SMB configurations can be challenging as each network environment has unique settings, configurations and requirements. The purpose of this article is to help you determine the correct SMB settings for a CAPTOR backup.
CAPTOR supports SMB2 and SMB3. Most configurations require a VPN or tunnel service.
The first thing we always recommend is to do the initial testing in the app settings on the device rather than on the EMM server (MobileIron Core, BlackBerry UEM or MS InTune, for example). CAPTOR is engineered to allow the app user to adjust SMB settings that are not locked down by the app config. Therefore the first step is to enable the backup service in the app config, but leave the SMB settings unlocked so that you can test them on a device.
On the server, the app config should include the key "enablebackup" with value "smb". Remove any other backup configs so that you can set them manually on the device. Make sure that config is sent down to the device. For BlackBerry UEM there is a checkbox to enable the service and then a dropdown menu where you can select SMB.
Now on the test device, launch CAPTOR and go to Settings> Backup Config> SMB. You can enter all of the values here, and then tap Test Configuration. If it works, you will see a Success alert. If it fails you should get one of the following error messages which will tell you where the problem is.
Could not reach server (09)
Could not connect to server (19)
Could not open directory at path (29)
Invalid SMB share (49)
Invalid SMB host (69)
Directory not found at path (79)
The request timed out (89)
Unauthorized: Bad username or password (99)
You can quickly make adjustments based on the error message and then test the configuration again.
"Could not reach server (09)" indicates you may need to start a VPN on the device and then test again. Common SMB ports such as port 445 are often blocked on iPhones, and a VPN would bypass this.
"Could not open directory at path (29)" indicates a problem with the SMB Path. We recommend trying to add or remove any slashes "/" from the Path value. We maintain four different SMB servers in the Inkscreen testing lab, and all of them have different path value formats. Some do not have any slashes, and some end with a slash.
"Invalid SMB host (69)" indicates a problem with the SMB Host value. SMB Host can be an IP Address or a URL. Typically you would omit "https://" for the beginning of the SMB Host value.
Once you have determined the correct settings in CAPTOR and receive a Success message after testing the configuration, please return to the EMM server to finish the app configuration.
For any key value that is consistent across all assigned user, you can enter a precise value. For any values that might be unique to the user, you can either remove the key so that the user has to enter the value in the app settings, or you might be able to use substitution variables. Each EMM has their own system for substitution variables (also called "wildcards") so please refer to your EMM administration guide to determine the options and formatting. Substitution variables can be combined with static values. For example, the value for SMB Path might be "captorSMB/$USERID$".
If any of the SMB values are not set in the app configuration, the next time a user launches CAPTOR they will be asked to manually enter the settings themselves. The SMB values that are set in the app configuration will be locked in the app and the user will not be able to
If you continue to experience trouble finding a successful SMB test, please email support@inkscreen.com with the following:
1) Screenshot of the app configuration on the EMM server
2) Screenshot of the SMB configuration in CAPTOR
3) CAPTOR log file (Settings> Help > Share Log Files or Email Log Files)