Off-Network Support
Off-Network Support (ONS) allows a computer previously provisioned with Desktop Authority to continue receiving configuration updates while off-network. A computer that is considered to be off-network may have an Internet connection but the company network is unreachable.
To use this feature, Off-Network Support must be configured in the Desktop Authority Manager.
Off-Network Support is accomplished by using Desktop Authority's Replication capabilities. Configuration and necessary files are replicated to a configured Internet cloud service; currently Desktop Authority supports Amazon Web Services (AWS) and Microsoft Azure.
|
|
IMPORTANT: Prior to configuring ONS (Off-Network Support) within the Desktop Authority Console, you will first need to access the web portal for your intended cloud storage provider (AWS or Azure) to create the appropriate storage container(s). Visit the video help link on the ONS configuration page to access a Knowledge base article containing information on the necessary pre-configuration steps for both AWS and Azure usage. |
|
|
TIP: To prevent any unwanted dialogs or errors when off-network, the special SLBYPASS option file should be used. To configure this option refer to Special Option Files. |
Off-Network support Configuration
Edit
Click Edit to manually configure or manage Off-Network support settings.
Check connection
Click Check Connection to confirm that Desktop Authority can connect to the selected Off Network Storage Provider.
Select this Off-Network support box to enable and configure Off-Network support.
Off-Network provider
Select an Off-Network provider from the drop list. Currently Desktop Authority supports Amazon Web Services (AWS) and Microsoft Azure.
Amazon Web Services (AWS)
S3 Bucket Configuration
Auto Configure AWS
Click Auto Configure AWS to allow Desktop Authority to automatically configure the Off-Network support configurations.
Bucket Name
A Bucket is similar to a folder. This will be where the Desktop Authority files will be stored.
Region
Select the AWS geographic area.
Access Key for Manager Console/Clients
AccessKeyId
Access keys are assigned to your AWS account to allow programs to programmatically access your account. Amazon allows a maximum of 2 Active keys and recommends that they be changed every 90 days.
SecretAccessKeyId
Access keys are assigned to your AWS account to allow programs to programmatically access your account. Amazon allows a maximum of 2 Active keys and recommends that they be changed every 90 days.
Configuring AWS Off-Network Support
- Click Edit and select Amazon Web Services (AWS) as the Off Network Provider.Click Auto Configure AWS to automatically configure Off-Network Support or manually configure the settings.
Using either the Autocreate or manual configuration options will require a copy/paste of the AccessKeyId and SecretAccessKeyId. The main difference in the operations is the Bucket.
Autocreate will create a dedicated bucket for the Desktop Authority files. After the bucket is created, you MUST log in to AWS and define a region for it.
When manually configuring Off-Network Support, a dedicated bucket must be created in AWS, with a region applied to it. It is recommended that this bucket be dedicated to Desktop Authority.
- Enter the Access Keys for the Manager Console provided by AWS.
- Enter the Access Key for Clients provided by AWS.
- Click Save if manually configuring ONS or Create if using the Auto Configure AWS option.
Microsoft Azure
Share Configuration
Share Name
The name of the storage folder within MS Azure where the replicated Desktop Authority configuration information will are stored.
|
|
NOTE: The configured share will automatically be created prior to replication, if it doesn't already exist. |
Connection String for Manager Console
Connection string
The server-side connection string to connect to MS Azure storage. This connection should have Read/Write/List/Create/Delete access to the storage and is used by the DA Server Manager (server side).
Connection String for Clients
Connection string
The client-side connection string to connect to MS Azure storage. This connection should have Read/Write/Create access to the storage and is used by the DA Client (client side). This string can be the same as the connection string for the Manager Console.
Configuring Microsoft Azure Off-Network Support
- Click Edit and select Microsoft Azure as the Off Network Provider.Enter the name of the storage folder within MS Azure as the Share Name.
- Copy and paste the Connection string from Microsoft Azure for the Manager Console. This must have Read/Write/List/Create/Delete access to the storage.
- Copy and paste the Connection string from Microsoft Azure for the Clients. This must have Read/Write/Create access to the storage.
- Click Save.