1. How to enable secure login (HTTPS)?

Description

You can use HTTPS to enable you to login to the Endpoint Central server in a secure environment. For example, if you are logging in from a computer outside your LAN or WAN, you can use a secure login (HTTPS).

Steps

To enable HTTPS in your Endpoint Central server, follow the steps given below:

  1. Click the Admin tab
  2. In the Server Settings section, click Central Server Settings
  3. In the General Settingssection, check the Enable Secure Login (HTTPS) checkbox

    Note: You can also use a third-party SSL certificate.

  4. Click Save Changes

You have enabled the secure login feature (HTTPS) in Endpoint Central.

2. How to change the Web Server port used by Endpoint Central?

Description

By default, the Endpoint Central server uses port 8383 to complete the following tasks:

  • Enable agent-server communication
  • Access the Web client

This port is chosen during the installation of the Endpoint Central server. You can change the port number after installation, if required.

Steps

You have to complete the following tasks to:

Warning!: If the port number is changed in the Endpoint Central Server, ensure that you update the correct port number in Endpoint Central agents. Until this change is done, the agents will keep contacting the previous port number and will not be able to reach the Endpoint Central Server. This would affect the complete desktop management activity.

Note: When there is a Failover Server configured, follow all the steps for changing port numbers simultaneously in both primary server and secondary server. Also When there is a Secure Gateway Server, kindly reconfigure the SGS with the updated ports. Click here for the "Steps to reconfigure SGS"

Changing the port numbers in the Endpoint Central server

To change the port number after the Endpoint Central server is installed, follow the steps given below:

  1. Stop the Endpoint Central service. Follow the steps given below:
    1. Click start>Run
    2. Execute the following command to open Services: services.msc
    3. Select ManageEngine UEMS - Server and Stop the service.
  2. Open the websettings.conf located in <Install_Dir>\UEMS_CentralServer\conf.
  3. Change the port numbers for the following keys with the required values:
    • http.port
    • https.port
  4. Save the file and close it
  5. Start the Endpoint Central service. Follow the steps given below:
    1. Click start>Run
    2. Execute the following command to open Services: services.msc
    3. Select ManageEngine UEMS - Server and Start the service.

You can now connect to the product web console using the new port numbers that you have specified. You are now required to update the Endpoint Central agents with the new port numbers.

Updating the port numbers in the Endpoint Central agents

For computers in a LAN

Note: Ensure that the computers in which the agents are installed are switched on.

  1. Click the Admin tab
  2. In the Global Settings, click Scope of Management
  3. Select the required computers
  4. Click Install Agent
  5. Click OK

The new port numbers will be updated in the agents immediately.

For branch offices using Distribution Servers

  1. Download the script configureDCDSServerCommunication.txt
  2. Rename it to configure-dc-distributionserver-communication-7.vbs
  3. Run this script in each of the distribution servers in your branch offices. Follow the steps given below:
    1. Open a command prompt
    2. Enter the following command:

      configure-dc-distributionserver-communication-7.vbs <ServerName> <ServerIP> <HTTP Port> <HTTPS Port> <Protocol>

      • <ServerName> refers to the DNS name of the computer where the Endpoint Central server is installed
      • <ServerIP> refers to the IP address of the computer where the Endpoint Central Server is installed
      • <HTTP Port> is the default port agents use (e.g., 8020)
      • <HTTPS Port> is the secure port agents use (e.g., 8383)
      • <Protocol> refers to HTTP or HTTPS
    3. Press Enter

The new port numbers will be updated immediately in the distribution server.

For branch offices/computers in a WAN

  1. Download the script configureDCAgentServerCommunication_7.txt
  2. Rename it to configureDCAgentServerCommunication7.vbs

    Note: If you are using Endpoint Central 6, use this script.

  3. Run this script from each of your branch office computers:
    1. Open a command prompt
    2. Enter:

      cscript configureDCAgentServerCommunication_7.vbs <ServerName> <ServerIP> <HTTP Port> <HTTPS Port> <Protocol>

    3. Press Enter

The new port numbers will be updated in the agents immediately.

Executing a script on multiple computers

Note: Ensure that the computers in which the agents are installed are switched on.

  1. Create a network share in your computer
  2. Download the script configureDCAgentServerCommunication_7.txt
  3. Rename it to configureDCAgentServerCommunication_7.vbs
  4. Save the vb script in the network share
  5. Download PsExec from SysInternals
  6. Run the script:
    1. Click start>Run
    2. Execute:

      C:\for /f %f in (c:\computernames.txt) do psexec \\%f -u <domain>\administrator -p <password> CSCRIPT \\MyServer\MyShare\configureDCAgentServerCommunication.vbs <ServerName> <ServerIP> <HTTP Port> <HTTPS Port> <Protocol>

      • computernames.txt contains the list of computers with full paths
      • <domain> is the domain/workgroup name
      • <password> is the admin password
      • <ServerName> is the DNS name of the Central Server
      • <ServerIP> is the IP Address of the server
      • <HTTP Port>, <HTTPS Port> — agent ports
      • <Protocol> — HTTP or HTTPS
    3. Press Enter

You have executed a script in multiple computers.