- What's new in XenMobile Server 10.8
- Fixed issues
- Known issues
- System requirements and compatibility
- Install and configure
- Certificates and authentication
- User accounts, roles, and enrollment
- ActiveSync Gateway
- Android for Work
- Bulk enrollment of iOS and macOS devices
- Client properties
- Deploy iOS and macOS devices through Apple DEP
- Device enrollment limit
- Enroll devices
- Firebase Cloud Messaging
- Google Play credentials
- Integrate with Apple Education features
- Network Access Control
- Samsung KNOX
- Security actions
- Shared devices
- XenMobile Autodiscovery Service
- Device policies by platform
- AirPlay mirroring device policy
- AirPrint device policy
- Android for Work app restriction policy
- Android for Work permissions
- APN device policy
- App access device policy
- App attributes device policy
- App configuration device policy
- App inventory device policy
- App lock device policy
- App network usage device policy
- Apps notifications device policy
- App restrictions device policy
- App tunneling device policy
- App uninstall device policy
- App uninstall restrictions device policy
- BitLocker device policy
- Browser device policy
- Calendar (CalDav) device policy
- Cellular device policy
- Connection manager device policy
- Connection scheduling device policy
- Contacts (CardDAV) device policy
- Control OS Updates device policy
- Copy Apps to Samsung Container device policy
- Credentials device policy
- Custom XML device policy
- Defender device policy
- Delete files and folders device policy
- Delete registry keys and values device policy
- Device Health Attestation device policy
- Device name device policy
- Education Configuration device policy
- Enterprise Hub device policy
- Exchange device policy
- Files device policy
- FileVault device policy
- Font device policy
- Home screen layout device policy
- Import iOS & macOS Profile device policy
- Kiosk device policy for Samsung SAFE
- Launcher configuration device policy for Android
- LDAP device policy
- Location device policy
- Mail device policy
- Managed domains device policy
- MDM options device policy
- Organization information device policy
- Passcode device policy
- Personal hotspot device policy
- Profile Removal device policy
- Provisioning profile device policy
- Provisioning profile removal device policy
- Proxy device policy
- Registry device policy
- Remote support device policy
- Restrictions device policy
- Roaming device policy
- Samsung MDM license key device policy
- Samsung SAFE firewall device policy
- SCEP device policy
- Siri and dictation policies
- SSO account device policy
- Storage encryption device policy
- Store device policy
- Subscribed calendars device policy
- Terms and conditions device policy
- VPN device policy
- Wallpaper device policy
- Web content filter device policy
- Webclip device policy
- WiFi device policy
- Windows CE certificate device policy
- Windows Information Protection device policy
- XenMobile options device policy
- XenMobile uninstall device policy
- Add apps
- Add media
- Deploy resources
- Automated actions
- Monitor and support
- REST APIs
- XenMobile Mail Manager 10.x
- XenMobile NetScaler Connector
- On-premises XenMobile interaction with Active Directory
- Management Modes
- Device Requirements
- Security and User Experience
- User Communities
- Email Strategy
- XenMobile Integration
- Multi-Site Requirements
- Integrating with NetScaler Gateway and NetScaler
- SSO and Proxy Considerations for MDX Apps
- Reference Architecture for On-Premises Deployments
- Server Properties
- Device and App Policies
- User Enrollment Options
- Tuning XenMobile Operations
- App Provisioning and Deprovisioning
- Dashboard-Based Operations
- Role-Based Access Control and XenMobile Support
- Systems Monitoring
- Disaster Recovery
- Citrix Support Process
- Sending group enrollment invitations in XenMobile
- Configuring an on-premises Device Health Attestation server
- Configuring certificate-based authentication with EWS for Secure Mail push notifications
Feb 21, 2018
XenMobile uses Citrix Licensing to manage licenses. XenMobile Server and NetScaler Gateway require licenses.
For more information about NetScaler Gateway licensing, see the NetScaler Gateway documentation. For more information about Citrix Licensing, see The Citrix Licensing System.
When you purchase XenMobile Server, you receive an order confirmation email message containing instructions for activating your licenses. New customers must register for a license program before placing an order. For more information about XenMobile licensing models and programs, see XenMobile licensing.
For a data sheet that shows which XenMobile features are available in each XenMobile edition, see this PDF.
- Update your Citrix License Server to 11.14.x or later before updating to the latest version of XenMobile Server 10.8. Older license server versions do not support the latest version of XenMobile.
- You must install Citrix Licensing before downloading your XenMobile licenses. The name of the server on which you installed Citrix Licensing is required to generate the license file. When you install XenMobile, Citrix Licensing is installed on the server by default. Alternatively, you can use an existing Citrix Licensing deployment to manage your XenMobile licenses. For more information about installing, deploying, and managing Citrix Licensing, see Licensing Your Product.
- If you intend to cluster nodes, or instances, of XenMobile, you must use Citrix Licensing on a remote server.
- Citrix recommends that you retain local copies of all license files you receive. When you save a backup copy of the configuration file, all license files are included in the backup. If, however, you reinstall XenMobile without first backing up the configuration file, you need the original license files.
In the absence of a license, XenMobile operates fully featured in trial mode for a grace period of 30 days. This trial mode can be used only one time, with the 30-day period beginning when you install XenMobile. Access to the XenMobile web console is never blocked, whether or not a valid XenMobile license is available. In the XenMobile console, you can see how many days are left in your trial period.
Although XenMobile allows you to upload multiple licenses, only one license can be activated at a time.
When a XenMobile license expires, you can no longer perform any device management functions. For example, new users or devices cannot be enrolled, and apps and configurations deployed to enrolled devices cannot be updated. For more information about XenMobile licensing models and programs, see XenMobile licensing.
When the Licensing page first appears after you install XenMobile, the license is set for the default 30-day trial mode and is not yet configured. You can add and configure licenses on this page.
On the XenMobile console, click the gear icon in the upper right-hand corner. The Settings page appears.
Click Licensing. The Licensing page appears.
When adding new licenses, they appear in the table. The first license added is automatically activated. If you add multiple licenses of the same category, such as Enterprise and type, these licenses appear in a single row of the table. In these cases, the Total number of licenses and Number used reflect the combined amount for the common licenses. The Expires on date shows the latest expiration date among the common licenses.
You manage all local licenses through the XenMobile console.
Get a license file from the Simple License Service, through the License Administration Console, or directly from your account on Citrix.com. For details, see the Citrix Licensing documentation.
On the XenMobile console, click the gear icon in the upper right corner. The Settings page appears.
Click Licensing. The Licensing page appears.
Set Configure license to On. The License type list, the Add button, and the Licensing table appear. The Licensing table contains licenses you have used with XenMobile. If you have not added a Citrix license yet, the table is empty.
Ensure that License type is set to Local license and then click Add. The Add New License dialog box appears.
In the Add New License dialog box, click Choose File and then browse to your license file location.
Click Upload. The license is uploaded locally and appears in the table.
When the license appears in the table on the Licensing page, activate it. If the license is first in the table, the license is activated automatically.
If you are using the remote Citrix Licensing server, you use the Citrix Licensing server to manage all licensing activity. For details, see Licensing Your Product.
Import the License server certificate into XenMobile Server (Settings > Certificates).
By default, hostname verification is enabled on outgoing connections except for the Microsoft PKI server. If hostname verification breaks your deployment, change the server property disable.hostname.verification to true. The default value of this property is false.
When hostname verification fails, the server log includes errors such as: “Unable to connect to the VPP Server: Host name ‘192.0.2.0’ does not match the certificate subject provided by the peer”
On the Licensing page, set Configure license to On. The License type list, the Add button, and the Licensing table appear. The Licensing table contains licenses you have used with XenMobile. If you have not added a Citrix license yet, the table is empty.
Set License type to Remote license. The License server and Port fields and the Test Connection button replace the Add button.
Configure these settings:
- License server: Type the IP address or fully qualified domain name (FQDN) of your remote licensing server.
- Port: Accept the default port or type the port number used to communicate with the licensing server.
Click Test Connection. If the connection is successful, XenMobile connects with the Licensing server and the Licensing table is filled with available licenses. If there is only one license, it is activated automatically.
When you click Test Connection, XenMobile confirms the following:
- XenMobile can communicate with the license server.
- Licenses on the license server are valid.
- The license server is compatible with XenMobile.
If the connection is unsuccessful, review the displayed error message, make the necessary corrections, and then click Test Connection.
If you have multiple licenses, you can choose the license you want to activate. You can have only one license active at a time, however.
On the Licensing page, in the Licensing table, click the row of the license you want to activate. An Activate confirmation dialog appears next to the row.
Click Activate. The Activate dialog box appears.
Click Activate. The selected license is activated.
If you activate the selected license, the currently active license is deactivated.
After you have activated remote or local licenses, you can configure XenMobile to notify you or a designate when the license expiration date approaches.
On the Licensing page, set Expiration notification to On. New notification-related fields appear.
Configure these settings:
- Notify every: Type:
- The frequency with which the notifications are sent, such as every 7 days.
- When to begin sending the notification, such as 60 days before the license expires.
- Recipient: Type your email address or the email address of the person responsible for the license.
- Content: Type an expiration notification message that the recipient sees in the notification.
Click Save. Based on your settings, XenMobile begins sending email messages containing the text you typed in Content to the recipient you typed in Recipient. The notifications are sent with the frequency you set.