Sophos Mobile
20
Protocol
UDP
Ports
45700
Destination
<Incoming>
Server certificates
When you set up Sophos Mobile, you configure an SSL web server certificate that allows the
Sophos Mobile Control app to establish a secure connection to the Sophos Mobile server. We recommend that you use a certificate that is issued by a globally trusted certificate authority (CA).
In a clustered environment with several SMC server nodes behind a load balancer, this might not be practical. You might want to use a self-signed certificate instead. Sophos Mobile supports self-signed certificates, but the following restrictions apply:
■
■
If you use a self-signed certificate or a certificate that is issued by your own certificate authority
(CA), you must manually install that self-signed certificate or your CA certificate on your devices before you enroll them with Sophos Mobile. If you do not do this, the Sophos Mobile Control app will not trust your server and will refuse to connect. Certificates issued by a globally trusted
CA do not require this manual installation.
You cannot install Android apps from APK files that are hosted on the Sophos Mobile server if you use a self-signed certificate or a certificate that is issued by your own CA.
6.2 Set up cluster nodes
To set up a clustered environment you install the first node as described in
Install and set up the
Sophos Mobile server (page 8). Clustering itself is then activated using the Configuration
Wizard.
For all other nodes, the database created during installation of the first node has to be selected and clustering has to be activated.
Note: It is also possible to configure an existing SMC server for clustering and to extend the environment by adding additional nodes.
6.2.1 Set up the first node
1. Install Sophos Mobile as described in
Install and set up the Sophos Mobile server (page 8)
and write down the name of the database you created. Specify this database when installing further nodes.
2. At the end of the installation deselect the Start Sophos Mobile Control server now option in the Sophos Mobile - Installation finished dialog.
Note: If the SMC service has already been started it will automatically be stopped and restarted during the configuration described later in this section. Alternatively, you can manually stop the service from the menu of the Sophos Mobile Control system tray icon.
3. On the server, click Start, go to Sophos Mobile Control and click SMC Configuration Wizard.
4. The Welcome page of the Sophos Mobile Configuration Wizard is displayed. Click Next.
