Help Center/ Workspace/ User Guide (Application Streaming)/ Administrator Operation Guide/ Tenant Configuration
Updated on 2024-10-12 GMT+08:00
View PDF
Share

Tenant Configuration

Scenarios

The administrator can adjust the enterprise ID, domain configuration, access mode, service subnet, and Internet access port as required.

If the same project is used by Workspace Application Streaming and Workspace, they share the same tenant list. Therefore, tenant information modified on the Workspace Application Streaming console needs to be synchronized to the Workspace console and vice versa.

Procedure

  1. Log in to the Workspace Application Streaming console as an administrator.
  2. In the navigation pane on the left, choose Tenant Configuration.
  3. Perform the operations listed in Table 1 as required.

    Table 1 Tenant configuration operations

    Operation

    Procedure

    Description

    Setting a project

    1. Click on the right of the project area and select the required project from the drop-down list box.

    2. If no project is available, click Create Project to create one. For details, see Creating a Project.

    Projects group and isolate resources (including compute, storage, and network resources) in the same Huawei Cloud region. Users can be granted permissions to access all resources in a specific project. A default project is provided for each Huawei Cloud region. Create one if no project is available when enabling Workspace Application Streaming.

    Modifying an enterprise ID
    1. In the Basic Information area, click Modify.
    2. Enter the custom enterprise ID in the displayed dialog box.
    3. Click OK.

    After the service is enabled, an enterprise ID is automatically generated. The administrator can modify the enterprise ID.

    MFA configuration > Virtual MFA

    1. In the MFA Configuration area, click Enable.

    2. Click OK.

    After you enable virtual MFA, end users need to use the virtual MFA device in the Huawei Cloud application on a smart device (such as a mobile phone) to obtain a dynamic verification code when logging in to the desktop from a client for Workspace. (For the first login, the virtual MFA device must be bound to the smart device.) Then end users need to enter the dynamic verification code on the login page of the Workspace. For details, see Logging In to a Desktop Using an SC, Logging In to a Desktop Using a TC, and Logging In to a Desktop Using a Mobile Terminal.

    MFA configuration > Authentication Server

    1. Click Modify next to Authentication Server.

    2. Select Enterprise Authentication System and set the parameters as follows:

    1. Server Address: the IP address of the enterprise's authentication server.
    2. APP ID: the access key (AK) of the enterprise's authentication server. The AK can contain a maximum of 24 characters.
    3. APP Secret: the secret access key (SK) of the enterprise's authentication server. The SK can contain a maximum of 128 characters.
    4. Set this parameter based on the network mode of the user's authentication server.
      1. If only the public network is accessible, select Internet Access Users.
      2. If only the private network is accessible, select Direct Connect Access User.
    5. Click Upload Certificate, select the SSL/TLS certificate of the enterprise authentication server, and click Open to upload the certificate.

    You can configure the interconnection with an enterprise authentication system so that end users can use the system to perform secondary authentication when logging in to an APS from the Workspace client using accounts and passwords. For details, see Logging In to a Desktop Using an SC, Logging In to a Desktop Using a TC, and Logging In to a Desktop Using a Mobile Terminal.

    Changing the domain administrator password
    1. In the AD Domain Configuration area, click Change Password.
    2. Reset the password.
    3. Click OK.

    After resetting the domain administrator password on the AD server, the administrator needs to synchronize the password information on the Workspace Application Streaming console.

    Modifying domain configurations
    1. In the lower part of the AD Domain Configuration area, click Modify.
    2. Enter the password of the domain administrator and modify the domain configuration.
    3. Click OK.

    After modifying the domain configuration items on the AD server, the administrator needs to synchronize the domain configuration information on the Workspace Application Streaming console.

    Modifying the access mode

    In the Network Settings area, enable or disable the corresponding access address.

    NOTE:
    • The Internet access address is enabled by default.
    • The Internet access address and Direct Connect access address cannot be disabled at the same time. At least one access address must be enabled.

    The administrator can change the network access mode.

    Changing the service subnet
    1. In the Network Settings area, click Edit the subnet.
    2. Select the service subnet to be used, or deselect the selected service subnet.
    3. Click OK.

    The administrator can change the service subnet.

    Changing the Internet access port
    1. In the Network Settings area, click Modify near the Internet Access Port part.
    2. Change the port number.
    3. Click OK.

    The administrator can change the HTTPS port used for accessing the Workspace Application Streaming portal through the client.