Service Manager

Deploying the MDI Service

The Mobile Device Inventory (MDI) service is deployed on a separate server that is accessible to and from the Internet to allow for inbound and outbound communications.

Server Requirements

Consider the following before installing and configuring a server for MDI:

•The server must be accessible over the Internet with SSL.

•If you use iOS devices, all inbound communication must use port 8734.

•The server must be able to communicate directly with the Discovery Application Server. (The server default is communication port is 1433.)

Installing the MDI Service

The MDI service is bundled with Discovery. When installing Discovery, ensure that you select the Mobile Device Inventory option.

For information about the installation, see the Installation and Deployment Guide for Ivanti Service Manager Release 2016.2.

Connecting the MDI Service SSL Port Binding

Use the following steps to connect the MDI service SSL communication port that you entered for the URL of the mobile configuration, after installing the SSL certificate on the MDI server:

1.From Microsoft IIS, locate the server certificate.

2.Double-click the SSL certificate that you installed and select the Details tab.

3.Click the Thumbprint field, copy the value, and change it by removing the empty spaces in the string.
Save this value so that you can enter it when you run the command.

4.Run the following command from a command window and enter the Thumbprint string: netsh http add sslcert ipport = 0.0.0.0:8734 CertHash = thumbprint_CertHash_above appid = Any_valid_GUID.

For example, enter netsh http add sslcert ipport = 0.0.0.0:8734 CertHash = 02f46e65ff48136bfa98f3fe695b327ecb9f2cba appid = 0A39190C - 5E6D - 43E7 - B264 - B35C427C6970.

You should receive a response that the SSL certificate was added successfully.

Configuring Service Settings

The MDI service has its own logging mechanism. Do the following to configure logging:

1.From the MDI installation folder at ~\\MDIServiceHost, open the FRSLoggingSettings.config file.

2.To enable logging, set the EnableLogging key to true. To disable logging, set the value to false. The following is an example: <add key="EnableLogging" value="true" />.

3.To change the logging level so that more or less information is gathered, edit the LogLevel setting in the file. The possible values are: FATAL, ERROR, WARN, DEBUG, and INFO. The following is an example: <add key="LogLevel" value="ERROR" />.