Acronis Access Advanced - Administrator's Guide - Manual (Page 44)

44 Copyright © Acronis International GmbH, 2002-2014
present delegated credentials to your SharePoint server on behalf of you users. Enabling the
Acronis Access Windows server to perform Kerberos Delegation:
1. In Active Directory Users and Computers, locate the Windows server or servers that you
have the Gateway Server installed on. They are commonly in the Computers folder.
2. Open the Properties window for the Windows server and select the Delegation tab.
3. Select Trust this computer for delegation to specified services only
4. Select Use any authentication protocol, this is required for negotiation with the SharePoint
server.
5. You must now add any SharePoint servers that you would like your users to be able to access
using Acronis Access . If your SharePoint implementation consists of multiple load balanced
nodes, you will need to add each SharePoint/Windows node to this list of permitted
computers. Click Add... to search for these Windows computers in AD and add them. For
each, you will need to select the "http" service type only.
Note: Please allow 15 to 20 minutes for these change to propagate through AD and be applied before
testing client connectivity. They will not take effect immediately.

Allow connections to SharePoint servers using self-signed certificates - When enabled, allows
connections from this Gateway to SharePoint servers using self-signed certificates.

Allow connections to Acronis Access servers with self signed certificates - When enabled, allows
connections from this Gateway to Acronis Access servers using self-signed certificates.

Allow connections from Acronis Access servers with self signed certificates - When enabled,
allows connections to this Gateway from Acronis Access servers using self-signed certificates.

Show hidden SMB Shares - When enabled, shows hidden system SMB shares to the users.

Client session timeout in minutes - Sets the time before an inactive user is kicked out of the
Gateway Server.

Use user principal name (UPN) for authentication with SharePoint Servers - When enabled,
users will authenticate to SharePoint servers via their user principal name (e.g.
[email protected]), otherwise they will authenticate with domain/username (e.g.
glilabs/hristo).
1.4.4 Licensing Gateway Servers
For more information on licensing your Gateway Servers, visit the Licensing (p. 74) section.
1.4.5 Cluster Groups
In Acronis Access version 5.1 or newer, you have the ability to create a cluster group of Gateway
Servers.
A cluster group is a collection of Gateway Servers that share the same configuration. This allows you
to control all of the Gateways in that group at once instead of having to configure the same settings
on every Gateway individually. Typically these servers are placed behind a load balancer to provide
high availability and scalability for mobile clients.
For a clustered gateway setup, you need a load balancer, two or more gateways and an Acronis
Access Server. All of your Gateway Servers should be added to a Cluster Group in the Acronis Access
web interface and placed behind the load balancer. Your Acronis Access Server acts as both your
management server and the server with which mobile clients enroll in client management. Its role is