The UMS Console establishes a connection to the UMS server. The UMS server then establishes a TLS tunnel to the device. 

The following figure illustrates the communication between the UMS Console, the UMS server and a device: