Mobile agent (Z-Push)

For the mobile device list and remote wipe, a small Profelis agent is installed on the Z-Push server; the admin console talks to this agent.

Z-Push itself must be installed separately; the agent only manages it.

Z-Push on the same machine as the mail server

sudo ./scripts/install-mobile-agent.sh
sudo ./scripts/install-mobile-agent.sh --verify

The agent listens only on 127.0.0.1:8790. Enter the secret shown at the end of the installation under Profelis Mobile › Settings in the admin console, with the URL http://127.0.0.1:8790.

Profelis Mobile › Settings window

Z-Push on a separate server

On the Z-Push server:

sudo ./install-mobile-agent.sh --remote --mailbox-ip 192.0.2.10,192.0.2.11

The agent still listens only locally; it is exposed to the mail servers over TLS on port 8443, only from the listed addresses. The certificate and server name are taken from the existing nginx configuration.

1. Check that the mail server can resolve the Z-Push name (getent hosts zpush.zpe.profelis.net); add an /etc/hosts entry if needed. The certificate is checked against the name, so an IP address does not work.
2. Test from the mail server: curl -sS -H 'X-Profelis-Auth: <secret>' https://zpush.zpe.profelis.net:8443/ping → HTTP 200 (403 means the secret is wrong).
3. In the admin console, enter the URL https://zpush.zpe.profelis.net:8443 and the secret under Settings, then Refresh.

Empty list, no warning

On installations with many devices, older agent versions can time out; install the current agent. The first refresh can take up to 45 seconds.