .................................................................................................................... 21.3 Cost Estimate ................................................................................................................. 21.4 Intel® Small Business Extended Access Architecture .................................................... 21.5 Intel® Small Business Extended Access Security ........................................................... 21.6 Intel® Small Business Extended Access Terminology and Definitions .......................... 2

2. Intel® Small Business Extended Access Requirements .......................................................... 32.1 Software Requirements ................................................................................................. 32.2 Hardware Requirements ................................................................................................ 32.3 Network Requirements .................................................................................................. 3

2.3.1 Getting a host name .................................................................................................. 32.3.2 Purchasing a SSL certificate ...................................................................................... 42.3.3 ........................................................................................................................................ 42.3.4 Mapping ports ........................................................................................................... 4

2.4 Other Requirements ...................................................................................................... 53. Intel® Small Business Extended Access Deployment ............................................................. 6

3.1 Pre- installation Requirement ....................................................................................... 63.2 Appliance Deployment Overview .................................................................................. 63.3 Appliance Deployment .................................................................................................. 6

4. Trouble Shooting ................................................................................................................. 16

Deleted: 15


2

1. Overview Intel® Small Business Extended Access allows businesses to collaborate across internet in conjunction with the Intel® Small Business Advantage software. This document provides a quick setup guide for installing Intel® Small Business Extended Access on a desktop computer.

1.1 Audience This document is designed for use by small business users with no IT environment, resellers, Channel Partners and OEMs.

1.2 Set up Time Set up time can vary based on network configuration.

1.3 Cost Estimate

1.4 Intel® Small Business Extended Access Architecture MeshCentral is the underlying technology behind Intel® Small Business Extended Access. The collaboration features of Intel® Small Business Advantage utilize Intel® Small Business Extended Access to setup the WebRTC connections.

1.5 Intel® Small Business Extended Access Security The application relies upon Datagram Transport Layer Security (DTLS) to secure communications.

1.6 Intel® Small Business Extended Access Terminology and Definitions Client – system with Intel® Small Business Advantage installed. Appliance – system with Intel® Small Business Extended Access installed FQDN – Fully Qualified Domain Name IP Address – Internet Protocol Address IIS - Internet Information Services SSL – Secure Socket Layer UPnP – Universal Plug and Play


3

2. Intel® Small Business Extended Access Requirements Deployment of Intel® Small Business Extended Access software consists of installing two components:

• Client • Appliance

2.1 Software Requirements • A computer running one of the following operating systems:

o Microsoft* Windows* 8.1 o Microsoft* Windows* 10 o Microsoft* Windows Server* 2012

• Microsoft* SQL Server* 2010 or Microsoft* SQL Server* 2012 must be installed • Microsoft* .NET 4.5 framework must be installed • IIS enabled as a features of Microsoft* Windows*

2.2 Hardware Requirements Minimum requirements:

• Intel® Core i3 or greater • 2 GB RAM or greater • 250 GB HDD or greater

Recommended Requirements:

• Intel® Core i5 • 4 GB RAM • 500 GB HDD

2.3 Network Requirements When setting up an Intel® Small Business Extended Access instance within a small office network you will need to make changes to your network so that devices outside of your local network can communicate with the Intel® Small Business Extended Access appliance.

2.3.1 Getting a host name

In order to properly communicate over the internet, the Intel® Small Business Extended Access appliance needs an external host name. Public host names can be registered through Doman Name Service providers (example: GoDaddy, No-IP).

Additionally, your host name will need to be able to be linked to your network’s external IP address. If you have a static IP address, you can link your external IP address to your host name with your DNS provider when you register your host name. If you do not have a static IP address and hostname already, the best option is to register your host name through a dynamic


4

DNS provider (example: No-IP, ) and follow their instructions for linking your dynamic IP address to your host name.

Once you know your host name, run the Intel® Small Business Extended Access installer and enter the hostname when prompted by the installer.

2.3.2 Purchasing a SSL certificate

SSL certificates are used for secure communications between the Intel® Small Business Extended Access appliance and the Intel® Small Business Advantage software. This helps to verify that your Intel® SBA clients can verify that they are communicating with your Intel® Small Business Extended Access appliance and not an imposter. Purchasing a SSL certificate can generally be done at the same time you are purchasing the host name. Each provider has slightly different purchasing flows, just follow the instructions on the web site for purchasing and signing a SSL certificate.

2.3.3 Mapping ports

After you get an external hostname that resolves to your router, you need to map certain external ports to the ports on the Intel® Small Business Extended Access. Here are the ports that will need to be mapped to the internal IP address of the Intel® Small Business Extended Access appliance:

Port Usage Notes

TCP 80 HTTP web server port

TCP 443 HTTPS web server port

TCP 3478

UDP 3478

WebRTC TURN server

TCP 8000 Platform Manager default port

Optional

TCP 8080 Mesh agent, console and Intel® AMT CIRA port

TCP 8084 Web redirection port

TCP 9971 Intel® AMT Hello setup port Rarely used

UDP 8081 UDP direct traffic coordination port

Rarely used

UDP 55500 to 55900

Port Range assigned to the Mesh Relay Server


5

2.4 Other Requirements Windows firewall may not cause any difficulty during installation but if you have third party firewall then you should create an exception in your firewall for the Extended Access installer. You should contact your firewall vendor for specific details on how to create application exceptions.


6

3. Intel® Small Business Extended Access Deployment

3.1 Pre- installation Requirement When you are ready to deploy Intel® Small Business Extended Access, it is important that you meet pre-installation requirements. To get started, make sure SQL Server and .NET 4.5 are already installed.

3.2 Appliance Deployment Overview Verify that the appliance that you are using meets the minimum software and hardware requirements specified in section 2.

3.3 Appliance Deployment Once you have verified all the pre requirements, continue with the Intel® Small Business Extended Access software installers. To get started, you will need to run the “IntelSmallBusinessExtendedAccessInstaller.exe”.

1. Accept the prompt for administrator access to the system. This is required for installation.

2. The Intel® Update Manager will be installed (unless already currently installed on system). This application will notify you of future release updates for the Intel® Small Business Extended Access.


7

3. The Intel® Small Business Extended Access installer will display the license agreement. Review and accept the license agreement, then click the “Install” button to continue.

4. The next screen has two buttons: the top one to continue the installation flow and the second to start Platform Manager. In the file menu, you can select “Advanced Mode” to get more installation options. For this document, we will focus on the simple installation. Click on the top button to launch the install wizard. Note: The top button will be grayed out while system checks are being performed. Depending on your network configuration, this may take a few minutes to complete.


8

5. On the welcome page you are reminded that the content of the folder “C:\inetpub\wwwroot” will be replaced. If necessary move or backup this folder before clicking “Next” to continue.

6. On the next page, enter a SQL database settings and credentials if needed. You must have administrator access to the database for the installation to work. If you are using Microsoft SQL Server Express, you may need to enter “.\SQLExpress” as the server name.


9

7. Next is the external identity of this Intel® Small Business Extended Access installation. This is the external hostname and IP address used to access this Extended Access. These values will be used to configure certificates and initiliaze the settings needed to connect to the Extended Access. These values are very important. If these values are not correctly setup, you will have to uninstall and reinstall the Intel® Small Business Extended Access. Note: You must set it up using the external host name that was purchased in section 2.3.1.


10

8. This screen will be shown only if your computer is part of a Windows Domain. If it’s the case, you can setup the Extended Access so users will login using domain authentication. This is useful if you are on a corporate network. Normally the user “admin” is the default administrator, but if domain authentication is selected, enter the domain\username of the user that will be the administrator of the site.

9. Next we have settings for the Platform Manager. This is a tool used to manage the Extended Access. You need to set an external port and an administrator password. Note: It is not recommended to leave the password blank.


11

10. Finally, review the settings and click “Install”. The installer will start by creating the database, setting up account access, installing certificates and much more.


12

11. During installation the Platform Manager tool will be installed. After installing this tool, the installer will be done and the Platform Manager will take over for the rest of the package setup. Click the second button to launch the Platform Manager and connect to the server. Note: This process may take some time depending on network configuration.


13

12. Accept the remote certificate

13. Click on “Localhost” and then click “Connect” button to connect to the server.


14

14. Click the “Events” tab. You can follow the rest of the setup there. You should see 4 green circles in the tree view along with many web packages in two different web sites on the left.


15

15. When it’s done, open a browser to https://<externalhostname>/createnewaccount.aspx. Create an “admin” account and assign a password. The “admin” account is a reserved account which has special privileges in Intel® Small Business Extended Access.


16

4. Trouble Shooting

If any problem occurs during the installation, enter advanced mode in the Installer and take a look at the logs.

intel® small business extended access€¦ · intel® software products are copyrighted by and...

Documents