Sophos Mobile Control
10
6 Run the configuration wizard
When you log in to the Sophos Mobile Control web console for the first time after installation, a configuration wizard is started to configure certain server settings.
You need to provide:
An SMC Standard license key, optionally an additional SMC Advanced license key
SSL certificate(s)
SMTP credentials
HTTP proxy credentials (optional)
Note:
As a super administrator you can adjust these settings afterward on the System setup page of the Sophos Mobile Control web console. To open the System setup page from the menu sidebar, click SETTINGS > Setup > System setup.
To run the configuration wizard:
1. After you have logged in to the Sophos Mobile Control web console for the first time as super administrator, the Welcome view is displayed. Click Next.
2. If you use an HTTP proxy, configure the relevant server details in the HTTP proxy view: a) Select Proxy enabled.
b) Enter the Proxy host.
c) Enter the Proxy port.
d) Click Next.
3. In the License view, enter your SMC Standard license key or request a trial license:
SMC Standard license key:
When you enter the SMC Standard license key and click Activate, you are given the option to additionally enter an SMC Advanced license key. If you have purchased Advanced licenses, enter the key in Advanced license key.
Request a trial license:
To request a trial license click Request trial and enter the email address you used when you registered to download the Sophos Mobile Control installer from www.sophos.com.
Then click Request trial again.
Note: You can change the license settings at any time in the Sophos Mobile Control web console. If you do not enter an SMC Advanced license key here, you can do it in the web console later on.
Click Next.
4. In the SSL view, configure the certificates to be used for securing the SSL connection between the Sophos Mobile Control server and the clients.
startup guide
You can configure up to four certificates because, depending on your network architecture, different certificates for clients connecting from the Internet or from your local intranet may be in use. The Sophos Mobile Control server will communicate the list of certificates to the clients.
On establishing an SSL connection, the clients will only trust the server if the presented certificate is included in the list (certificate pinning).
a) Click Auto-discover certificate(s).
In most cases the auto-discover function is sufficient to discover the certificates currently in use.
b) If the certificates cannot be discovered automatically, you can upload them manually by clicking Upload a file and selecting the relevant CER or DER file.
The certificates are displayed in the SSL view.
Important: Update the list when you have changed or renewed SSL certificates. At any given time, at least one valid certificate must be available. Otherwise the clients will not trust the server and will not connect to it.
5. In the SMTP view, configure the SMTP server information and logon credentials. SMTP must be configured to enable emails to be sent to new users, providing them with logon credentials.
It also needs to be configured to enable enrollment through email.
Option
SMTP Host
Connection Type
SMTP user
SMTP password
Email originator
Originator name
Description
The SMTP server address.
Select SSL, TLS or plain.
If required by the SMTP server, enter the name of a user that is allowed to connect.
The password of the SMTP user.
The email address that will appear in the From field of emails from
Sophos Mobile Control.
The author name that will appear in the From field.
If required, you can configure a different originator name (but not email address) for each customer later on. See the Sophos Mobile
Control administrator help .
Send error emails
Sophos Mobile Control will send error emails, for example when an
APNs certificate expires.
Enter email addresses of the recipients that will receive error emails.
Email recipients
Note: Sophos Mobile Control does not support the OAUTH mechanism for SMTP authentication. Email providers that prefer OAUTH (like for example Google Gmail) might classify sign-in attempts from Sophos Mobile Control as insecure.
11
Sophos Mobile Control
6. After you have configured the relevant information, click Send test email to verify the email configuration.
7. Click Save.
12
