[The following information is for the administrator. More detailed information on how to create the initial configuration, the technical data of the client and the server components can be found elsewhere.]
Before users can start using the client, the administrator needs to configure some settings via NCP Exclusive Remote Access Management.
To use the iOS clients, the required quantity of client access licenses must be imported into NCP Exclusive Remote Access Management.
An initial configuration must then be created via NCP Exclusive Remote Access Management and transferred to the device. The configuration file *.ncpsemconfig) can be transferred via the following methods:
1. Via download from a web server through the Safari browser
2. As an e-mail attachment
3. Via iTunes (with Mac/PC)
Downloading the Initial Configuration
The initial configuration should be created for all users with a pre-shared key rather than a certificate, as this allows the configuration to be sent via all transfer methods.
When the initial configuration file is distributed via a link or e-mail the initial configuration is imported automatically, although only configurations without a certificate can be imported.
Warning:
If a certificate is already used for the initial configuration, it can only be imported via iTunes. The certificate and the initial configuration must be imported at the same time.
Download the Personanl Configuration
To download the personal configuration, the user must be notified of the authentication data (user ID and authentication code) and, if applicable, the PIN for the personal certificate (e.g. by e-mail).
NCP Exclusive Remote Access Management assigns personal profiles according to the authentication data. Each time the user connects to NCP Exclusive Remote Access Management the identify of the user is verified.
This can only take place if every client which has its own configuration has an “ID for personal configuration”. This ID is shown in the NCP Exclusive Remote Access Management info field (figure below) as “User ID”. The user receives the configuration profile and certificate (if required) according to this ID.
The User ID and authentication code found in the SEM in the client's info field are used to download the personal configuration.
There are three options for determining the user ID:
– VPN Username
– Device name (displayed in the settings on the start page of the device under General / Info / Name) (The name shown here can be changed by the user at any time.)
– The unique device ID (UDID, Unique Device ID in the client info center) is automatically generated in the background when the app is installed. It can be found in the Client Info Center of the NCP App.
One of these options must be set in NCP Exclusive Remote Access Management as the "ID for personal configuration" in the client profile.
© 2017 NCP engineering GmbH