Upgrading the Cloud Extender to use the enhanced messaging service

Upgrading Cloud Extender modules to version 3.000.700 or later

Follow these steps to upgrade Cloud Extender modules:

1. Validate that the Cloud Extender can reach the URLs to connect from the MaaS360 Portal to the Cloud Extender cloud instance.

   Important:

   • This step is applicable only when a firewall or proxy is configured in the network setting on the server where Cloud Extender is installed. For more information, see Table 6. Connection requirements from MaaS360 Portal to Cloud Extender cloud instance.
   • If your setup has multiple Cloud Extenders, validate the connection for each Cloud Extender.
   • To access MaaS360 end-point URLs, open the firewall. Add an exception for Certificate Subject Alternate Names instead of Common Name when applying the rules.
   To validate the URL access, follow these steps:

   1. Start a web browser on the CE server.
      Note: Ensure that you use modern web browsers to validate the connection except the Internet Explorer (IE).
   2. Use one of the following URLs to validate that the Cloud Extender can access the URL:
      • https://mpnsv2.m1.maas360.com
      • https://mpnsv2.m2.maas360.com
      • https://mpnsv2.m3.maas360.com
      • https://mpnsv2.m4.maas360.com
      • https://mpnsv2.m6.maas360.com
   The following successful response is received from the website.

   • The browser displays a payload response. Ignore the text 'Not Found' in the response.
   • The connection is secure, and the certificate is issued by DigiCert, Inc. Click the icon (View site information) on the address bar before the URL name to view the certification information. If the name is different than DigiCert, Inc, see Troubleshooting connection issue.

   During connection failure, the web browser displays an error message that the website is not reachable. See Troubleshooting connection issue.

   Important: If your network environment uses an HTTP proxy with SSL decryption, you must allowlist the MaaS360 endpoint service URLs to maintain uninterrupted connectivity for SSL decryption.

   To verify whether your network uses a proxy with SSL decryption and allowlisting, follow these steps:

   1. Access any secure website and verify the certificate chain.

      SSL decryption can occur if the proxy's certificate authority (CA) issues the certificate instead of the website's original CA.

      If SSL decryption is enabled for the website, then verify the Issued By details on the Certificate Viewer : <website> window like Common Name (CN), Organization (O), and Organization Unit (OU).

      For example, if SSL decryption is enabled for the website https://google.com then the Issued By details on the Certificate Viewer :www.google.com window is displayed Common Name (CN) as Web Proxy, Organization (O) as Example Corp., and Organization Unit (OU) as IT

   2. Refer to your proxy provider's documentation for guidance on how to exclude specific domains from SSL decryption.

      If you require further assistance with allowlisting the broker URL, contact IBM Support.

2. Enable the Auto Update option in the Cloud Extender Configuration Tool.
   Note:

   You can skip this step if you have already enabled the Auto Update checkbox in the Cloud Extender Configuration Tool. When this option is enabled, it automatically upgrades the modules for migration.

   To enable this option, follow these steps:

   1. Start the Configuration Tool.
   2. Go to Settings.
   3. Select the Auto Update checkbox and click OK.

   Important: After enabling the Auto Update option, it takes up to 30 minutes for the new version of the CE modules to be updated in the MaaS360 portal.
3. Validate the following Cloud Extender modules are on version 3.000.700 or later in the MaaS360 portal for all Cloud Extenders:
   • Cloud Extender Base
   • MaaS360 Configuration Utility
   • Realtime Action module
   Important: After upgrading Cloud Extender modules to 3.000.700, the Realtime Action Module module is displayed with the same version along with the Cloud Extender Base and MaaS360 Configuration Utility modules.
   To check the module version, follow these steps:

   1. Log in to the IBM® MaaS360® Portal with your administrator credentials.
   2. Select Setup > Cloud Extender. The Summary page is displayed.
   3. Go to the Modules section and check the version for the following modules
      • Cloud Extender Base
      • MaaS360 Configuration Utility
      • Realtime Action Module

Upgrading the Cloud Extender Installer (Core Agent) to version 3.000.700 or later

What to do next

Once the Cloud Extender upgrade is complete, IBM MaaS360 automatically enables the enhanced messaging service for your Cloud Extender. To enable the enhanced messaging service immediately, contact IBM Support.

Troubleshooting connection issue

Cause: A network firewall or proxy server might prevent the CE server from reaching the website.