Installing Connector on Ubuntu

The following section outlines how to download and install the Connector. There are three steps involved in this process:

• Downloading the Connector installer files.
• Obtaining an authorization token.
• Installing the Connector.

Prerequisite Steps¶

For instructions and documentation on the Connector prerequisite steps, see Connector System Requirements.

It is important to read and address all the prerequisites outlined.

1. Downloading the Connector¶

The following section outlines how to download the installer files for the Connector. First, connect to the machine and download the Connector files. The commands below will download the Connector archive, and extract it.

You need to ensure that you have a customer account created on our website to access the download information.

Downloading the Installer from our website¶

The following steps outline the current process that enables you to download the installer directly from our website as a tar.gz file or else run the shell script:

1. SSH into the machine:

   ssh <username>@<server-ip-address>
   

2. Download the installer from HP:
   • Open a web browser and navigate to the Downloads and Scripts tab on the HP support site.
   • Download the installer and upload it to the machine or run the shell script provided to download the installer to the machine.
3. Unpackage the installer:
   • Previously the installer was extracted into the ~/v2connector directory. This location has now changed. Run the following command to extract the installer to /usr/sbin/:

     sudo tar xzvf <PATH TO FILE>/cloud-access-connector_<version>_Linux.tar.gz -C /
     

2. Obtaining the Connector Token¶

You are required to have a Connector token when installing the Connector. You need to create or have created a deployment prior to obtaining a token. For information on how to log into the Admin Console, see Admin Console Connection. The following section outlines how to obtain a Connector token using the Admin Console:

1. Click Connectors from the console sidebar.
2. Click the add connector button (+ sign located beside the Connectors heading) to display the connector creation panel.
3. Enter the following information:
   • Select the deployment you want to add the Connector to. If you do not have an existing deployment you need to create one.
   • Enter the name of the Connector.
   • Follow the step by step instructions outlined in the private cloud install instructions panel.
4. Click GENERATE.
5. Copy the Connector token by clicking the copy icon.
6. Click CLOSE to exit the panel.

You can now use this Connector token when prompted during installation.

3. Installing the Connector¶

Once the files are downloaded and the access token is set, you can install the Connector. If you are not already connected, connect to the machine via SSH and navigate to the /usr/sbin directory.

3.1 Installing the Connector for Anyware Manager as a Service¶

Install the Connector for Anyware Manager as a Service by running the following command:

cd /usr/sbin
sudo ./cloud-access-connector install

Ensure that you use the options and flags that best suit your system architecture and requirements. If required values are not provided on the command line, you will be prompted for them. For additional flags and options, see Installation Flags and Options.

Multi-Factor Authentication¶

When installing the Connector you can enable multi-factor authentication (MFA) by running the ‑‑enable‑mfa flag. MFA will be disabled by default. If you want MFA to only apply to external connections, you should have separate Connectors. One Connector should be for external connections, where MFA is enabled, and one for internal or direct connections, where MFA is disabled. For steps on how to install the Connector with MFA bypassed for internal connections, see Installing the Connector for Internal Connections.

For external facing Connectors you should apply firewall and network settings, such as placing it in a DMZ for example. For external facing Connectors, ensure that you set --external-client-cidr to 0.0.0.0/0 so that everything through this Connector is treated as an external connection. It is not recommended to rely on the IP range to manage authentication levels, and for better security you should use separate Connectors.

Ensure that you use the options and flags that best suit your system architecture and requirements. If required values are not provided on the command line, you will be prompted for them. For additional flags and options, see Installation Flags and Options.

Installing the Connector for Internal Connections¶

The following steps outline how to install the Connector for internal connections to bypass MFA:

1. Prepare a virtual machine in your private network that meets the system requirements with the following sub-steps:
   • Skip the step for preparing the system for external access.
   • Skip the step for setting up MFA.
2. Install the Connector with the following sub-steps:
   • Do not set the Public IP using the --external-pcoip-ip flag. The Connector will instead return the virtual machines IP address.
   • No MFA flag is required as MFA is disabled by default.
3. Once you have installed the Connector connect to a remote workstation with a PCoIP Software Client with the following sub-step:
   • In the Host Address or Code field enter the private IP of the internal Connector you just installed and log-in.

If you want to use the same url for an external Connector as an internal Connector, for example connector.domain.com, you must set-up an internal/private DNS. In this DNS create an entry called connector.domain.com and map it to the private IP of the internal Connector. User's will then be able to connect to this entry by entering connector.domain.com in the Host Address or Code field in the PCoIP Client. The internal connection will connect to the internal Connector, and the external connection will connect to the external Connector.

Installation Flags and Options¶

The following flags can be used to provide values at the command line. If they are omitted from the command and are required, you will be prompted for them:

4. Connecting to a Remote Workstation with a PCoIP Client¶

After successfully installing a Connector, you can initiate a session to connect to a remote workstation with a PCoIP Software Client. HP enables customers to use multi-factor authentication for these PCoIP Client sessions. The following steps outline how to connect to a remote workstation using the PCoIP Software Client:

1. Double-click the PCoIP Client desktop icon or program file PCoIPClient to launch the application.
2. In the Host Address or Code field, enter one of the following:
   • For direct connections, provide the address of the host machine.
   • For managed connections, provide the address of the connection manager.
3. Click NEXT.
4. Select your domain and enter the credentials for the remote workstation. If you have enabled MFA then you will be prompted for the 2^nd factor passcode. The method of how this passcode is communicated depends on the provider you used. It is usually either a One Time Password or push notification.
5. Click LOGIN.
6. If your login is successful you should be able to select the remote workstation and connect to it. Please note that if you have a single remote workstation, that remote workstation is automatically selected and the connection is initiated immeadiately. In this case you will not be presented with a remote workstation selection screen.

For more information about the PCoIP Software Client, please see the following PCoIP Software Client guides:

• PCoIP Software Client for Windows
• PCoIP Software Client for macOS
• PCoIP Software Client for Linux