Getting Started with Maximo Anywhere 5 Document version 0


Recommended Deployment Scenarios



Download 152.5 Kb.
Page3/7
Date17.06.2017
Size152.5 Kb.
#20972
1   2   3   4   5   6   7

Recommended Deployment Scenarios





  • Development

  • Test/QA/Pre-Prod/Prod

  • Anywhere Source, Worklight Studio, Worklight Source on Mobile Admin Computer

  • Maximo Source on Maximo Admin Computer

  • WebSphere, Maximo on Maximo WebSphere Cluster

  • Worklight Runtime, Maximo Anywhere Runtime on Worklight WebSphere Cluster


Typical Production Maximo Anywhere Deployment


Product Licensing Metric and Compliance Considerations


The Maximo Anywhere product is licensed by Authorized User. Users must be licensed for the bundle of mobile applications for which they are accessing. In phase 1, this is pretty simple since the only bundle available is the Work Management bundle containing the Work Execution and Approvals apps.

Use Scenarios


If a user is a mobile user ONLY, then the license to the bundle(s) that they access is all the license entitlement that they require. If on the other hand, as part of their role, the mobile user also returns to their desk periodically and accesses Maximo via their desktop computer, then the user must also have base Maximo product entitlements that correspond to their use of Maximo (i.e. Express, Limited Use Authorized User, or Authorized User).

License Limitations Pertaining to Worklight


The Maximo Anywhere product has Worklight components embedded within it. Customers are able to use the Worklight components for the purpose of running the Maximo Anywhere mobile applications. There are a few situations which will help to understand the boundaries of the Worklight use.

If a customer accesses another data source besides Maximo (also TRIRIGA and SCCD starting in the phase 2 Anywhere product), such as ERP, Production system, another Asset Management system, then the changes to the mobile apps necessitate the need to obtain full Worklight license coverage.

If a customer creates a brand new mobile application for Maximo (i.e. a mobile version of a custom application they created within base Maximo), then the changes necessitate the need to obtain full Worklight license coverage.

If a customer creates a brand new mobile app over and above Maximo (or TRIRIGA or SCCD) for another enterprise system within their organization (which we expect a large degree of customers to do) then the creation of the new app necessitates the need to obtain full Worklight license coverage.



Note: Clones are exempt from this license boundary as long as the business intent of the original mobile app is not changed (i.e create a contracts app from work execution app)

Recommendations and Best Practices



Device Encryption - Maximo Anywhere 7.5 installs mobile applications on mobile devices with device level encryption disabled by default. Mobile devices have some level of protection through password authentication but the data itself is accessible if the device password is compromised. In addition to authentication protection, some enterprise remote device management solutions (from your company) may include device level encryption. Maximo Anywhere does not store large quantities of data on the device in a format that might compromise the base application. With all this in mind, some enterprises may still require maximum protection of any data on a mobile device.
If enterprise policy requires maximum security of device data IBM recommends that device level encryption be enabled. This action will encrypt the JSON stores on the device so that unauthorized users cannot access the data at any time. Enabling device level encryption means that JSON stores must be decrypted at user login time. Decrypting may add time to the login process. In our tests, login without encryption enabled took under 10 seconds and with encryption enabled, it took under 30 seconds.
Secure Communication Protocol (SSL) – Standard web communication security protocol is called Secure Socket Layer (SSL) and is also known as HTTPS. SSL encrypts all data being sent over a transmission method. In the case of Maximo Anywhere, end users will likely be communicating with a radio tower wirelessly and the radio tower will communicate over the internet with the Worklight server. It is possible for unauthorized people to capture unencrypted data from communication lines.
IBM recommends using SSL for all communications over systems not controlled by your enterprise. Even with encrypted data on your mobile devices, the communication channel should also be protected.
Enterprise DMZ – There is nothing in the Maximo Anywhere components that requires the use of a secure network. Yet for the above considerations, IBM recommends using an HTTP server outside the enterprise firewall in the DMZ at the entry to the enterprise network. All Worklight, Maximo Anywhere and base application components should be behind the firewall. This added level of security along with device encryptions and use of SSL will ensure the most secure approach to implementing Maximo Anywhere.

Worklight Server Installation – The Worklight server installation is performed on the WebSphere server where Worklight will be deployed. If you do not already have a WebSphere environment, you may install the included WebSphere Liberty on a server dedicated for Worklight. Although it is technically possible to use the same WebSphere Application Server as the base Smarter Infrastructure application (Maximo in the case of Anywhere 7.5), combinations can make patching and upgrades more complex. For example, a patch to Maximo may require a fix to WebSphere that may not be compatible or supported with Worklight.
IBM recommends a separate WebSphere Application Server on a separate Virtual Machine (VM) or physical server.
Maximo Anywhere InstallationThe Worklight Studio, and Maximo Anywhere install on the same administration computer. This computer is often called the Maximo Anywhere development or build computer. Since the Anywhere administration computer is really just where the source and build files for the application deployment are stored and built, these files do not need to be on the server where Worklight is running. You can think of the administration computer as really the Maximo Anywhere development environment where the source files are modified and built into deployment packages. When it is time to deploy, the Maximo Anywhere packages will be deployed to the Worklight runtime application.




Download 152.5 Kb.

Share with your friends:
1   2   3   4   5   6   7




The database is protected by copyright ©ininet.org 2024
send message

    Main page