installation guide
Supported operating systems are the 64-bit editions of:
■
Windows Server 2008 R2 SP1
■
■
Windows Server 2012
Windows Server 2012 R2
■
Windows Server 2016
(including additional service packs, if available)
■
■
■
■
■
■
■
■
■
■
■
■
■
The computer has at least one network adapter.
The computer has at least 4 GB of RAM.
The Microsoft Internet Information Services (IIS) web server is disabled on the computer.
The HTTP/S ports 80, 443 and 8080 are available on the computer.
The computer can connect to the Apple Push Notification service (APNs).
The computer can connect to the Google Cloud Messaging (GCM) service.
The computer can connect to the Windows Push Notification service.
The computer can connect to the Sophos services.
Optional: The computer can connect to the Apple Volume Purchase Program (VPP) web service.
Optional: The computer can connect to the Apple Device Enrollment Program (DEP) web service.
Optional: The computer can connect to the Apple iTunes web service.
Optional: The computer can connect to the Apple Activation Lock Bypass web service.
Optional: The computer can connect to the Google web service for Android enterprise.
4.3 Request an SSL certificate for Sophos Mobile
In order to set up Sophos Mobile, you need an SSL web server certificate. In the setup process, you can select between creating a self-signed certificate and using a PKCS #12 with certificate, private key and certificate chain. For further information, see
Install and set up the Sophos Mobile server
(page 8). Your Sophos product delivery includes an SSL Certificate Wizard to request your SSL certificate for the Sophos Mobile EAS proxy. Run the wizard from the
%MDM_HOME%\tools\Wizard
folder, or download it from www.sophos.com/mysophos .
Note: If you use a self-signed certificate or a certificate that is issued by your own certificate authority (CA), you must manually install that self-signed certificate or your CA certificate on your devices before you enroll them with Sophos Mobile. If you do not do this, the Sophos Mobile
Control app will not trust your server and will refuse to connect. Certificates issued by a globally trusted CA do not require this manual installation.
Note: You cannot install Android apps from APK files that are hosted on the Sophos Mobile server if you use a self-signed certificate or a certificate that is issued by your own CA.
7
