Configuring Endpoint Management Discovery Methods¶
From the AWI Management page, you can set the PCoIP Remote Workstation Cards security level and discovery method. See About PCoIP Remote Workstation Card Management Security Levels.
In order for DNS or SLP Discovery methods to work, they both must first be enabled on the AWI Configuration > Discovery page.
There are several ways to register your PCoIP Remote Workstation Card with an endpoint manager such as the PCoIP Management Console. These methods are outlined next.
The methods include:
-
Discovering the PCoIP Endpoint Manually from the Endpoint Manager
-
Discovering the Endpoint Manager Manually from the PCoIP Endpoint Using Low or Medium Security Mode
The availability of these methods are determined by the PCoIP Remote Workstation Card‘s security settings, and whether or not the host card has a certificate installed to trust the endpoint manager.
Automatic Endpoint Manager Discovery Using DNS¶
PCoIP Remote Workstation Cards can use DNS to automatically find an endpoint manager. To use automatic endpoint manager discovery, you must configure the environment for DNS service record discovery, and the PCoIP Remote Workstation Card's security level must be set to low or medium.
Medium or high security requires an installed certificate
In order to use medium or high security, the PCoIP Remote Workstation Card must have been provisioned with a certificate.
DNS server configuration information
For details about how to configure your DNS server for automatic discovery, see the PCoIP® Management Console Administrators’ Guide section Configuring DNS for Endpoints that use Autodiscovery:.
To configure the PCoIP Remote Workstation Card for automatic endpoint discovery:
-
From the AWI, select Configuration > Management. The AWI Management page displays.
-
Set the Security Level option to Low or Medium.
Medium security level
When set to medium security, the MC certificate (leaf, intermediate, or root) must be in the endpoint certificate store
-
Set the Manager Discovery Mode option to Automatic.
-
Click Apply.
After the PCoIP Remote Workstation Card discovers the endpoint manager, the automatic discovery results appear on the Management page in the Discovery Information section.
Discovering the PCoIP Endpoint Manually from the Endpoint Manager¶
Endpoint managers, such as the PCoIP Management Console, can be used to discover endpoints like the PCoIP Remote Workstation Card. This discovery requires configuration on both the PCoIP Remote Workstation Card and the endpoint manager.
To configure the PCoIP Remote Workstation Card to be discoverable by an endpoint manager:
-
From the AWI, select Configuration > Management. The AWI Management page displays.
-
Set the Security Level option to Low.
-
Set the Manager Discovery Mode to Automatic.
-
Click Apply.
This configuration allows an endpoint manager the ability to discover the PCoIP Remote Workstation Card. Once discovered, the endpoint manager topology appears on the PCoIP Remote Workstation Card Management page.
Discovering the Endpoint Manager Manually from the PCoIP Endpoint Using Low or Medium Security Mode¶
In low or medium security modes, you can manually discover the endpoint manager by manually providing the URI for its bootstrap server.
Manual discovery requires a certificate
When manual discovery mode is used, DNS cannot be used to trust the endpoint. An endpoint such as the PCoIP Remote Workstation Card must have been previously provisioned with a certificate.
To configure a PCoIP Remote Workstation Card with an endpoint manager in low or medium security mode:
-
From the AWI, select Configuration > Management. The AWI Management page is displayed.
-
Set the Security Level option to Low or Medium.
-
Set the Manager Discovery Mode to Manual.
-
In the Manual Discovery section, type the bootstrap server’s URI.
Bootstrap server URI must use a secured WebSocket prefix
URIs are in this format and require a secured WebSocket prefix:
The PCoIP Management Console’s listening port is 5172. If you omit the port number, port 5172 will be used by default.wss://<internal EM IP address/FQDN>[:port number]
-
Click Apply.
After the PCoIP Remote Workstation Card discovers the endpoint manager, the endpoint manager topology appears on the PCoIP Remote Workstation Card Management page.
Discovering the Endpoint Manager Manually from the PCoIP Remote Workstation Card Using High Security Mode¶
In high security mode, automatic discovery is disabled entirely; you must register the PCoIP Remote Workstation Card manually with the endpoint manager from the endpoint.
Manual discovery requires a certificate
When manual discovery mode is used, DNS cannot be used to trust the endpoint manager. The PCoIP Remote Workstation Card must have been previously provisioned with a certificate from an endpoint manager or from the AWI.
To configure a PCoIP Remote Workstation Card with an endpoint manager using high security mode:
-
From the AWI, select Configuration > Management. The AWI Management page displays.
-
Set the Security Level option to High.
-
In the Endpoint Manager URI for Direct Connect section, find the Internal URI field and type the endpoint manager’s URI. You can also provide an external URI, if needed.
Endpoint manager URI must use a secured WebSocket prefix
URIs are in this format and require a secured WebSocket prefix:
wss://<internal EM IP address/FQDN>[:port number]
The PCoIP Management Console’s listening port is 5172. If you omit the port number, port 5172 will be used by default.
-
Click Apply.
After the PCoIP Remote Workstation Card discovers the endpoint manager, the endpoint manager topology appears on the Management page.