Installation Guide III: Basic Setup
Silverback Basic Setup
Enter License
After logging in you will be prompted to enter the Silverback license to activate the system.
- Click Import Key
- Paste your key into the text box
- Click Save
- You should now be successfully logged in into Silverback Management Console
Change the default admin preferences
- Click on the settings icon on the upper right
- Enter an Email address (e.g. admin@imagoverum.com)
- Enter the current password in the Old Password field (S1lverb@ck)
- Enter your new password in the New Password field
- Please refer to Administrator Password Policy
- Confirm your New Password
- Enable Receive Email Alerts (optional)
- Change Date Format (optional)
- Change Time Zone (optional)
- Change Language (not recommended)
- Click Save
- Click OK
It’s very important this new password is remembered, unless you haven't add more admin accounts
Change Settings Admin Account Password
- Navigate to Admin
- Navigate to User Management
- Locate the settings administrator account
- Click Edit
- Enter an Email address (e.g. admin@imagoverum.com)
- Enter a new password
- Please refer to Administrator Password Policy
- Confirm the new password
- Change Date Format (optional)
- Change Time Zone (optional)
- Change Language (optional)
- Click Save
Configure the System Settings
- Log out from Management Console (upper right)
- Login as Settings Administrator
General
In the General Tab of the settings page, the following settings should be configured:
- Change System user Default Time Zone to your preferred one (optional)
Certificates
- Navigate to Certificates
- Select your previously created Silverback Root CA certificate
- Change Country Code
- Change Organisation Name
- Change the Location Name
Setting Name | Description |
---|---|
Certificate | This should match the certificate configured in Step 1 of Installation and Configuration. This certificate is used to create the client certificates for Silverback clients to use for enrolment and other services. |
Country, Organisation and Location | These are used in the certificates that are generated for devices as information only to identify the issuer of the certificates |
Expiry Length | The certificates issued to clients will expire after this time period. Ideally this should be as long as possible to prevent the need for certificates to be renewed. |
Do not Save!
Payload
- Navigate to Payload
- In the Profile Signing Certificate Area select your SSL Certificate
Setting Name | Description |
---|---|
Signing Certificate | This certificate is used to sign profiles being sent to iOS devices. It’s recommended to use the SSL Certificate for the Silverback website, as this will be trusted by the devices. |
SMTP
- Navigate to SMTP
- Enter your SMTP Server, e.g smtp.imagoverum.com
- Enter your SMTP Port, e.g. 25
- Enter a Username
- Enter a Password
- Enable SSL/TLS (optional)
- Change Sent From to e.g. info@imagoverum.com
- Click Send Test Message and try your settings
Setting | Description |
---|---|
SMTP Server | The network address of the SMTP Server or Relay |
SMTP Port | The SMTP Port to use |
Username | If the SMTP server requires authentication, specify the username. If no username is provided it is assumed to be anonymous |
Password | If the SMTP server requires authentication, specify the password. If no password is provided it is assumed to be anonymous |
SSL/TLS | Whether or not the system uses SSL/TLS with SMTP |
Sent From | The address that should appear as the “From“ address when the user receives the email |
Save Settings
- Navigate to the bottom and click Save
- Click OK to confirm
- Log Out as Settings Administrator
Start Services
- Open PowerShell with Administrator Priviliges
- Type: start-service w3svc,silv*,epic*,mat*
- Click Enter
- Wait until services all services have been restarted
Modify SQL Permissions (optional)
For security concerns, the dbcreator role can be replaced by db_owner.
- Open SQL Management Studio
- Navigate to the Security
- Navigate to Login
- Right click the user that has been chosen for the database creation
- Click Properties
- Navigate to Server Roles
- Uncheck dbcreator role
- Navigate to User Mapping
- Enable Silverback Database
- Enable db_owner at Database role membership for: Silverback
- Click OK
For a deployment where SQL is located on the same server as Silverback perform the following additional task:
- Assign NT AUTHORITY\SYSTEM the db_owner role for the created Silverback database
Next Steps
- Check if your Silverback Management Console is reachable
- Connect your LDAP: Installation Guide IV: LDAP Connection
- Review our Application Server Hardening Guide to ensure a proper security level for your Management Server