Cortado License Server (English)
Transcription
Cortado License Server (English)
License Server Installation of Cortado License Server and User Licensing for ThinPrint 10.6 Manual ThinPrint GmbH Alt-Moabit 91 a 10559 Berlin Germany / Alemania Cortado, Inc. 7600 Grandview Avenue Suite 200 Denver, Colorado 80002 USA / EEUU Cortado Pty. Ltd. Level 20, The Zenith Centre, Tower A 821 Pacific Highway Chatswood, NSW 2067 Australia E-Mail: [email protected] Web: www.thinprint.com Issued: March 27, 2015 (v78) Notes © Copyright This document is the intellectual property of ThinPrint GmbH. This document may be copied in whole or in part, provided this Copyright notice is included in every copy. ® Registered trade marks All hardware and software names mentioned in this document are the registered trademarks of their respective companies or should be regarded as such. Safety warning All ThinPrint products are pure software solutions. Please note the safety warnings in the technical documentation from your hardware vendor and from the manufacturer of each device and component. Before beginning installation, we recommend closing all windows and applications and deactivating any virus scanner. © ThinPrint GmbH 2015 2 Manual Contents Introduction ................................................................................................................ 4 Technical requirements ................................................................................................... 4 Network ................................................................................................................... License Server ........................................................................................................... HTML5 Browser ........................................................................................................ User account for installation ........................................................................................ Installation 4 5 5 6 .................................................................................................................. 6 Installing License Server .................................................................................................. 6 Licensing ThinPrint users ................................................................................... 10 Access user configuration .............................................................................................. 10 Assigning a license to a user .......................................................................................... 12 Editing or deleting users ................................................................................................ 15 Managing license keys ......................................................................................... 16 License key overview .................................................................................................... 16 Entering license keys .................................................................................................... 17 Activating license keys .................................................................................................. 17 Appendix .................................................................................................................... 20 Customer service and technical support .......................................................................... 20 Further installation options ............................................................................................ 20 Update ................................................................................................................... 20 Unattended installation ............................................................................................ 20 Uninstalling license server components ...................................................................... 20 Configuration with PowerShell ....................................................................................... 21 © ThinPrint GmbH 2015 Preparation ............................................................................................................. Import PowerShell modules ...................................................................................... Overview of PowerShell commands ............................................................................ Help for PowerShell commands ................................................................................. Example ................................................................................................................. 21 21 22 23 24 Additional resources ..................................................................................................... 24 Abbreviations and acronyms .......................................................................................... 24 Manual 3 Introduction Introduction With the license server you have a full-time overview of all your licenses and users. The ThinPrint product line offers first class print management for every IT environment – no matter whether it is server-based, virtualized or working on decentralized and mixed computer architectures. Mobile workers and home offices, as well as complete branches, are integrated into the enterprise's existing IT, enabling printing with no limitations on flexibility, performance or convenience. ThinPrint's license and user management is equally convenient: a central license server makes all the required license information available to remote print servers and Remote Desktop Session Hosts (formerly terminal servers) and ensures greater efficiency in the entire IT environment. Especially in large production environments, e.g. Remote Desktop Session Host farms, the management of licenses on application servers can put a strain on the entire IT system. Moreover, virtual machines and Remote Desktop Session Hosts are regularly updated and periodically renewed. In order to free up these computers from license and user management, ThinPrint has outsourced it to a dedicated server, which has no other tasks, e.g. printing or running applications. Thus, companies enjoy the benefits of centralized, simplified and user-based licensing in all application scenarios. This form of licensing, in which only as many licenses as are assigned to users are enabled, offers many advantages: it allows for flexible installation of virtual desktops and also, for virtual environments to be scaled up, as desired. Users can easily switch between applications on single Remote Desktop Session Hosts, workstations and virtual desktops without needing to be licensed for all servers or desktops. Since the ThinPrint license server is connected to the corporate AD, administrators can conveniently import both individual users and user groups. This makes ThinPrint and its numerous functions immediately available to the users. Thanks to a user friendly HTML5 management console, IT managers have all the important license information always on hand – whether it's the number of currently allocated or free licenses, any errors in the licensing process or the type of licenses used (permanent or temporary licenses). Additionally, PowerShell support facilitates user management in large environments. Technical requirements You will need a license server if you install ThinPrint Engine version 10 or later. That also applies for a test version with demo licenses. Network 1 4 https://technet.microsoft.com/en-us/library/cc732801%28v=ws.10%29.aspx Manual Cortado License Server.fm © ThinPrint GmbH 2015 The server must be a domain member. Users or servers with ThinPrint Engine installed can also be located in subdomains or trusted domains. Read-only DCs 1 are not supported. The name resolution must be set up forwards and backwards on the Domain Controller (forward and reverse lookup) Introduction License Server Supported server operating systems: • • • • Windows Windows Windows Windows Server Server Server Server 2012 R2 2012 2008 R2 SP1 2008 SP2 each one with the following default settings: • TCP port 4005 must be opened in the inbound direction so that the ThinPrint Engine can communicate with the License Server • TCP port 4004 must be opened inbound for the Management Console Cortado License Server 10.6 can be installed together with the following ThinPrint components on the same server (provided it’s supported by the respective operating system): • ThinPrint Engine • Mobile Print • Personal Printing Note! If Cortado License Server is to be installed on the server that has also ThinPrint Engine or Personal Printing installed make sure Personal Printing is installed first, then Cortado License Server and finally ThinPrint Engine. Do not install Cortado License Server with Cortado Corporate Server on the same machine. The following components are needed and will be checked during Readiness Check: • • • • • .NET Framework 3.5 .NET Framework 4.0 Microsoft ASP .NET MVC 3 Microsoft hotfixes KB2600088 or KB200217 PowerShell version 2.0 HTML5 Browser To license users, you can use the following browsers: © ThinPrint GmbH 2015 • Microsoft Internet Explorer, version 10 or higher • Google Chrome version 27 or higher • Mozilla Firefox version 21 or higher Monitor with a minimum resolution of 1024x768 pixels Cortado License Server.fm Manual 5 Installation User account for installation The server on which the license server is installed, must be a member of a domain. For all stages of installation and configuration, you will need a normal domain user account with local administrator permissions: – To install and configure the software, set up a normal user account in the AD (Active Directory). LicService used here as an example. – Then give this account local administrator permissions on the license server. Note! The server(s) with installed ThinPrint Engine(s) must be in the same domain (or subdomain/trusted domain) as the license server. Installation Installing License Server The following describes the installation using the installation wizard. Unattended installation is also possible (see Page 20). 1. Log on as a domain user with local administrator permissions (see above). 2. Start the installation program, e.g. Setup_ThinPrint_10.6_Complete_x64.exe or CortadoLicenseServer_x64.exe (Illus. 1). 3. Select Install Cortado License Server if you use the bundle installer Setup_ThinPrint_10.6_Complete_x64.exe. Illus. 1 Illus. 1 Starting installation program © ThinPrint GmbH 2015 6 Manual Cortado License Server.fm Installation 4. You will be informed which components will be installed. Click on INSTALL (Illus. 2) Illus. 2 Illus. 2 Starting installation 5. CORTADO LICENSE SERVER READINESS CHECK opens (Illus. 3). It may run for several minutes. Illus. 3 © ThinPrint GmbH 2015 Illus. 3 Cortado License Server Readiness Check Readiness Check will show you if all installation requirements have been met (green check marks). A yellow dot indicates that recommended requirements have not been met: continuing with the installation is possible, but with the restrictions detailed on the right (see DETAILS). A red cross (left arrow in Illus. 3) indicates an error. Click on DETAILS and in the text box on the right you will see a description of the error and how you can fix it (right arrow in Illus. 3). Installation cannot continue until this is rectified. Proceed only when you have all green check marks on the left. It may be necessary to cancel the installation, rectify a problem and then start the installation again. 6. InstallShield Wizard opens. Click NEXT. 7. Accept the license agreement and click NEXT. Cortado License Server.fm Manual 7 Installation 8. Confirm the installation folder or select a different one (Illus. 4). Illus. 4 Illus. 4 Select a folder for installation 9. In the next window, click INSTALL. 10. Select ENTER LICENSE KEY(S) if you already received license keys from your reseller or from ThinPrint or Cortado. Otherwise select DEMO MODE and confirm with FINISH (Illus. 5). Illus. 5 Illus. 5 Entering a license key Select a licensing type 11. If you selected ENTER LICENSE KEY(S) the window shown in Illus. 6 will appear. Copy your license key(s) into the white field, as shown on the left in Illus. 6 and click ENTER LICENSE(S). 8 Manual Cortado License Server.fm © ThinPrint GmbH 2015 Note! Use the same licensing for all users. That means: all users receive either ThinPrint Engine or ThinPrint Engine Premium licenses. It is not possible to simultaneously use ThinPrint Engine and ThinPrint Engine Premium licenses on one license server. Installation Illus. 6 Illus. 6 Copy license keys into the white field and click ENTER LICENSE(S) 12. This causes one of the exclamation marks in a red circle to change to a checkmark in a green circle (above right in Illus. 6). Click OK to continue. 13. CORTADO MANAGEMENT CONSOLE will open in your browser2. Sign in with the same account that you used for the installation (here: LICSERVICE, Illus. 7). Illus. 7 Illus. 7 Login to Cortado Management Console © ThinPrint GmbH 2015 The dashboard will open, where you can see at a glance, how many free licenses are available, which types of licenses you have and the closest expiry dates of your licenses or subscriptions (Illus. 8). 2 Cortado License Server.fm If you don't have an HTML5-enabled browser installed on your server, open the following link on another computer, using an appropriate browser: http://ServernameLicenseserver:4004/fw Please note: Problems may be experienced with Internet Explorer if the hostname includes an underscore (_); if so, use a different browser or a DNS alias. Manual 9 Licensing ThinPrint users Illus. 8 Illus. 8 Dashboard of Cortado Management Console Illus. 9 Start Menu: Cortado License and User Configuration (above) and Cortado License Manager (below) Illus. 9 If the license server is unavailable at any time, you will still benefit from a grace period of two weeks, during which all users are able to print. Licensing ThinPrint users Access user configuration http://AddressLicenseserver:4004/fw This requires that Port 4004 on the license server is open in the outbound direction. 10 Manual Cortado License Server.fm © ThinPrint GmbH 2015 To license users for ThinPrint, access Cortado Management Console (Illus. 7) from any HTML5 browser using the following address: Licensing ThinPrint users Alternatively select CORTADO LICENSE AND USER CONFIGURATION in the START menu (Illus. 9). Role-based access Access to Cortado Management Console can be performed in two roles; the admin role can configure, the user role is read-only. For this purpose, two user groups were created in AD-LDS during the installation of the license server (Illus. 10): • Cortado Configuration Admins configuration; assigning licenses • Cortado Configuration Users read-only To these groups, individual user accounts can be added. The account used for the installation is already entered in the admin group (here: LICSERVICE, Illus. 10). Where applicable, add users to one of these groups. Note! Restart the IIS after adding an account to the Cortado Configuration Admins group (to ensure that users can be imported from the AD using this account). Illus. 10 Illus. 10 © ThinPrint GmbH 2015 Excluding users Two new user groups can access the Cortado Configuration Console: Cortado Configuration Admins and Cortado Configuration Users Individual users can be added to the local ThinPrint Excluded Users group (Illus. 10) to exclude them from being automatically assigned ThinPrint licenses – in automatic user activation mode (see below). Cortado License Server.fm Manual 11 Licensing ThinPrint users Assigning a license to a user For your users to be able to print with ThinPrint, you must first assign them licenses. For this you need either a demo or a production license in the License Manager. You can enter it during installation (Illus. 6 on Page 9) or you can add it later (see Page 16). Two modes are available for activating users, i.e. assigning licenses to user accounts: • automatic user activation (default) • manual user activation Even with automatic user activation mode it’s still possible to activate users manually. Assigning licenses to user (groups) can also be done with scripts, see Configuration with PowerShell (Page 21). User accounts for Mobile Print are activated manually because Mobile Print is an additional feature (see ThinPrint Mobile Print manual). Global Settings – Open Cortado Management Console. Select CORTADO LICENSE AND USER CONFIGURATION in the START menu (Illus. 9). On the left you can now see the free user licenses (green). – Select CONTROL PANEL and then GLOBAL SETTINGS (Illus. 11). Illus. 11 Illus. 11 Control Panel – Select CONFIGURE on the ACTIVATION MODE tab (Illus. 12). Here, you can switch between automatic and manual user activation mode. © ThinPrint GmbH 2015 12 Manual Cortado License Server.fm Licensing ThinPrint users Illus. 12 Illus. 12 Changing activation mode – Then, to manage user accounts manually or enable them for Mobile Print, select CONTROL PANEL→ USERS (Illus. 11). – To add users manually, select the plus sign (arrow in Illus. 13). User management Illus. 13 Illus. 13 Add users via plus sign – You can then select either AD users or user groups, or single users (arrows in Illus. 14). Illus. 14 © ThinPrint GmbH 2015 Illus. 14 Cortado License Server.fm Selecting AD user (groups) or single users Manual 13 Licensing ThinPrint users – Preferably, select ACTIVE DIRECTORY (top arrow in Illus. 14). Domains with trusted domains and sub domains will also be listed here. Select the preferred domain and then click below on NEXT (Illus. 15). Illus. 15 Illus. 15 Check domain and click NEXT – Select the desired group and then click below on the IMPORT button. Confirm the ThinPrint license information with CONTINUE (Illus. 17). On successful licensing of all members, the group will receive a green tick (top arrow in Illus. 16). Below, you can see the used licenses, and those still available. Illus. 16 Illus. 16 Successfully imported group Illus. 17 ThinPrint license information Illus. 17 Manual © ThinPrint GmbH 2015 14 Cortado License Server.fm Licensing ThinPrint users Enter single user manually If you select individual users with ENTER SINGLE USER MANUALLY (bottom arrow in Illus. 14), you can either fill in one of the fields completely or search for a particular user using wildcards (Illus. 18). Illus. 18 Illus. 18 Searching for users using wildcards The imported users are displayed in the Management Console (Illus. 19). Illus. 19 Illus. 19 Licensed user in Cortado Management Console Editing or deleting users You can delete or (temporarily) disable users. In either case, the user licenses become free. You can then reassign licenses, if you want to import new users (see Illus. 13-19). The user is removed from Management Console and the license becomes free (top arrow in Illus. 20). Edit Selecting EDIT opens a dialogue, in which you can remove the check mark in front of THINPRINT ENABLED (right arrow in Illus. 20). The user remains on the list, but is (temporarily) disabled and the license becomes free. © ThinPrint GmbH 2015 Remove Cortado License Server.fm Manual 15 Managing license keys Illus. 20 Illus. 20 Mobile Print Removing or disabling a user: the license becomes free Using the MOBILE PRINT option (Illus. 20) users which already are enabled for ThinPrint can be enabled for Mobile Print additionally – in this case manually. Preconditions: a ThinPrint Premium license as well as a Mobile Print server which is already registered at the ThinPrint Notification Service. Then, with FORCE UPDATE, the settings must be sent to the Mobile Print server and thus to the ThinPrint Notification Service. For more information see the ThinPrint Mobile Print documentation. Managing license keys License key overview The following user-based license keys are available: • Annual license TLUS-0745-10- for ThinPrint Engine Premium • Perpetual licenses TPUD-0745-10- for ThinPrint Engine TPUS-0745-10- for ThinPrint Engine Premium wherein the number in the third block (here: 10) indicates the number of users. Premium licenses ThinPrint Premium licenses include the following additional components or products: Mobile Print Print job tracking Host Integration Service Management Center Connection Service Support of Microsoft Failover Clusters (Windows Server 2008 R2 only) It is usual to buy as many licenses as there are users in your domain. 16 Manual Cortado License Server.fm © ThinPrint GmbH 2015 • • • • • • Managing license keys Entering license keys – Open Cortado License Manager in the Start menu (see lower arrow in Illus. 9 on Page 10). You'll find your license keys here. The license manager can also be configured remotely, using the MMC. – You can use the menu to add license keys (top arrow, Illus. 22). Illus. 21 Illus. 21 Cortado License Manager Illus. 22 Adding a license key Illus. 22 Activating license keys New licenses (productive licenses) must be activated within 30 days. To do so, follow these steps: © ThinPrint GmbH 2015 1. Log on at Cortado Enterprise Portal https://enterpriseportal.cortado.com 2. Select the license key to be activated and click REQUEST ACTIVATION FOR SELECTED LICENSE(S), or UPLOAD ACTIVATION FILE WITH REGISTRATION KEYS for unattended installation. 3. Enter the corresponding registration key and click SEND. 4. Within one working day, the activation key will be displayed in Enterprise Portal (Illus. 23). Cortado License Server.fm Manual 17 Managing license keys Illus. 23 Illus. 23 Cortado Enterprise Portal – the requested activation key is displayed 5. In License Manager, mark a license key and select ACTIVATE in the context menu (Illus. 24). Illus. 24 Illus. 24 Activating a license key 6. Enter the activation key (Illus. 25). Illus. 25 Illus. 25 Entering an activation key © ThinPrint GmbH 2015 18 Manual Cortado License Server.fm Managing license keys 7. The license key (green) is displayed in License Manager with activation key and the ACTIVATED column displays YES (Illus. 26). Illus. 26 Illus. 26 Activated license The ThinPrint software no longer has a Valid Until time limit. © ThinPrint GmbH 2015 You can find detailed information about license keys, subscription keys, about activation and using the license manager in the manual Licensing (Page 24). Cortado License Server.fm Manual 19 Appendix Appendix Customer service and technical support www.thinprint.com/—>RESOURCES & SUPPORT www.thinprint.com/en-us/resourcessupport/supportrequest.aspx Further installation options Update – With an update installation from ThinPrint version 10.0 to 10.6 run the new setup routine on the existing license server – e.g. CortadoLicenseServer_x64.exe. Unattended installation – Type CortadoLicenseServer_x64.exe/? in the command line, to see the list of parameters that can support unattended installation of the license server. We recommend the following parameters: s: hides the initializing dialog (silent) v: parameter for msiexec.exe Example 1: The following command installs the license server silently. CortadoLicenseServer_x64.exe /s /v"/qb" Example 2: Installs the license server silently and changes the INSTALLDIR property to "C:\Program Files\MyFolder". CortadoLicenseServer_x64.exe /S /V"/qb INSTALLDIR=\"C:\Program Files\MyFolder\"" Example 3: Installs the license server silently and creates a log file. CortadoLicenseServer_x64.exe /S /V"/qb /L*v installation.log"" Uninstalling license server components 20 Manual Cortado License Server.fm © ThinPrint GmbH 2015 – To uninstall the license server, select CONTROL PANEL→ PROGRAMS AND FEATURES, highlight Cortado License Server 10.6 and click on UNINSTALL in the context menu. – Do the same for AD LDS Instance ThinPrint-AD-LDS. Appendix Configuration with PowerShell You can also use PowerShell for license management. That way it’s possible, for example, to integrate the activation of new users into automated processes. Preparation – Log in to the Cortado server with the account used for installation (see Page 6). – Run PowerShell for the first time as administrator. – Set the policies to import and use the PowerShell modules that were created when installing Cortado License Server. – To do so, enter the following command during the first use: Set-ExecutionPolicy remotesigned – Confirm the adjustment of the Policy with Y for Yes (see arrow in Illus. 27). Illus. 27 Illus. 27 Set PowerShell rights once only Import PowerShell modules Import modules Each time you open a PowerShell session or run a script, you have to import the PowerShell modules. For this enter the following command and confirm with ENTER. Import-module TPPowerShell Copying PowerShell files onto remote computers If you want to manage the license server from a remote computer, copy the folder TPPowerShell beforehand, from the license server onto the remote computer; give it the same path (Illus. 28): C:\Windows\System32\WindowsPowerShell\v1.0\Modules\TPPowerShell © ThinPrint GmbH 2015 Illus. 28 Illus. 28 Cortado License Server.fm Folder TPPOWERSHELL copied onto the remote computer using the same path Manual 21 Appendix Overview of PowerShell commands To get a list of all available commands (cmdlets), enter the following: Get-Command -Module TPPowerShell Then the available PowerShell commands will be displayed (Illus. 29). Illus. 29 Illus. 29 Displaying PowerShell cmdlets The following commands (cmdlets) are available: Function Add-TPUser Imports and enables one or more AD users for ThinPrint Connect-TP Connects to the Cortado License Server Disconnect-TP Disconnects from the Cortado License Server Get-RegistrationState Returns the current state of the mobile server registration process Get-TPLicenseinfo Returns licensing information: The number of licensed users and the number of free licenses Get-TPUser Retrieves a list of imported ThinPrint users containing the user principal names (UPN) Get-TPUserSettings Returns the ThinPrint-related user settings Remove-TPUser Removes ThinPrint user(s) from the License Server Set-MobileServerConfig Changes the users’ print job storage; see MOBILE PRINT USER STORAGE in GLOBAL SETTINGS of the Management Console Set-RegisterServer Registers a mobile server with its address and the e-mail account of an administrator (Step 1: Initialize, Step 2: Finish); see REGISTER SERVER in GLOBAL SETTINGS of the Management Console Manual Cortado License Server.fm © ThinPrint GmbH 2015 22 Cmdlet Appendix Cmdlet Function Set-SynchronizeToTPNS Transmits the user activation state to the ThinPrint Notification Service (TPNS); see FORCE UPDATE in MANAGEMENT CONSOLE→ USERS Set-TPUserActivationMode Sets the activation mode to AUTOMATIC or MANUAL; see ACTIVATION MODE in GLOBAL SETTINGS of the Management Console Set-TPUserSettings Sets the ThinPrint-related user settings Update-TPUser Enables/disables ThinPrint users Help for PowerShell commands You can display help texts for all PowerShell cmdlets. – Enter the designated command according to the following pattern: Get-Help add-tpuser – A help will be displayed for the corresponding Cmdlet, with syntax (upper arrow in Illus. 30). Illus. 30 Illus. 30 PowerShell: display help – To get further information you can add (see lower arrow in Illus. 30): © ThinPrint GmbH 2015 -examples -detailed -full Cortado License Server.fm Manual 23 Appendix Example Importing users To import a user, enter the following three commands, one at a time. Here you'll be asked for access data; specify an account that is a member of the group CORTADO CONFIGURATION ADMINS (see Page 11). Import-module TPPowerShell Connect-TP http://LicenseServer:4004 Add-TPUser User-UPN Example: Importing user5 and user6: Import-module TPPowerShell Connect-TP http://localhost:4004 Add-TPUser [email protected], [email protected] Additional resources The following manuals and technical information (amongst others) are available at www.thinprint.com/manuals: • • • • • • • ThinPrint Engine (on terminal servers or on print servers) ThinPrint Management Center ThinPrint Host Integration Service ThinPrint Connected Gateway Licensing Unattended installation of ThinPrint Engine components Cortado Enterprise Portal Abbreviations and acronyms Active Directory AD-LDS Active Directory Lightweight Directory DNS Domain Name System GUI Graphical User Interface IIS Internet Information Services (Microsoft) MMC Microsoft Management Console R2 Release 2 SP Service Pack TP ThinPrint UPN User Principal Name WMI Windows Management Instrumentation 24 Manual © ThinPrint GmbH 2015 AD Cortado License Server.fm