Product Documentation

Installing Secure Mobile Gateway

Sep 27, 2015

You can install Secure Mobile Gateway in one of the following ways. Citrix recommends that you install Secure Mobile Gateway on Windows Server 2008.

  • On Microsoft Exchange 2010 Client Access Server (CAS). The installer for the ActiveSync Controller is a Windows Installer .msi file called SmgInstaller.exe.
  • On Windows Server 2008. To enable the XenMobile Device Manager Exchange email attachment encryption feature, you must configure Microsoft Forefront Threat Management Gateway (TMG) running on Windows Server 2008. You must then install Secure Mobile Gateway on the server running Forefront TMG as an ISAPI plug-in. You use the same SmgInstaller.exe to complete this installation. For details, see Enabling Secure Mobile Gateway Filtering by Configuring Forefront Threat Management Gateway.

To install Secure Mobile Gateway on a Microsoft Exchange CAS

You can install Secure Mobile Gateway on a Microsoft Exchange Client Access Server (CAS). Secure Mobile Gateway is supported on Exchange 2007 CAS and Exchange 2010 CAS. You run the SmgInstaller.exe file to install Secure Mobile Gateway. To do so, double-click SmgInstaller.exe file and then follow the instructions.
  1. Run the 64-bit installation package.
  2. A message appears stating that the host is not a TMG server. When prompted to proceed, click Yes.
  3. Follow the instructions.
  4. When the installation is complete, restart Microsoft Internet Information Server (IIS). Because the Secure Mobile Gateway ISAPI filter runs within the application pool processes of IIS, to ensure than the filter is loaded into these processes, you must restart IIS.

In IIS, do the following:

  • Install the ISAPI filter in IIS. In Secure Mobile Gateway, integration of the ISAPI filter is done automatically by the installer, so no manual configuration of IIS is required.
  • Configure Secure Mobile Gateway for IIS by running the Secure Mobile Gateway controller configuration. Click the Path Filters tab, click Edit, change the Http Path from Microsoft-Server-ActiveSync to Microsoft-Server-ActiveSync/default.eas and then click Save.

To uninstall Secure Mobile Gateway

Citrix recommends that you use the SmgInstaller.exe file to uninstall or repair Secure Mobile Gateway.

  1. Double-click the SmgInstaller.exe file.
  2. Select Uninstall and then click OK.
  3. If you are uninstalling Secure Mobile Gateway from Windows Server running Microsoft Forefront Threat Management Gateway (TMG), a message appears noting that TMG firewall rule updates don't take effect immediately. Click OK and then click Close.