Skip to main content

Desktop Edge Deployment Guide

Cautions​

Table of Contents​

  1. Server Installation and Server Configuration
  2. XMPP Installation and Configuration
  3. Admin Page Settings
  4. Appendix

1. Server Installation and Server Configuration​

Open Firewall Information​

  • A firewall distinguishes between information that is opened internally on the server and information that needs to be opened for external access.

  • Open Firewall Ports (Internal)

    • 9090: Port for accessing the Openfire web console
    • 5222: XMPP chat port (connection between server and work PC)
    • 6222: SSH Port (Work PC -> Server Reverse Connection)
    • 8080(80/443): Desktop Service Web server access port
    • 9080: Desktop Service Configuration Page Access Port

  • Open Firewall Ports (External)

    • 8080(80/443): Desktop Service Web server access port
    • 5222 (Optional): Requires open when using public desktop, connection between public desktop located externally and server.

  • Check Open Firewall

    $ sudo firewall-cmd --list-all

Check Server Installation Package​

1) Copy (move) the shieldathome.tar.gz file to the /opt folder and extract it.​

  • Decompression command

    $ sudo tar -xvf shieldathome.tar.gz

2) Move to the unzipped shieldathome folder​

  • Check Package Installation Status
    unpackImg

Changing the SSH Port​

  • default 22the SSH port of the port6222Change to port

1) Installing policycoreUtils​

  • *CentOs Family

    $ sudo yum install -y policycoreUtils-python

  • *Ubuntu Family

    $ sudo apt-get install -y policycoreutils-python-utils

  • *Closed Network Environment

    • Using the install file included in the package

    $ /opt/shieldathome/policycoreutils_centos.sh

2) Changing sshd Configuration​

  1. vi /etc/ssh/sshd_config
  2. #Port 22 > Port 6222 (Reflecting port change history)
  3. semanage port –a –t ssh_port_t –p tcp 6222 (Execute command to change to port 6222)
  4. service sshd restart (restart sshd)
    sshd

Running the server installation script​

  • Move to the server package location and run the installation script.

    $ /opt/shieldathome/install.sh

  • *After executing the script

    1. OS Selection
    2. Database Language Selection
    3. Setting Database Password (Must Read)

    installSelect

guacamole log rotate configuration​

  1. Add logrotate configuration

$ vi /etc/logrotate.d/guacd

  • Add the following content
/var/log/guacd.log
{
        daily
        rotate 30
        compress
        missingok
        dateext
        notifempty
        dateyesterday
}
  1. Creating a folder for scripts and moving files

$ sudo mkdir /usr/logrotate
$ sudo mv /etc/cron.daily/logrotate /usr/logrotate
$ ls /usr/logrotate

  • Check if it is displayed as shown in the image below.
    installSelect
  1. Add crontab settings

$ crontab -e

  • Add the following content

0 0 * * * /usr/logrotate/logrotate

Replacing SHIELDGate Desktop Agent Files (if necessary)​

  1. Move to the original file location

$ cd /opt/app/tomcat9/webapps/workathome/resources/new/

  1. Rename Existing File (Backup)

$ sudo mv SHIELDGateSetup.exe SHIELDGateSetup.exe_backup

  1. Move (copy) to the existing file location after uploading a new file
  2. Change Name of New File

$ sudo mv 업로드파일명 SHIELDGateSetup.exe

Change Server Configuration File​

  1. Change API Service Settings

$ sudo vi /opt/app/tomcat9/webapps/workathome/WEB-INF/classes/properties/server.properties

  • jdbc.password
    • Check if the entered password is correct.
  • internal.ipaddr=xxx.xxx.xxx.xxx
    • Enter the internal IP of the server
  • SHIELDGate.OAuth.clientId
  • SHIELDGate.OAuth.secretKey
  • SHIELDGate.OAuth.masterExtra
    • Filling in the information for the master tenant SHIELDGate app created in IdGP
  • SHIELDGate.OAuth.apiUrl
    • Enter IdGP server address
  • SHIELDGate.OAuth.extra
    • Enter the company id of the registered company.
  • SHIELDGate.OAuth.appClientId
    • Entering the SHIELDGate app ID within the company
  • SHIELDGate.Oauth.logUrl
    • Enter the integrated log server address
  • root.SHIELDGateUrl
    • Enter SHIELDGate server address
  • *Additional Settings
  • Screen logger usage settings (enable true, disable false)
    • dxl=false
    • *The upload path of SHIELDGateSetup.exe is/home/dxl/download/changed to
  • root.useSrt
    • Use of SRT
    • Use - 1, Not Used (RDP) - 0
  1. Changing Web Service Settings

$ vi /opt/app/tomcat9/webapps/workathome/resources/static/config.js

  • VUE_APP_SHIELDGATE_URL
    • Enter SHIELDGate server address
  1. Server Restart

$ sudo systemctl restart tomcat

Server Normal Operation Check & Configuration​

{서버주소}:8080(Web Service Port) Connection > Check Normal Page Display​

afterInstall

{서버주소}:9080(Settings Page) Access > Click "Login" Button​

  • 데이터베이스Tab Selection
    • 접속테스트Click the button to check normal database connection.
  • 웹서버Tab Selection
    • Select whether to use SSL
      • Uploading certificate files and entering passwords when using
      • .keystoreUsing Format Files
    • Select whether to use port forwarding
      • Forwarding Port When Using443Input
    • 적용하기Button Click
  • 로그아웃Tab Selection