Changing primary deploy agent address

J
Jaanus
Coop Eesti keskühistu

Hi!

we are using SOTI Mobicontrol v 14.4.2.1307 and have so far set up everything using local IP address so the devices connect to the server via LAN. Now we need to use a third party issued SSL, which means we need to use a FQDN for the deployment agent address. Our initial thought was to configure secondary deployment agent with the FQDN and add the certificates but it seems that all the agents use the same certificates which have FQDN only as host name and in some cases will display SSL errors. So now the only way out seems to be switching the primary and secondary agent addresses. As i read in other posts in this forum it's means simply changing the addresses in the administration utility and when a device does the check-in it will switch the configuration on the device agent accordingly. Our main concern is, what will happen to devices which are turned off during this process, will they also be able to change their configuration when they sometime later do their check in? 

5 years ago
SOTI MobiControl
ANSWERS
J
JVMOD@SOTI
5 years ago (edited 5 years ago)

Hello Jaanus,

Thank you for requesting a response from SOTI Support Staff, in a normal set-up, we usually add FQDN in Primary address and IP address in Secondary address. But I would recommend you to create a Technical support case as this change has to been done carefully.

Please Note - Take database backup and server snapshot before making any changes.

Regards,

RC
Raymond Chan Diamond Contributor
5 years ago

Hi Jaanus, 

Improper reconfiguration sequence could cause some of your devices to be temporarily or permanently out of control, that might be fixed after device recall, re-enrollment or even factory-reset depending on the device platform/mode.  The steps depend on your network infrastructure, MCadmin settings, certificates deployed, platforms/modes of device enrolled, etc, and how often the devices are on-line and whether the implementation is mission critical that do not allow any out-of-control/device-recall. 

I  know it might not be convenient to reveal all such details in an open forum due to security/privacy reasons.   Hence, it is very difficult to casually voice out idea that might confuse/mislead you or other users of this forum.  I  therefore advise you to send email directly to Soti support team so that they can provide good advices specific to your case based on sufficient details of your situation and requirements.