Home > Matrix42 Mobile > UEM Console > UEM Console Setup Guide

UEM Console Setup Guide

12 Oct 2017Last updated

To set up the UEM Console you need both Empirum and Silverback already configured and running on separate servers. The Silverback server by default includes an unconfigured UEM Console. On the Empirum server the UEM Service package needs to be installed and configured. These steps are described in this document.


System Requirements

The software package UEM Service for Empirum can be installed on an Empirum Master Server or Empirum Subdepot Server, version 17.0.1 or higher. IIS is required and will be installed during the setup process, if not already present. If SSL will be used, a certificate needs to be installed on this Windows installation.


To connect UEM Console (included with Silverback) to Empirum, you need to have a server running Silverback 6.0.1 TP1 or higher.


Download installation files

  1. Please download the latest package of UEM Service for Empirum from our Marketplace at Matrix42 UEM Service for Empirum.
  2. Unzip the archive to a temporary directory.


Enable the UEM Service for EmpirumAbschnitt bearbeiten


Create Database User

The UEM Service needs a database user to work. To create it:
  1. Open DBUtil.
  2. Click menu Actions > User Management.. > Location.
  3. In tab Users, click New.
  4. Enter username (e.g. “UEMSERVICE”) and password, click OK and close the User Management window.
  5. Navigate to the files extracted from the zip file and edit Grant_user.sql:
  6. Replace DBUser with the newly created database user name (e.g. “UEMSERVICE”).
  7. Save the file.
  8. Open DBUtil again.
  9. Click on menu Actions > Execute SQL Scripts… > Location.
  10. Navigate to the SQL script Grant_user.sql, doubleclick it and confirm with OK.


Install the UEM ServiceAbschnitt bearbeiten

  1. Merge the folder PackageStore with your package store directory on your Empirum Master Server (e.g. D:\Empirum\Configurator\Packages\PackageStore).
  2. Import the software package Matrix42 UEM Service for Empirum 1.0 into your Software Depot via the Empirum Management Console > Configuration > Software Management > Register Depot > Rightclick on Register > Import/Export > Import Package.
  3. Complete wizard.
  4. Navigate to Management > Administration.
  5. Assign the package Matrix42 UEM Service for Empirum located in the Software Package folder Empirum to a computer with the role Empirum Depot Server or Empirum Master Server (To check the role: right-click on Server > Properties > Tab General > Field Computer Role) and don’t activate yet.
  6. Use the variable collection MX42_UEMSERVICE (right-click on server > Variables) to configure the Web Service installation. In the right window check the variable and doubleclick it.  

  7. Select the variable to be edited and click on the Edit button. Remove the checkmark in box Empty value and add the data into each field Value. Click OK


    Name of the website (e.g. “UEMSERVICE”; if blank, Default Web Site is used).


    HTTP port on which the web service should listening. The default port is: 9400 and recommended for HTTP, for HTTPS/SSL the recommended port is 9401.


    Database user.


    specifies the password of the authorized SQL user account.


  8. Close the Variables window by clicking OK.

  9. Go back to the Empirum Management Console and activate the server with the assigned UEM Service package.


Enable SSL/TLS on Empirum server

  1. Logon to your UEM Service/Empirum Server.
  2. Start the IIS Manager.
  3. Click on Default Web Site (or the site name you configured).
  4. In the Actions pane click Bindings...
  5. If https already exists click Edit otherwise click Add.
  6. As Type choose https and your SSL certificate you want to use.
  7. Click OK and then Close.
  8. Restart IIS by clicking on Restart or execute the command iisreset.

Please also change the WebService URL under UEM settings in your Silverback system configuration. For the changes to take effect please restart your Silverback IIS.

Obtain access token from Silverback

  1. Logon to the Silverback admin console.
  2. Go to Admin menu > User Management.
  3. Create a New System User (e.g. UEMSERVICE) or select an existing one. The role needs to be Administrator.
  4. Click Save.
  5. Edit the user again. Under Create API Token select scope Global Write, enter a description like Empirum Access and click Create.

Token creation takes several minutes!

  1. Copy the new token the clipboard to be able to paste it in the next step.

Configure UEM ServiceAbschnitt bearbeiten

  1. Open the Windows file explorer and navigate to \Empirum\Empirum DBUtil\Windows\Backend Task Hosting Service.
  2. Edit the config file Matrix42.Empirum.PLF.Services.ActivationQueue.UemSynchronization.dll.config. These are the configuration parameter that you must change:



Defines the authentication token for the UEM-API of the Silverback system. Paste in your Silverback access token from the clipboard and use “Bearer “ as a prefix for the token (e.g.: UemApiToken value="Bearer eyJ0eXAiOKV1QisxLDIsM119_8ZxQmKCFAQf4VY").



Defines the endpoint address of the UEM-API of the Silverback system. Replace http://PleaseInsertYourApiEndpointUrlHere with your UEM-API URL (e.g.: https://yoursilverbackserver.com/uem/api/v1/empsync).


Optional configuration parameters:
Defines the amount of DB entries that will be processed within each interval (default is: 100).
Defines the interval in which the SB entries will be processed (default is: 3000).
Defines after which period of time the service runs in a timeout (default is: 86400).

  1. Return to DBUtil, open the Actions menu and click on Execute SQL Scripts… > Location and open the Custom folder (\Empirum\Empirum DBUtil\Scripts\SQLServer\Custom).
  2. Doubleclick the script ActivateUEMDeviceSync.sql and confirm the box to activate the UEM sync.
  3. Save the file.


Create STS client for accessing UEM Service

  1. Open the URL https://yourempirumserver.com/Matrix...EM-STS/Clients in a browser, where Empirumserver.com is the computer where you have installed the UEM Service.
  2. Sign in using with the Empirum database credentials.
  3. Create new client by clicking on the plus button.


Set up UEM Console for managing Empirum devices

  1. Log in to Silverback with the websettings account. Go to UEM settings and enter the Empirum settings:

WebService URL


Client ID

as created in previous step, e.g. “empirum”

Client Secret

copy and paste from previous step

Authorization URL


  1. Click Save.

  2. Restart Silverback (go to IIS Manager, click on the Silverback website and “Restart” in the actions menu on the right).


Set up the UEM Console with the Solutionbuilder

  1. Login to Silverback with a regular admin account.
  2. Open Admin menu > System Settings.
  3. Add Front end API Client ID (solutionbuilder)

Redirect URL: https://yoursilverbackserver.com/solutionbuilder/ or https://localhost/solutionbuilder

  1. Add CORS URL for API

Client ID: solutionbuilder

Redirect URL: https://yoursilverbackserver.com/solutionbuilder/ or https://localhost/solutionbuilder


Open the UEM Console

After the installation of the UEM Service open the UEM console with the link https://yoursilverbackserver.com/solutionbuilder.


You must to post a comment.
Last modified
23:48, 12 Oct 2017


This page has no custom tags.


(not set)