Introduction to the Labs

Welcome to the VMware Week at ROC Friese Poort! The scenario you will be working on this week is a company called EUC-Livefire. They are a very dynamic Organization and have traditionally been an in house Organization that has been required to get all their users to work from home. They need a secure solution that offers a user experience on par with working in the office.

During this course, you will be integrating the security capabilities available in VMware Products specifically Workspace ONE UEM , Workspace ONE Access, VMware Carbon Black,  VMware Horizon, VMware Unified Access Gateway, VMware App Volumes, VMware ThinAPP and VMware Dynamic Environment Manager.  

The objective of this chapter is to introduce to class resources.

Please take the time and document all the URL's and Credentials for the resources you will be using this week

LAB Architecture for this week

LAB Networking Architecture for this week

Your Resource Information

  1. The individual Horizon Client login account and Password from your Laptop to your Landing Desktop
  2. The Internal RDP IP Address from your Landing Desktop to your internal POD
    • You will connect to the ControlCenter server with this IP address
      • The username for the ControlCenter server is [email protected]
      • The passwords for all your POD accounts is VMware1!
        • When creating new accounts, we encourage you to keep it simple and use the same password.
  3. Your Individual Attendee unique number for your LABS

Colour Code Convention

  • Everything in BOLD BLACK is something to look for, it could be a heading or title providing you context to an area you need to configure or launch
  • Everything in BOLD GREEN is an area to select or click on
  • Everything in BOLD BLUE is something to type in

Account information

On your Laptop or Desktop

  • Step number 1
    • Recently we have decided to use Microsoft TEAMS as a collaborative Platform
      • First, make sure you have Microsoft Teams installed on your Desktop or Laptop
        • Check your email, and select Open Microsoft Teams, to join the Horizon Livefire session
          • This will have all your notes and collaborative info this week.
  • Step number 2
    • It is critical that you have two dummy email accounts with fictitious names
      • 1 will serve the purpose of a Test account
      • 1 will serve the purpose of an Admin account
      • Go to GMAIL.com or Outlook.com and create yourself two fictitious accounts.
        • You can create the accounts in either or both
        • You will be provided a sheet to document all your password. Do not forget to document which account is your Test account and which account will be your Admin account

Part 1. Overview of our On-premise and SaaS resources

On-premise resources

  • The following resources in your lab environment are representative of what the EUC-Livefire organisation "On-premise' resources.
    1. Active Directory Domain Controller and DNS services.
      • Server Name is ControlCenter and the Active Directory Domain is EUC-Livefire.com
    2. Connector Server
      • A dedicated Windows server called ws1.euc-livefire.com, this is dedicated for the Workspace ONE Access & UEM AirWatch connector.
    3. Horizon Infrastructure
      • A Horizon Connection server - Horizon.euc-livefire.com (Installed and Configured)
      • An Enrollment server - TrueSSO.euc-livefire.com (not installed or Configured)
      • An Instant Clone desktop pool with 3 Windows 10 Desktops
      • A RDSH server configured manually for Published Applications
    4. Unified Access Gateway servers
      • To be installed
    5. NSX-T infrastructure - nsxmgr-01a.euc-livefire.com (Deployed and Configured)
      • Managing the 172.16.10.x network which will represents internal communications in our POD environment
      • Managing the 172.16.20.x network which represents DMZ based communications in our POD environment
      • Managing the 172.16.30.x network which represents External communications in our POD environment
      • In addition we are also using the 192.168.110.x and 192.168.110.x IP address ranges as internal networks
    6. Client resources
      1. Windows 10 desktop .
        • W10Ext01a.euc-livefire.com           (TEST CLIENT)
        • W10Client01.euc-livefire.com        (TEST CLIENT
        • CAPTUREVM.euc-livefire.com        (ThinAPP )
        • PackagingVM.euc-livefire.com      (ThinAPP)
        • DEMProfiler.euc-livefire.com         (Dynamic Environment Manager)
      2. Android Device
        • You will be asked to enroll an Android Device, you can either bring your own version of Android or deploy the Android Emulator on a physical laptop. This deployment is optional and we offer a step by step guide on how to do this

Cloud SaaS resources

You will also be able to login with the same email address you logged in the VLP portal on the SaaS Workspace ONE UEM console. .

  • A SaaS Instance of WorkspaceONE UEM (formerly known as VMware AirWatch)
  • A Saas Instance of Workspace ONE Access
  • A Saas instance of VMware Carbon Black

Part 2: Accessing your Horizon Landing desktop

  1. On your laptop ensure you have the Horizon Client deployed, if necessary go to https://tinyurl.com/2e85y2k9
    • Download and Install the appropriate operating system Horizon Client
  1. Once the Horizon client is installed on your laptop
    • Select the + Plus sign in the top left hand corner
    • In the VMware Horizon Client window under Enter the name of the Connection Server
  1. On the VMware Horizon Client next to
    • Username: enter your assigned [email protected]
    • Password:enter your assigned Lab password
    • Select Login

XX - Fetch from the excel sheet. 

  1. On your Horizon Desktop
    • Select and right-click the DW-RDP Shortcut
    • Select Edit`
  1. In the Remote Desktop Connection next to
    • Computer: enter your complete custom Ip address to your vPOD (Remember to note this IP Address down)
    • When prompted for the password for [email protected], enter VMware1!
    • Select OK
    • Select Yes
  1. You are now on your ControlCenter server
    • This is the center point of the lab environment.
    • Notice you have a Remote Desktops folder.
      • (You will RDP to the majority of your resources)
  1. On your ControlCenter server desktop
    • Open your Chrome Browser
      • Notice you have shortcuts to several resources via the chrome browser

Part 3. Logging Into Workspace ONE UEM

  • Open a browser and navigate https://dw-livefire.awmdm.com
    • Use the e-mail address you signed up to the course with as the User Name (e.g [email protected]) and the password: VMware1!
    • Click Log In
    • In the Terms of Use page select ACCEPT
    • Now set a security question and answer and a four digit Pin
    • You should now be on the Getting started window of the UEM console which is the default landing page.

Part 4. Logging into and gaining access to Workspace ONE Access

  1. Look in your e-mail and you should also have received an e-mail from [email protected].
    • NOTE: Check your JUNK folder
    • This e-mail contains the unique tenant for your vIDM SaaS instance. Click on Set Password URL
    • In the Change your password window enter VMware1! as the new password and confirm
    • Select Change Password
    • Click on Go to Sign In page
    • Use the credentials provided to login : Username: Administrator Password: VMware1!
    • Accept the Terms of Service

Part 5. Configuration of a Custom Test Accounts

It is critical going forward that this is done and understood clearly!

Every attendee needs two accounts.

  • The first account will be a Custom Test Account that you will create in your Microsoft Active Directory
  1. Revert to your "On-premise" Infrastructure.
    • On the ControlCenter server, select the Start button
    • In the Start Menu, select Administrative Tools
  1. Open Active Directory User & Computers.
    • Expand the EUC-livefire.com domain,
    • Expand the Corp OU
    • Expand the Marketing OU
  1. On the Marketing OU select and right-click the Marketing OU and select New >  User,
    • For a future Salesforce Lab to work, we need to ensure we create an identical account with all account credentials matching your Salesforce account. Fill in the unique user details,
    • This will also serve as your test user account for your labs
  1. Fill in the following details:
  • First Name: {your name} e.g. demale
  • Last Name: { your surname} e.g. striteo
  • User logon name: {your first name.last name} e.g demale.striteo
  1. In the New Object - User window,
    • Type and confirm your password VMware1!
    • Select the Password never expires checkbox,
    • select Next,
    • select Finish
  1. In the Marketing OU
    • Select your custom user
    • Select Properties
      • Select the General Tab
      • In the email address area type your logon name followed by "@euc-livefire.com"
        • eg. demale.striteo@euc-livefire.com

Part 6: Introduction to the Livefire Company

Overview of the Company

Livefire as an Organization was found in 2003, It  started off a revolutionary approach to financial investment. The Organizations headquarters are in New York USA. The company has branches across the USA and now employs just under 6400 users.

This Organization requires a radical infrastructure re-think as employees  appear to be working from home on a permanent basis for the foreseeable future. We will look at  the VMware Workspace ONE Portfolio as way to grant secure Anywhere Access to users.

As a consulting firm you will do a test of part of VMware Anywhere Access with using the Sales, Marketing, Help Desk and IT Support Teams. In your testing you are welcome to conduct tests using accounts representative of roles in these departments

  • We have the following accounts for the respective departments
    • For Marketing
      • Fernando Dusello                     email is [email protected]
      • Tom Marios                                  email is [email protected]
      • And your custom account
    • For Sales
      • Jill Verneo                                    email is [email protected]
      • Mark Debio                                  email is [email protected]
    • For IT Support we have the following accounts
    • For Help Desk

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.