Llunitebe2018 configuring a cmg in config mgr cb
0 likes276 views
The document discusses how to use the Cloud Management Gateway (CMG) in Configuration Manager to manage internet-connected clients. It provides an overview of CMG capabilities and scenarios, prerequisites for implementing a CMG, how the CMG works, CMG costs, certificate requirements, steps for adding a CMG and configuring the necessary site system roles, and how to use the CMG to manage clients over the internet. The presentation includes demonstrations of configuring a CMG and using it to manage clients.
Llunitebe2018 configuring a cmg in config mgr cb
- 1. #Scugbe #LLUniteBE #BEEMUG Manage Configuration Manager internet clients with the Cloud Management Gateway Gerry Hampson Senior Consultant Blog: gerryhampsoncm.blogspot.com Twitter: @GerryHampson
- 2. Thanks to our event sponsors Silver Platinum #Scugbe #LLUniteBE #BEEMUG
- 4. The Cloud-Management-Gateway (my version) ----------
- 5. Managing clients with the CMG Adding the CMGIntroduction to the CMG Agenda Using the CMGPrerequisites for the CMG Implementing the Cloud Management Gateway Planning for the Cloud Management Gateway Certificates for the CMG
- 6. Introduction to the Cloud Management Gateway
- 7. • Traditional AD joined Windows clients • Windows 10 Azure AD joined clients • Install the ConfigMgr client over the internet • Software updates and endpoint protection • Inventory and client status • Compliance settings • Software distribution • Windows 10 in-place upgrade task sequence Typical CMG scenarios
- 8. • ARM-based deployment • Multiple instances • Support for 96,000 clients per CMG instance • Support for Management Point & Software Update Point What can CMG deliver?
- 9. • DP hosted in Azure • Optional component in CMG scenario • Cloud DP features • CMG and CDP co-exist • Intranet and internet based • Fallback content location • Distribution Point Groups • Content encrypted • Scales well • Cloud DP limitations • PXE • Packages that run directly • Pre-staged/App-V streaming • Pull DPs Cloud Distribution Point
- 12. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point INTRANET
- 13. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET
- 14. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP
- 15. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP INTERNET
- 16. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP INTERNET
- 17. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP INTERNET
- 18. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP INTERNET
- 19. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP INTERNET
- 20. Primary Site Server Management Point Distribution Point Domain Contoller Service Connection Point Certificate Authority Software Update Point Cloud Management Gateway Connection Point INTRANET Cloud Management Gateway Cloud DP INTERNET
- 21. • Virtual Machine • Standard A2 VM • Varies by region • Outbound data transfer • Data egress • Content storage • No cost for software updates • CMG requires CDP for other content CMG Cost
- 22. Prerequisites for the Cloud Management Gateway
- 23. • Windows clients • ConfigMgr site (1610 or later) • Service Connection Point (Online mode) • Cloud Management Gateway Connection Point • Internal Certificate Authority (autoenrollment) • Public SSL certificate • Externally routable domain • Cloud Service name • Access to DNS records • Azure subscription General requirements
- 24. • No inbound • Outbound • 443 for a single VM • 10124 & 10125 for 2 VMs • 10124, 10125 & 10126 for 3 VMs • Etc up to 16 (10124 up to 10139) Firewall Ports
- 26. Certificates for the Cloud Management Gateway
- 27. • Cloud Management Gateway • Azure Management Certificate • Cloud Management Gateway Certificate • Internal root certificate • Cloud Distribution Point (optional) • Azure Management Certificate • Cloud Distribution Point Certificate • Clients • Client Authentication Certificate • CMG Connection Point • Client Authentication Certificate Certificates
- 29. Adding the Cloud Management Gateway
- 30. Create CMG & CMG Connection Point Demo
- 31. Configuring and monitoring the Cloud Management Gateway
- 32. • Configure MP to allow CMG traffic • Configure SUP to allow CMG traffic • CMG Connection Analyser • Cloud Management dashboard Using the CMG
- 33. Configure MP and SUP CMG Analyser, Cloud Management dashboard Demo
- 34. Managing clients with the Cloud Management Gateway
- 35. Client settings, Windows 10 client, tips and tricks Demo
- 37. Thanks to our event sponsors Silver Platinum #Scugbe #LLUniteBE #BEEMUG