Configure Snow Extender

On the Service tab, select Set user.

Set user is only available if the Windows service for Snow Extender has been stopped.

In Select user, select one of two user account types:

• To let the predefined local system account run the Snow Extender, select Local system user. This is the default option.

• To assign a specific Windows user account to run the Snow Extender, select Custom user and then enter the Username and Password of a local Windows account.

Select Ok.

On the Service tab, select Use proxy.

Enter the hostname of your proxy in Host.

Enter the port number for your proxy in Port.

Select one of two ways to use credentials when authenticating against a proxy:

• To use default credentials for proxy authentication, select Use default credentials.

• To set the credentials for proxy authentication, clear Use default credentials and then enter a Username and Password.

On the Service tab, select Re-enroll.

In Snow Extender, paste your secret key and select Enroll.

The Snow Extender now attempts to connect with Snow Atlas. If the connection is successful, Service Status will be Running and your tenant-specific information will display in the Service tab.

If the connection is not successful, make sure that your environment meets the System Requirements.

If the Snow Extender was deactivated previously, select Install after enrollment to reactivate the service in the configuration.

On the File Elevator tab, enter the number of seconds for the Snow Extender to wait between polling folders in Polling interval.

Select New to add a folder.

Select Browse.

Select the folder that you want to poll or manually enter the path to the folder.

Select Enabled if you want this folder to be processed. Clear the check box if you want to save the folder but not have its contents processed.

Select Save to confirm your new folder.

On the Inventory Api tab, select New.

Optional: Enter a Name for the endpoint.

This name is only used here to identify the endpoint.

Confirm that the endpoint is Enabled.

The endpoint is enabled by default. This means that it is ready to receive traffic from Snow Inventory Agents when you save the configuration.

Enter the Port to use.

The port number is the TCP port that will be opened for incoming traffic. It is used by Snow Inventory Agents and other inventory sources to report inventory data. It is defined by you.

Enter a DNS Name that binds your API to a specific DNS name.

If you have set up several APIs that all respond to the same port, enter a DNS Name. It will be used as a filter to route the incoming traffic to the correct API.

If you have not set up several APIs that all respond to the same port, enter an asterisk as a wildcard to make the API respond to all incoming traffic on the selected port.

Optional: To secure the traffic between the Snow Inventory API and Snow Inventory Agents using a server certificate, configure the setting for HTTPS.

1. Select Use HTTPS

2. Select Browse and select a Server certificate.

   The certificates in the list are from Windows certificate stores. If no certificates are listed, add a certificate to at least one of your Windows certificate stores.

3. If you only want to accept data from clients that use a certificate, select Require Client Certificate , enter a client certificate thumbprint and then select Add.

   The thumbprint is a unique text string that can be found in the certificate properties.

Optional: To enable the use of additional HTTP security headers, select Use strict security.

Select Save.

On the SLM Api tab, select New.

Optional: Enter a Name for the endpoint.

This name is only used here to identify the endpoint.

Confirm that the endpoint is Enabled.

The endpoint is enabled by default. This means that it is ready to receive traffic from Snow Inventory Agents when you save the configuration.

Enter a DNS Name that binds your API to a specific DNS name.

If you have set up several APIs that all respond to the same port, enter a DNS Name. It will be used as a filter to route the incoming traffic to the correct API.

If you have not set up several APIs that all respond to the same port, enter an asterisk as a wildcard to make the API respond to all incoming traffic on the selected port.

Enter the Port to use.

The port number is the TCP port that will be opened for incoming traffic. It is used by Snow Inventory Agents and other inventory sources to report inventory data. It is defined by you.

If you want to set up both Snow Inventory API endpoint and the Snow License Manager endpoint on the same port, you must bind each API to a unique DNS name. If you do not do this, the Snow Extender will not know which API the incoming data is meant for.

Enter a Username and Password to authenticate and protect Snow License Manager API.

The username and password are used to set up basic authentication between Snow Integration Manager, or other parties, and Snow License Manager API. Create a username and a password here, and use the same credentials in Snow Integration Connectors for SaaS applications.

Optional: To secure the traffic between the Snow License Manager API and Snow Integration Connectors using a server certificate, configure the settings for HTTPS.

1. Select Use HTTPS.

2. Select Browse and select a Server certificate.

   The certificates listed are from Windows certificate stores. If no certificates are listed, add a certificate to at least one of your Windows certificate stores.

Select Save.

On the AD Discovery tab, select New .

Enter a Name for this domain.

Confirm that Enabled is selected.

Enter an LDAP Path to your Active Directory where you want to search for users and devices.

Optional: If you want to connect to the Active Directory over secure LDAP, select Use SSL .

Your Active Directory domain must support connection over secure LDAP.

Enter a Username and Password of a user with read access to the Active Directory that you want to use to authenticate the Active Directory.

Optional: If you want to inventory devices, select Get Devices.

Optional: If you want to inventory users, select Get Users.

To test the Active Directory discovery setup, select Test.

Select Save.

To configure how often the Active Directory Discovery will query the Active Directory for users and computers, enter the number of hours that Active Directory Discovery waits between runs in Runs every.

Select Save Interval.

On the Data Forwarder tab, enter the Endpoint to which the data is to be forwarded.

To activate the Data Forwarder component, select Enable.

Optional: For additional certificate and site name settings in Optional settings, do the following:

1. To provide a certificate file used for the connection, browse the Certificate Path. The selected file should have a .pfx extension.

2. Enter the Certificate Password.

3. Enter the Site Name. The value you define here overwrites the site name received in the .inv or .snowpack files.

To test the configuration, select Test.

To save the configuration, select Save.