7 Replies Latest reply on Oct 17, 2017 2:44 PM by Intel Corporation

    Recommendation for Server

    Tran27

      I plan to deploy Intel Unite with 30 hub.

      What is the hardware recommendation for the Enterprise server?

      Should I use self-Signed certificate?

      Thanks,

      MT

        • 1. Re: Recommendation for Server
          Intel Corporation
          This message was posted on behalf of Intel Corporation

          Thank you very much for contacting the Intel® Unite™ app communities. We will do our best effort to deliver the information you are requesting.
           
          As stated on your previous thread, you can use any type of hardware that complies with the requirements showing on the deployment guide:
          https://communities.intel.com/thread/118248
           
          In regard to your question about using the self-signed certificate, I will do further research on that subject and as soon as I get any updates I will post all the details on this thread.
           
          Any further questions, please let me know.
           
          Regards,
          Alberto R
           

          • 2. Re: Recommendation for Server
            Intel Corporation
            This message was posted on behalf of Intel Corporation

            Based on  the research I did on this matter, I can confirm that yes, it is a requirement to use self-signed certificates.

            Server requirements:
            https://www.intel.com/content/dam/support/us/en/documents/software/software-applications/Intel_Unite_Enterprise_Deployment.pdf

            Microsoft Internet Information Services with SSL enabled • This will require a SHA2 based web server certificate with an internal or public root of trust. Page 8

            As a security upgrade, the application accepts only SHA-2 or greater certificates. This may require you to upgrade the certificates on your web server. Work with your IT Security team to get SHA-2 certificates during setup. Page 9

            Ensure SSL is enabled in IIS (https sites should work). NOTE: This may require you to work with your IT department to install a SHA-2 certificate with a valid root of trust. Page 12

            The latest version of Intel Unite solution only accepts SHA-2 certificates or greater. You should work with your IT department to ensure the trusted web server certificate issued is a SHA-2 certificate and the certification path is valid. For a test environment, obtain a SHA-2 certificate or disable encryption in your environment. o To use Unite without encryption, skip the next steps that provide details on Site Bindings for secure port 443 and proceed to install MS SQL Server and prepare the DNS service record. You also need to make sure that the service is found on port 80 when a DNS service record is created. o Another way to skip the certificate check is to add the registry in the machine account of the hub and client. HKEY_LOCAL_MACHINE\software\Intel\Unite\AllowInsecureCertificates (DWORD) [1 if certificate algorithm check should be skipped, 0 otherwise. (if value is 0, we force the enterprise certificate to use a SHA2 certificate)]. Page 64

            Any questions, please let me know.

            Regards,
            Alberto R

            • 3. Re: Recommendation for Server
              Tran27

              Thank you very much Alberto.

              Do you know the TCP and UDP ports that need to open on Enterprise server?

              Thanks

              Mike

              • 4. Re: Recommendation for Server
                Intel Corporation
                This message was posted on behalf of Intel Corporation

                : You are very welcome. Let me confirm that information and as soon as I do that I will post all the details on this thread.
                 
                Any questions, please let me know.
                 
                Regards,
                Alberto R
                 

                • 5. Re: Recommendation for Server
                  Intel Corporation
                  This message was posted on behalf of Intel Corporation

                  I just received an update on your inquiry and actually the Intel® Unite Enterprise works with HTTPS under the TCP protocol, so, you just need to open the TCP 443 port.

                   

                  Any questions, please let me know.

                   

                  Regards,

                  Alberto R

                  • 6. Re: Recommendation for Server
                    Tran27

                    Thank you Alberto,

                    Where can I download the Intel Unite Enterprise server?

                    Thank you,

                    Michael

                    • 7. Re: Recommendation for Server
                      Intel Corporation
                      This message was posted on behalf of Intel Corporation

                      You are very welcome. On the link below you will be able to download the application:
                      https://downloadcenter.intel.com/download/25280/Intel-Unite-App

                      Just to let you know, if the unit that you are using is a system build by a computer manufacturer for example, HP, Dell or Lenovo, we recommend to get in contact with them or visit their web site to download the proper version of the Intel® Unite™ app. If there is a problem installing that version, then you can always use the link above.

                      Any questions, please let me know.

                      Regards,
                      Alberto R