Product Documentation

Prerequisites

Jul 01, 2016

You need to complete the following prerequisites before you run the XenMobile Upgrade Tool. To review the known issues, see the About the Upgrade Tool

Important

Be aware of this XenMobile 10.1 known issue because it is likely that your XenMobile 9.0 host name may have an uppercase letter. In this case, after upgrading to XenMobile 10.1, devices cannot access the Worx Store. 

  • When you configure XenMobile server with an uppercase letter in the host name, such as ABC.Xms.com, the Worx Store does not open on devices after the devices enroll. [#545527]

App Controller Patch

Download the latest patch file to XenMobile 9.0 App Controller from the Citrix.com Downloads page. In the App Controller management console, go to Settings > Release Management. Click Update and then select the patch file you downloaded. Click Upload and then restart App Controller. 

Store Name

注意

Before you upgrade XenMobile 9 to XenMobile 10.1, you must change the custom store name back to its default value so that enrolled Windows devices to continue to work after the upgrade. For more information, see http://support.citrix.com/article/CTX214553.

In a MAM or Enterprise mode upgrade, if the store name has been changed to from the default Store on App Controller, restore the name back to the default setting of Store before generating a support bundle for the upgrade.  

localized image

Citrix License Server

Make sure that you install the 11.12.1 Citrix License Server (available on the Citrix Licensing page) and that you configure the server with the latest V6 license for your XenMobile edition. Ensure that the licensing server ports 27000 and 7279 are open to the server. This step is crucial to prevent the forcing of users to re-enroll their devices.

NetScaler 10.5 and XenMobile 10.1

Citrix recommends using Netscaler 10.5 with XenMobile 10.1. Before you upgrade to NetScaler 10.5, be sure to save a copy of your Netscaler Configuration (ns.conf). The Netscaler 10.5 release includes an easy-to-use quick deployment utility that guides you through the steps to integrate NetScaler 10.5 and XenMobile 10. For more information, see FAQ: XenMobile 10 and NetScaler 10.5 Integration.

LDAP Server

Make sure the new XenMobile 10.1 server connects to one or more LDAP servers. You must have an active route to LDAP servers after you upgrade, when you restart the server.

Open Firewall Ports

Open firewall ports for the new XenMobile 10.1 server IP similar to the ports opened for the XenMobile 9.0 IP server.

Database Migration

The following table lists the possible database migration options. For system requirements, see XenMobile 10.1 Database Requirements.

From XenMobile 9.0

To XenMobile 10.1


Enterprise Edition

App Controller

MDM

 

Local PostgreSQL

Local PostgreSQL

Local PostgreSQL

Local PostgreSQL

MS SQL

MS SQL

Local PostgreSQL

Remote PostgreSQL

Remote PostgreSQL


App Edition

Local PostgreSQL

 

Local PostgreSQL

Local PostgreSQL

 

Remote PostgreSQL

Local PostgreSQL

 

MS SQL


MDM Edition

Local PostgreSQL

 

Local PostgreSQL

MS SQL

 

MS SQL

Remote PostgreSQL

 

Remote PostgreSQL

During the data migration process, XenMobile needs the ability to access the database solution implemented on XenMobile 9.0 Device Manager. For example, the following ports must be open:

  • For Microsoft SQL Server, the default port is 1433.
  • For PostgreSQL, the default port is 5432.

To allow remote connections to PostgreSQL, you must complete the following steps:

1. Open the file pg_hba.conf and locate the following line: "host all all 127.0.0.1/32 md5"
Replace the line with "host all all 0.0.0.0/32 md5"

2. Save the file.

3. Stop and start the service

4. Locate and open the postgresql.conf file and change this line from:
"#listen_addresses = 'localhost'" to "listen_addresses = ‘*’"

注意

This can be made restrictive by allowing only XenMobile 9.0 and XenMobile 10.1 server IP addresses to access the PostgreSQL database (listen_addresses = '10.x.x.1,10.x.x.2').

5. Stop and start the PostgreSQL service for changes take effect.

If a custom port has been assigned to the database solution, you have to ensure that the port is allowed and open in the firewall protecting XenMobile 9.0 Device Manager. Doing so enables XenMobile 10.1 to connect to the database and to migrate the required information.

External SSL certificate

External SSL certificates must meet the conditions outlined in How to Configure an External SSL Certificate. Be sure to review your pki.xml before starting the migration to ensure that the SSL certificate meets those conditions.

Administrator account user name

The administrator account used to log on to the XenMobile 10.1 console can contain only lowercase letters; you will not be able to log on to the XenMobile 10.1 console after migration if the account contains uppercase letters. Create an administrator user account with all lowercase letters and with all permissions enabled so that after migration you can use that account to log on to the XenMobile 10.1 console.

Deployment package names with special characters

Deployment package names in XenMobile 9.0 that contain special characters (!, $, (), #, % , +, *, ~, ?, |, {}, and []) migrate, but the delivery groups in XenMobile 10.1 cannot be edited after migration. In addition, local users and local groups created in XenMobile 9.0 that contain an open square bracket ([) cause problems in XenMobile 10.1 when creating enrollment invitations. Before migration, remove all special characters from deployment package names as well as open square brackets from local user and local group names.

Export XenMobile 9.0 Server Certificate

If you are upgrading a Xenmobile 9.0 Enterprise Edition deployment, you need to export the App Controller server certificate and import it into the NetScaler Gateway. Log on to the XenMobile 9.0 App Controller and click Certificates. Follow these steps to export the server certificate:

1. In the certificate list, click the server certificate you want to export and then click Export.

localized image

2. In the Export Certificate dialog box, type your certificate password in both fields and then click OK.

localized image

Import the server certificate into the NetScaler Gateway appliance.

Server for Uploading the Encrypted Support Bundle

A server where you can upload the encrypted support bundle from the command-line interface using either the File Transfer Protocol (FTP) or Secure Copy Protocol (SCP).

When you understand the known issues and meet all the prerequisites, start the upgrade.