Cisco WebEx Meetings Server Administration Guide Release 2.0
Configuring Settings
Downloads: This chapterpdf (PDF - 1.68MB) The complete bookPDF (PDF - 3.89MB) | The complete bookePub (ePub - 1.48MB) | Feedback

Configuring Settings

Contents

Configuring Settings

This module describes how to configure your settings.

Configuring Your Company Information

Procedure


    Step 1   Sign in to the Administration site.
    Step 2   If you want to change the Language setting, select Turn On Maintenance Mode and Continue to confirm.
    Note   

    You do not have to turn on maintenance mode when modifying the other settings on the Company Info page.

    Step 3   Select Settings. If you are viewing one of the other settings pages, you can also select Company Information under the Settings section.
    Step 4   Complete the fields on the page and select Save.

    Option

    Description

    Company Name

    Your company or organization name.

    Address 1

    Address line 1.

    Address 2

    Address line 2.

    City

    Your city.

    State/Province

    Your state or province name.

    ZIP/Postal Code

    ZIP or other postal code.

    Country/Region

    Your country or region name.

    Business Phone

    Drop-down menu with country code and field for business phone with area code.

    Time Zone

    Your time zone.

    Language

    Your language. Language setting affects the following:

    • The sign-in page seen by administrators when they activate their administrator accounts for the first time.
    • The default audio prompts played for call-in teleconference users.

    Locale

    Your locale. The locale setting affects the display of times, dates, currency, and numbers.

    Step 5   Select Turn Off Maintenance Mode and Continue to confirm.

    Your system restarts after you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


    Configuring Your Branding Settings

    Before You Begin

    Prepare the following before configuring your branding settings:

    • A 120x32 PNG, GIF, or JPEG image containing your company logo
    • Your company's privacy statement URL
    • Your company's terms of service statement URL
    • Your company's support URL
    Procedure
      Step 1   Sign in to the Administration site.
      Step 2   Select Settings > Branding.
      Step 3   Complete the fields on the page and select Save.
      Option Description
      Company Logo

      Browse to your logo file. Your logo must be in PNG, JPEG, or GIF format. The maximum dimensions are 120x32 pixels and the maximum file size is 5 MB.

      Privacy Statement

      Enter a URL to your company's privacy statement.

      Terms of Service

      Enter a URL to your company's terms of service.

      Custom Footer Text

      The text you enter will be in the footer of all end-user and administrator emails that are sent by your system.

      Header Background Color

      Select this option to turn off the default background color. Note that this affects all browser bars and emails.

      Online Help

      Select the online help option that applies to your environment. If users are prevented from accessing the Internet, select the customized help option and enter the URLs to your company's videos, user guide, and FAQs.

      Support Contact URL

      Enter the URL to your company's support web page.


      Removing a Company Logo

      Before You Begin

      Create a transparent 120x32 PNG or GIF file.

      Procedure
        Step 1   Sign in to the Administration site.
        Step 2   Select Settings > Branding.
        Step 3   For the Company Logo field, select Browse and choose your transparent 120x32 PNG or GIF file.
        Step 4   Select Save.

        Your previous company logo is replaced by your blank PNG or GIF file. Confirm that the original logo has been removed.


        Configuring Your Meeting Settings

        Configure your meeting settings to control which features participants can use. Configure the following features:

        • Join meeting settings
        • Maximum participants per meeting (meeting size)

          Note


          This setting is limited by the system size configured during deployment. See Confirming the Size of Your System for more information.


        • Participant privileges
        Procedure
          Step 1   Sign in to the Administration site.
          Step 2   Select Settings > Meetings.
          Step 3   In the Join meeting settings section, select your options.

          Default settings are Allow participants to join meetings before host, Allow participants to join teleconference before host, and First participant to join will be the presenter. Participants can join meetings up to 15 minutes before the starting time if Allow participants to join Meetings before host and Allow participants to join teleconference before host are selected. Optionally select Anyone can present in the meeting.

          Note   

          If you deselect Allow participants to join meetings before host the First participant to join will be the presenter feature is automatically deselected.

          Step 4   Select the maximum participants per meeting by dragging the slider. The maximum number of participants for your system is configured during deployment. Following are the system size settings and corresponding maximum meeting sizes.
          System Size Maximum Meeting Size

          50

          50

          250

          100

          800

          100 (no HA), 250 (with HA)

          2,000

          100 (no HA), 250 (with HA)

          Step 5   In the participant privileges section, select your options. Chat, Polling, Document review and presentation, and Sharing and Remote Control are selected by default. The selected participant privileges appear in the users' controls.

          Recording is disabled by default. Select Record to record and store meetings on your storage server.

          Note   

          You must configure a storage server to enable recording. See Configuring a Storage Server for more information.

          Step 6   Select Save.

          About Meeting Security

          Cisco WebEx Meetings Server enables different meeting security features depending on the following factors:

          • User type: host, alternate host, user (signed in), and guest.
          • Meeting has a password or no password.
          • Password is hidden or visible in the meeting invitation.
          • Password is hidden or visible in the email meeting invitation.
          • Behavior displayed on the meeting join page (see the following tables).
            Table 1 Password is Excluded When Scheduling Your Meeting
            User Type Password Displayed in Email Invitation and Reminder Meeting Detail Page
            Host Yes Yes
            Alternate host Yes Yes
            Invitee No No
            Forwarded invitee No No
            Table 2 Password is Included When Scheduling Your Meeting
            User Type Password Displayed in Email Invitation and Reminder Meeting Detail Page
            Host Yes Yes
            Alternate host Yes Yes
            Invitee Yes Yes
            Forwarded invitee Yes Yes
          • Join before host is on/off.
            • On: Invitees or guests can join the meeting before the host, 15 minutes before the scheduled start time.
            • Off: IInvitees or guests cannot join the meeting before host. The host or alternate host can start the meeting, then the invitees can join.
          • Join teleconference before host is on/off.
            • On: If the host does not start the teleconference in the meeting client, then invitees can join the teleconference before the host.
            • Off: If the host does not start the teleconference in the meeting client, then invitees cannot join the teleconference before the host.
          • First participant can present is on/off.
            • On: When Join before host is configured, the first participant is the presenter.
            • Off: The host always has the ball.

          About Configuring Your Audio Settings

          The first time you configure your audio settings, you are guided through the process by a wizard that helps you set your CUCM SIP configuration and call-in access numbers. After you have completed the wizard and configured your initial audio settings, you can configure all other audio settings.

          Configuring Your Audio Settings for the First Time

          The first time you configure your audio settings, you must specify which features you want and you must configure your CUCM settings. A wizard guides you through the first-time installation procedure.

          Before You Begin

          You must enable teleconferencing and configure CUCM before you proceed with your audio configuration. You must configure CUCM on two systems if you plan to provide teleconferencing high availability. Refer to the Planning Guide for more information. To proceed you must obtain the following information:

          • Prepare a list of call-in access numbers that your participants use to call into meetings.
          • Your CUCM IP address.
          • (Optional) Obtain a valid secure conferencing certificate if you plan to use TLS/SRTP teleconferencing encryption. See Importing Secure Teleconferencing Certificates for more information.

            Note


            This feature is not available in Russia or Turkey.


          Procedure
            Step 1   Sign in to the Administration site.
            Step 2   Select Turn On Maintenance Mode and Continue to confirm.
            Step 3   Select Settings > Audio.

            The Audio page appears and your Current Audio Features are displayed.

            Step 4   Select Next.

            The SIP Configuration page appears. This page displays the SIP configuration information you need to configure CUCM including the IP address and port number for each server type.

            Step 5   Select Next.

            The Enable Teleconference: CUCM Setting page appears, displaying your current settings.

            Step 6   Select Edit to change your settings.

            The CUCM (Cisco Unified Communications Manager) dialog box appears.

            Step 7   Complete the fields in the CUCM (Cisco Unified Communications Manager) dialog box as follows:
            1. Enter an IP address for CUCM 1 IP Address and optionally for CUCM 2 IP Address.

              These IP addresses need to correspond to the primary and optionally secondary CUCM node that are part of the Cisco Unified Communications Manager Group, as set on the device pool that is configured on the Application Point SIP Trunks in CUCM. See "Configuring a SIP Trunk for an Application Point" in the Planning Guide for more details.

              Note   

              CUCM 2 is not required but it is recommended for teleconferencing high availability.

            2. Enter the port number for your system. The port number must match the port number assigned in CUCM. (Default: 5062)
            3. Use the Transport drop-down menu to select the transport type for your system. (Default: TCP)
              Note    If you select TLS as your transport type, you must import a valid secure conferencing certificate for each of your CUCM servers, export the SSL certificate and upload it into CUCM, and configure your system's fully qualified domain name (FQDN) as the SIP domain name on each CUCM server. See Importing Secure Teleconferencing Certificates for more information about importing your certificates, and "Configuring Cisco Unified Communications Manager (CUCM)" in the Planning Guide for more information about managing call control on CUCM.
            4. Select Continue.

            Your new or updated CUCM settings appear on the Enable Teleconference: CUCM Setting page.

            Step 8   Select Next.

            The Enable Teleconference: Access Number Setting page appears.

            Step 9   Select Edit.

            The Call-in Access Numbers dialog box appears.

            Step 10   Select Add to add a call-in access number.

            A line is added in the dialog box for the phone label and number. Each time you select Add, an additional line appears in the dialog box.

            Step 11   Enter the Phone Label and Phone Number for each access number that you add and select Continue after you have finished adding numbers.
            Note    Make sure you only add numbers that you have configured in CUCM. The numbers you add appear in email invitations and your Cisco WebEx Meetings client.


            Example:Enter "Headquarters" for the Phone Label and "888-555-1212" for the Phone Number.

            The access numbers you entered are added to your system and you are returned to the Enable Teleconference: Access Number Setting page. The page now indicates how many access numbers have been configured.

            Step 12   Select Save.

            The wizard informs you that you have successfully configured your teleconferencing features.

            Step 13   (Optional) Enter a display name in the Display Name dialog box.
            Step 14   (Optional) Enter a valid caller ID in the Caller ID dialog box.
            Note    The caller ID is limited to numerical characters and dash (-) and has a maximum length of 32 characters.
            Step 15   (Optional) Configure your WebEx Call Me setting (Default: Press 1 to connect to meeting). Optionally select this option to bypass the requirement to press 1 to connect to a meeting.
            Note    We do not recommend that you select this option unless your phone system is incapable of sending a 1 digit.
            Step 16   (Optional) Select your Telephone entry and exit tone.
            • Beep (default)
            • No tone
            • Announce name
            Step 17   (Optional) If IPv6 is configured on your system, set your IPv6 Teleconferencing setting to On or Off. (Default: Off. A setting of Off indicates that IPv4 is the setting.)
            Note    The IPv6 Teleconferencing option is not available on systems not configured for IPv6.
            Step 18   Select the System Audio Language users hear when they dial in to the audio portion of a Cisco WebEx meeting or when they use the Call Me service.
            Step 19   Select Save.
            Step 20   Select Turn Off Maintenance Mode and Continue to confirm.

            Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


            Configuring Your Audio Settings

            Before You Begin

            If you have not already configured your audio settings, see the Configuring Your Audio Settings for the First Time section.


            Note


            When configuring or changing the Call-In Access Numbers, Display Name, or Caller ID audio settings, turning on maintenance mode is not required.


            Procedure
              Step 1   Sign in to the Administration site.
              Step 2   Select Turn On Maintenance Mode and Continue to confirm.
              Step 3   Select Settings > Audio.
              Step 4   Configure your audio feature settings.
              Option Description

              WebEx Audio

              • User Call In and Call Me service–Enables users to attend a teleconference by calling specified phone numbers or by receiving a Call Me call from the system.
              • Call In–Enables users to attend a teleconference by calling specified phone numbers.
              • OFF–Disables all calling features.

              Personal Conferencing

              • Select the Enable Personal Conferencing check box to allow users to start and dial in to personal conference meetings.
              • Select the Allow participants to join Personal Conference meetings before host check box to allow participants to start the audio portion of a Personal Conference meeting by entering only the participant access code; no host PIN is required.

              Voice connection using computer

              • ON
              • OFF
              Step 5   In the Edit Teleconference Settings section, select the Edit link under CUCM (Cisco Unified Communications Manager) to change your settings.
              Option Description

              CUCM 1 IP Address

              Enter the hostname or an IP address for your CUCM 1 system.

              CUCM 2 IP Address

              (Optional) Enter the hostname or an IP address for your CUCM 2 (load balancing service) system.
              Note   

              CUCM 2 is not required but it is recommended for teleconferencing high availability.

              Port Number

              Enter a valid port number. Make sure the port number matches the setting in CUCM.

              Default: 5062

              Transport

              Select the transport type.

              Note   

              If you select TLS as your transport type, you must import a valid secure conferencing certificate for each of your CUCM servers, export the SSL certificate and upload it into CUCM, and configure your system's fully qualified domain name (FQDN) as the SIP domain name on each CUCM server. See Importing Secure Teleconferencing Certificates for more information on importing your certificates and "Configuring CUCM" in the Cisco WebEx Meetings Server Planning Guide for more information about CUCM.

              Default: TCP

              The CUCM (Cisco Unified Communications Manager) dialog box appears. Complete the fields and select Continue.

              Step 6   In the Edit Teleconference Settings section, select the Edit link under Call-In Access Numbers to add, change, or delete your access numbers.
              1. Select Add and enter a phone label and phone number for each new access number you want to add.
              2. To delete a number, select the Delete link at the end of the line.
              3. Enter updated information in the phone label and phone number fields for any access number you want to change.
              4. Select Continue when you are finished.
              Note    Make sure you only add numbers that you have configured in CUCM. The numbers you add appear in email invitations and your Cisco WebEx Meetings client.
              Step 7   Enter a display name in the Display Name dialog box.
              Step 8   Enter a valid caller ID in the Caller ID dialog box.
              Note    The caller ID is limited to numerical characters and dash (-) and has a maximum length of 32 characters.
              Step 9   Configure your WebEx Call Me setting (Default: Press 1 to connect to meeting). Optionally select this option to bypass the requirement to press 1 to connect to a meeting.
              Note    Cisco does not recommend that you select this option unless your phone system is incapable of sending a 1 digit.
              Step 10   Select your Telephone entry and exit tone.
              • Beep (default)
              • No tone
              • Announce name
              Step 11   If IPv6 is configured on your system, set your IPv6 Teleconferencing setting to On or Off. (Default: Off. A setting of Off indicates that IPv4 is the setting.)
              Note    The IPv6 Teleconferencing option is not available on systems not configured for IPv6.
              Step 12   Select the System Audio Language users hear when they dial in to the audio portion of a Cisco WebEx meeting or when they use the Call Me service.
              Step 13   Select Save.
              Step 14   Select Turn Off Maintenance Mode and Continue to confirm.

              Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


              Configuring Your Video Settings

              Procedure


                Step 1   Sign in to the Administration site.
                Step 2   Select Settings > Video.
                Step 3   Select On or Off and then select Save. (Default: On).

                Configuring Your Mobile Settings


                Note


                Android is supported in Cisco WebEx Meetings Server 2.0 and higher. Both the iOS and Android WebEx applications are enabled by default.


                Before You Begin

                To configure mobile settings you must add public access on your system during deployment. See Adding Public Access to Your System for more information.

                Note that if your system is configured to permit more than one call-in access number, the system assumes that the first number is a toll-free access number and the mobile app defaults to attempting this number first. The app will not connect if this number is not reachable from the mobile network. Make sure that this number is accessible from the mobile network.

                Procedure
                  Step 1   Sign in to the Administration site.
                  Step 2   Select Settings > Mobile.
                  Step 3   Configure your mobile settings by selecting which mobile platforms your system supports and then select Save. (Default: iOS WebEx application and Android WebEx application are selected)
                  Note   
                  • You must have a DMZ network in order to use iOS or Android mobile devices to access a meeting. If you do not have a DMZ network, the iOS WebEx application and Android WebEx application options are grayed out.
                  • The iOS and Android WebEx applications work the same as the Cisco WebEx desktop application; from an internal intranet or external Internet.

                  Configuring Quality of Service (QoS)

                  Differentiated Services (DiffServ) code point (DSCP) settings determine the QoS for the audio and video media signaling, as defined in RFC 2475. Cisco recommends that you retain the default value. The other values are available for the rare instances when the network requires a different DSCP setting. For more information, see the "Network Infrastructure" chapter of the Cisco Unified Communications Solution Reference Network Design (SRND) that applies to your version of Cisco Unified Communications Manager at http:/​/​www.cisco.com/​en/​US/​products/​sw/​voicesw/​ps556/​products_​implementation_​design_​guides_​list.html.

                  Following are the default values:

                  • WebEx Audio (Media)
                    • IPv4 QoS Marking: EF DSCP 101110
                    • IPv6 QoS Marking: EF DSCP 101110
                  • WebEx Audio (Signaling)
                    • IPv4 QoS Marking: CS3 (precedence 3) DSCP 011000
                  Procedure
                    Step 1   Sign in to the Administration site.
                    Step 2   Select Settings > Quality of Service.
                    Step 3   Select QoS marking settings using the appropriate drop-down menus and then select Save.

                    About QoS Marking

                    See the tables below for QoS marking information to deployments that have traffic going through an Internet Reverse Proxy server versus a deployment in which no traffic is going through an Internet Reverse Proxy server.

                    QoS Marking on Cisco WebEx Meetings Server Systems With Traffic Moving Through an Internet Reverse Proxy Server

                    Traffic QoS Marking
                    SIP Audio—media—CWMS to Endpoint Yes
                    SIP Audio—signalling—CWMS to Endpoint Yes
                    PC Audio—media—CWMS to Client No
                    PC Audio—signalling—CWMS to Client No
                    PC Audio—media—Client to CWMS No
                    PC Audio—signalling—Client to CWMS No
                    PC Video—media—CWMS to Client No
                    PC Video—signalling—CWMS to Client No
                    PC Video—media—Client to CWMS No
                    PC Video—signalling—Client to CWMS No

                    QoS Marking on Cisco WebEx Meetings Server Systems With No Traffic Moving Through an Internet Reverse Proxy Server

                    Traffic QoS Marking
                    SIP Audio—media—CWMS to Endpoint Yes
                    SIP Audio—signalling—CWMS to Endpoint Yes
                    PC Audio—media—CWMS to Client Yes
                    PC Audio—signalling—CWMS to Client Yes
                    PC Audio—media—Client to CWMS No
                    PC Audio—signalling—Client to CWMS No
                    PC Video—media—CWMS to Client Yes
                    PC Video—signalling—CWMS to Client Yes
                    PC Video—media—Client to CWMS No
                    PC Video—signalling—Client to CWMS No

                    Configuring Passwords

                    You can configure password settings for the following:

                    • General Passwords—Controls password expiration periods and enables you to force users to change their passwords either immediately or at a specified interval.
                    • User Passwords—Enables you to configure password strength for user accounts including mixed case, length, character types and usage, dynamic web page text controls, and setting up a list of unacceptable passwords.
                    • Meeting Passwords—Enables you to enforce password usage for meetings and to configure password strength for meetings including mixed case, length, character types and usage, dynamic web page text controls, and setting up a list of unacceptable passwords.

                    Note


                    If SSO is enabled on your system, the settings on the General Password and User Password pages and the password change controls on the Edit User page no longer apply to host accounts.


                    Configuring General Password Settings

                    All password settings on this page are optional and can be toggled on (checked) or off (unchecked).

                    Procedure
                      Step 1   Sign in to the Administration site.
                      Step 2   Select Settings > Password Management > General Password.
                      Step 3   (Optional) Select Deactivate host account after number day(s) of inactivity and enter the number of days in the text field. (Default: Checked and set for 90 days.)

                      If you use the default setting, a user is deactivated if he or she has not hosted or scheduled a meeting for 90 consecutive days.

                      Note   

                      This feature only applies to host accounts. You cannot deactivate an administrator account by using this feature. To deactivate an administrator account, see Activating or Deactivating Users and Administrators from the Users Page.

                      Step 4   (Optional) Select Force all users to change password every number day(s) and enter the number of days in the text field. (Default: Unchecked)
                      Step 5   (Optional) Select Force all users to change password on next login. (Default: Unchecked)
                      Step 6   Select Save.

                      Configuring Your User Password Settings

                      Configure your user password requirements and limitations.

                      Procedure
                        Step 1   Sign in to the Administration site.
                        Step 2   Select Settings > Password Management > User Password.
                        Step 3   Change your user password settings by configuring the fields on the page.

                        Option

                        Description

                        Require strong passwords for user accounts

                        Select this option to enable the remaining options.

                        Default: Selected

                        Minimum character length

                        Minimum character requirement.

                        Default: Selected and 6 characters

                        Minimum number of alphabetic characters

                        Minimum alphabetical (non-numeric, non-special characters).

                        Default: Selected and 1 character

                        Minimum number of numeric characters

                        Minimum numerical (non-alphabetical, non-special characters).

                        Default: Selected and 1 number

                        Minimum number of special characters

                        Minimum special (non-alphabetical, non-numeric characters).

                        Default: Not selected and 1 character

                        Must include mixed case

                        Password must contain uppercase and lowercase alphabetical characters.

                        Default: Selected

                        Do not allow any character to be repeated more than 3 times

                        No one character (alphabetical, numeric, or special) can be repeated more than three times.

                        Default: Selected

                        List of unacceptable passwords

                        Administrator-specified list of unusable passwords.

                        Default: Not selected

                        Company name, site name, user email address, and host name are always unacceptable

                        Do not use these specific names.

                        Default: Selected

                        Must not include previous n passwords

                        Do not use previously used passwords. Select a number from the dropdown menu to specify the number of previous passwords you cannot use.

                        Default: Selected

                        Default number: 5

                        Step 4   Select Save.

                        Configuring Your Meeting Passwords

                        Use this feature to configure meeting password parameters. The following table describes which users must enter a password when a meeting is configured with one.

                        Password Configured Password Excluded from Email Invitation Meeting Creator Signed In Host Signed In Invitee Signed In Guest Signed In Guest Not Signed In
                        No n/a Password not required. Password not required. Password not required. Password not required. Password not required.
                        Yes Yes Password not required. Password not required. Password not required. Password required. Password required.
                        Yes No Password not required. Password not required. Password not required. Password required. Password can be prefilled. Password required. Password can be prefilled.
                        Procedure
                          Step 1   Sign in to the Administration site.
                          Step 2   Select Settings > Password Management > Meeting Password.
                          Step 3   Change your meeting password settings by configuring the fields on the page.
                          Note   

                          All options are not selected by default.

                          Option Description

                          All meetings must have passwords

                          Requires all meetings to have passwords.

                          Require strong passwords for meetings

                          Select this option to enable the remaining options.

                          Minimum character length

                          Minimum character requirement.

                          Default: 6

                          Minimum number of alphabetic characters

                          Minimum alphabetical (non-numeric, non-special characters).

                          Default: 1

                          Minimum number of numeric characters

                          Minimum numerical (non-alphabetical, non-special characters).

                          Default: 1

                          Minimum number of special characters

                          Minimum special (non-alphabetical, non-numeric characters).

                          Default: 1

                          Must not contain these special characters (space, \, ', ", /, &, <, >, =, [,])

                          Select this option to prohibit the use of these characters.

                          Must include mixed case

                          Password must contain uppercase and lowercase alphabetical characters.

                          List of unacceptable passwords

                          Administrator-specified list of unusable passwords.

                          Company name, site name, user email address, host name, and meeting topic are always unacceptable

                          Select this option to prohibit the use of these words or character strings.

                          Step 4   Select Save.

                          Configuring Your Email Settings

                          You can configure your email settings and templates. Your email templates have default settings that you can optionally change.

                          Procedure
                            Step 1   Sign in to the Administration site.
                            Step 2   Select Settings > Email.

                            The Variables page opens.

                            Step 3   Enter your From Name, your From Email Address, your Reply-To email address, and then select Save.
                            Note   

                            If you enter a person's name in the From Name on the Variables page, but meeting invitations will reflect the host's email address.

                            Step 4   Select Templates. See About Email Templates for descriptions of each template type.

                            The Templates page appears. Select the Common or Meetings tab. Common is the default.

                            Step 5   To configure email templates, select the desired template link on the Common and Meetings tab.
                            Step 6   Make changes (if any) to the email template you selected and select Save.

                            Example:Select the Account Reactivated template link on the Common tab. Make changes to the fields in the Account Reactivated dialog box and select Save.

                            The default From Name, From Email Address, and Reply-To values are taken from the settings you configure on the Variables page.

                            Note   

                            If you enter a person's name for From Name on the Variables page, the system automatically replaces the person's name with the WebEx site URL for all meeting invitations.


                            About Email Templates

                            Use the email templates to communicate important events to users. Each email template has variables that you must configure. See the table below for descriptions of the variables in each template.

                            There are two types of email templates:

                            • Common–Including lost password, host and invitee notifications, recording availability, and other general notices.
                            • Meetings–Including meeting invitations, cancellations, updates, reminders, and information notices.
                            Table 3 Common Email Templates
                            Title Description Variables

                            AD Activation

                            Sent to a user after an AD account has been activated.

                            • %SiteURL%
                            • %DisplayName%
                            • %SSOSignINLink%
                            • %OrgLogo%
                            • %Participants%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            AD-Sync Failed

                            Sent to an administrator after a failed synchronization.

                            • %FullName%
                            • %Failure_Reason%
                            • %DownloadLogURL%
                            • %Sync_Start_Time%
                            • %Sync_Completion_Time%
                            • %Users_Added%
                            • %Users_Deactivated%
                            • %Users_Failed_to_Sync%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            AD-Sync Success

                            Sent to an administrator after a successful synchronization.

                            • %FullName%
                            • %DownloadLogURL%
                            • %Sync_Start_Time%
                            • %Sync_Completion_Time%
                            • %Users_Added%
                            • %Users_Deactivated%
                            • %Users_Failed_to_Sync%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Account Reactivated

                            Sent to a user after an administrator reactivates the user's account.

                            • %DisplayName%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Forgot Password–Password Changed

                            Sent to a user after he has reset his password from the end-user site.

                            • %SiteURL%
                            • %DisplayName%
                            • %OrgLogo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Forgot Password–Reset Password

                            Sent to a user after he has reset his password from the end-user site. This email asks the user to create a new password.

                            • %SiteURL%
                            • %DisplayName%
                            • %OrgLogo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            PT Meeting Invitation—Invitee

                            Sent to meeting invitees after a meeting is scheduled using Productivity Tools from a Personal Conference account.

                            • %HostName%
                            • %Topic%
                            • %TeleconferencingInfo%
                            • %Meeting Link%
                            • %Meeting Number%
                            • %Meeting Password%
                            • %Meeting Space%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            PT Meeting Notification—Host

                            Sent to a meeting host after a meeting is scheduled using Productivity Tools from a Personal Conference account.

                            • %HostName%
                            • %Topic%
                            • %TeleconferencingInfo%
                            • %Meeting Link%
                            • %Meeting Number%
                            • %Meeting Password%
                            • %Meeting Space%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            PT Meeting Invitation - Host

                            Sent to a meeting host after a meeting is scheduled using Productivity Tools.

                            • %Topic%
                            • %HostName%
                            • %Meeting Link%
                            • %Meeting Number%
                            • %Meeting Password%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%

                            PT Meeting Invitation - Invitee

                            Sent to meeting invitees after a meeting is scheduled using Productivity Tools.

                            • %Topic%
                            • %HostName%
                            • %Meeting Link%
                            • %Meeting Number%
                            • %Meeting Password%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%

                            Recording Available for Host

                            Sends the host a link to a meeting recording.

                            • %SiteURL%
                            • %OrgLogo%
                            • %DisplayName%
                            • %Topic Name%
                            • %Duration%
                            • %Recording Time%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            SSO Activation Email

                            Sent after Single Sign-On (SSO) is enabled.

                            • %SiteURL%
                            • %DisplayName%
                            • %OrgLogo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Send Email To All Users

                            Sends an email to all users on the system.

                            • %SiteURL%
                            • %Subject%
                            • %OrgLogo%
                            • %AttendeeName%
                            • %Body%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Setup Cisco WebEx—Mobile Device

                            Informs users about the Cisco WebEx app for mobile devices and provides a download link for the app.

                            • %SiteURL%
                            • %Subject%
                            • %OrgLogo%
                            • %DisplayName%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Share Recording

                            Sends selected meeting invitees a link to a meeting recording.

                            • %HostName%
                            • %HostEmail%
                            • %OrgLogo%
                            • %AttendeeName%
                            • %HostName%
                            • %Topic Name%
                            • %Duration%
                            • %Recording Time%
                            • %Personalized Message%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Share Recording from MC

                            Sends selected meeting invitees a link to a meeting recording. Participants selected by the host in Meeting Center after selecting Leave Meeting.

                            • %HostName%
                            • %HostEmail%
                            • %OrgLogo%
                            • %AttendeeName%
                            • %Topic Name%
                            • %Duration%
                            • %Recording Time%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Users—Password Changed

                            Sends users an email when their password has been changed.

                            • %SiteURL%
                            • %OrgLogo%
                            • %DisplayName%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%

                            Welcome Email

                            Sent to a new administrator after his or her account is created.

                            • %SiteURL%
                            • %DisplayName%
                            • %SiteURL%
                            • %Support%
                            • %participants%
                            • %CustomFooterText%
                            • %Year%
                            Table 4 Meetings Email Templates
                            Title Description Variables

                            In-Progress Meeting Invite for Attendee

                            Sent to users when a host invites them to a meeting while the meeting is in progress.

                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AttendeeName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Instant Meeting Invite for Host Sent to the host and invitees when the host selects Meet Now.
                            • %SiteURL%
                            • %Topic%
                            • %HostName%
                            • %Topic_HTML%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Canceled for Attendee Informs a user that a scheduled meeting has been canceled.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AttendeeName%
                            • %HostName%
                            • %Topic_HTML%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %Write%
                            • %SiteURL%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Canceled for Host Sent to the meeting host to confirm cancellation of a meeting.
                            • %SiteURL%
                            • %Topic%
                            • %HostName%
                            • %Topic_HTML%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %Write%
                            • %SiteURL%
                            • %CustomFooterText%
                            • %Year%

                            Meeting Information Updated for Alternate Host

                            Provides meeting information to the alternate host when the meeting settings have been changed.

                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %OrgLogo%
                            • %AlternateHostName%
                            • %MeetingTime%
                            • %HostName%
                            • %Duration%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Information Updated for Attendee Provides meeting information for a meeting invitee when the meeting settings have been changed.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AttendeeName%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Information Updated for Host Provides meeting information to the host when the meeting settings have been changed.
                            • %SiteURL%
                            • %Topic%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Reminder for Alternate Host Sends a meeting reminder to the meeting alternate host.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %OrgLogo%
                            • %AlternateHostName%
                            • %MeetingTime%
                            • %HostName%
                            • %Duration%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Reminder for Host Sends a meeting reminder to the meeting host.
                            • %SiteURL%
                            • %Topic%
                            • %OrgLogo%
                            • %HostName%
                            • %MeetingTime%
                            • %HostName%
                            • %Duration%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Rescheduled for Alternate Host Sends updated meeting information to the alternate host.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AlternateHostName%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            Meeting Rescheduled for Attendee Sends updated meeting information to invitees.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AttendeeName%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            MeetingInfo for Alternate Host Sends a meeting confirmation to the alternate host.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AlternateHostName%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            MeetingInfo for Attendee Sends a meeting invitation to invitees.
                            • %HostName%
                            • %HostEmail%
                            • %Topic%
                            • %AttendeeName%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            MeetingInfo for Host Sends a meeting confirmation to the host.
                            • %SiteURL%
                            • %Topic%
                            • %HostName%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %TeleconferencingInfo%
                            • %SiteURL%
                            • %Support%
                            • %CustomFooterText%
                            • %Year%
                            PCN Meeting Auto Reminder—Host Sends an automatic meeting reminder to the meeting's host (Personal Conference accounts only).
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • % MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Invitation—Invitee Sends a meeting invitation to invitees (Personal Conference accounts only).
                            • %AttendeeName%
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Manual Reminder—Host Sends a manual meeting reminder to the meeting's host (PCN accounts only).
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Manual Reminder—Invitee Sends a manual meeting reminder to invitees (Personal Conference accounts only).
                            • %AttendeeName%
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Notification—Host Sends a meeting notification to the host (Personal Conference accounts only).
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Instant Invitation—Host Sends an instant meeting notification to the host (Personal Conference accounts only).
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting In Progress Invitation—Invitee Sends an instant meeting notification to an invitee (Personal Conference accounts only).
                            • %AttendeeName%
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Schedule Change—Host Sends a schedule change notification to the host (Personal Conference accounts only).
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %HostNumber%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Schedule Change—Invitee Sends a schedule change notification to an invitee (Personal Conference accounts only).
                            • %AttendeeName%
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Rescheduled—Invitee Sends a meeting rescheduled notification to an invitee (Personal Conference accounts only).
                            • %AttendeeName%
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %TeleconferencingInfo%
                            • %MeetingInfoURL%
                            • %MeetingNumber%
                            • %MeetingPassword%
                            • %SiteURL%
                            • %Support%
                            PCN Meeting Canceled—Host Sends a meeting cancellation notification to a host (Personal Conference accounts only).
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %Write%
                            • %SiteURL%
                            PCN Meeting Canceled—Invitee Sends a meeting cancellation notification to an invitee (Personal accounts only).
                            • %AttendeeName%
                            • %HostName%
                            • %Topic%
                            • %MeetingDateOrRecurrence%
                            • %MeetingTime%
                            • %TimeZone%
                            • %Write%
                            • %SiteURL%

                            About Downloads

                            You can download and mass deploy these applications using tools available to you on the Administration site. The applications available for download include the following:

                            • WebEx Meetings application (Windows)

                              Note


                              Running the WebEx Meetings application on a virtualized Operating System is not supported.


                            • WebEx Productivity Tools (Windows)

                              Note


                              Before you install a maintenance release or update your system to a newer release, your users must uninstall Cisco WebEx Productivity Tools running on their desktops. After the upgrade, you can use the Administration site to manually push the Productivity Tool to your users or users can download Productivity Tools from the end-user Downloads page.


                            • WebEx Network Recording Player (Windows)

                            To get these applications installed on your users' computers, you can use the Administration site to configure automatic update (Productivity Tools), enable users to download the applications themselves, push applications to your users' computers, or download the installation files and manually install them on your users' computers.

                            This product can be used on computers whose users have administrator privileges and on those that do not. Automatic downloads, user-enabled download and installation, and pushing applications to your users' computers works when your users have administrator privileges. If your company does not give your users administrator privileges then you must use an alternative approach to install the applications on their computers.

                            On PCs with administrator privileges:
                            • Users can download and install the Cisco WebEx Meetings application, Productivity Tools, and Network Recording Player from the end-user download pages. No additional administrator action is required.
                            • Users are advised to install the Productivity Tools the first time they sign in.
                            • The Cisco WebEx Meetings application is downloaded on-demand the first time a user joins a meeting and is installed silently on the user's PC.

                            On PCs without administrator privileges:

                            • We recommend that you push the Cisco WebEx Meetings application, Productivity Tools, and Network Recording Player to end-user desktops offline before you inform end-users that user accounts have been created for them. This ensures that your users can start and join meetings and play network recordings from their web browsers and desktops the first time they sign in.
                            • You can acquire the .MSI installers for each from the Admin > Settings > Downloads page. See "Downloading Applications from the Administration Site" in the Cisco WebEx Meetings Server Planning Guide and System Requirements for more information.
                            • If you decide against pushing the applications to your users, they can still access these applications from the end-user download pages. However, if their PCs prohibit installation of downloaded applications, they will not be able to complete the installation process.
                            • When users join meetings by using their web browser (the Cisco WebEx Meetings application can still be downloaded on demand) they can join meetings successfully. In addition, the Cisco WebEx Meetings application attempts to perform an installation to speed up the process of starting or joining future meetings. This fails because their PCs do not have administrator privileges.

                            When upgrading to Cisco WebEx Meetings Server Release 1.5 or later in a locked-down environment where users' PCs do not have administrator privileges, before you start the upgrade procedure push the new version of the WebEx Meetings application to all users' PCs. Having the new and older versions of the Meetings application stored on users' PCs allows them to attend meetings hosted by users running either the latest or previous versions of the Meetings application. Users can have several versions of the WebEx Meetings application stored on their PCs as long as the files are stored in the correct folders.


                            Note


                            For sites that have deployed Cisco WebEx Meetings Server Release 1.5 MR3 (build 1.5.1.386) or earlier and also use cloud-based WebEx Meeting Services, uninstall the Meetings application for both WebEx Meetings Server and WebEx Meeting Services and then re-installed the Meetings application in the correct folders on users' PCs. Otherwise, users cannot join meetings hosted by cloud-based WebEx users. See "Users with PCs Without Administrator Privileges Cannot Join Meetings Hosted by Cloud-based WebEx Users" in the Cisco WebEx Meeting Server Troubleshooting Guide for more details.


                            Configuring Your Download Settings

                            Procedure


                              Step 1   Sign in to the Administration site.
                              Step 2   Select Settings > Downloads.
                              Step 3   Select the Auto update WebEx Productivity Tools check box to configure periodic automatic updates. (Default: checked.)
                              Note   

                              If you plan to manually push WebEx Productivity Tools to your users, we recommend that you uncheck this option.

                              Step 4   Select your download method:
                              • Permit users to download WebEx desktop applications
                              • Manually push WebEx Meetings and Productivity Tools to user’s desktop

                              If you select Permit users to download WebEx desktop applications, you can select Save to finish your download configuration. No further action is necessary. If you select Manually push WebEx Meetings and Productivity Tools to user’s desktop, proceed to the next step.

                              If you select Manually push WebEx Meetings and Productivity Tools to user’s desktop, the WebEx Meetings Application, Productivity Tools, and WebEx Network Recording Player sections appear on the page.

                              Step 5   For each application that you want to download and install, select Download and select Save to save a ZIP file to your system that contains installers for the corresponding application.

                              Each ZIP file contains application installers for all supported languages and platforms.

                              Step 6   Select Save to save your download settings.

                              Managing Certificates

                              Certificates are used to ensure secure communication between the components of your system. When your system is first deployed, it is configured with a self-signed certificate. While a self-signed certificate can last for up to five years, we strongly recommend that you configure certificates that are validated by a certificate authority. A certificate authority ensures that communication between your virtual machines is authenticated. Note that you must install a certificate for each virtual machine on your system.

                              The following certificate types are supported:

                              • SSL—Required on all systems.
                              • SSO IdP—For SSO with identity provider (IdP) certificates.
                              • Secure teleconferencing—Required for TLS teleconferencing. You can configure up to two secure teleconferencing certificates, one for each CUCM system that you choose to configure.

                              All systems must have a SSL certificate. This product supports the following SSL certificates:

                              • Self-signed
                              • Certificate authority-signed
                              • External certificate authority-signed

                              You cannot update your certificates. If you add virtual machines to your system or change any of your existing virtual machines, you must generate new certificates for each virtual machine on your system.

                              SSL certificates can become invalid for the following reasons:
                              • Your system size has been expanded, resulting in the deployment of new virtual machines. The fully qualified domain names (FQDNs) of these new virtual machines are not present in your original SSL certificate.
                              • A high-availability system has been added, resulting in the deployment of new virtual machines. The FQDNs of these new virtual machines are not present in your original SSL certificate.
                              • The Cisco WebEx site URL has changed. This URL is not present in your original SSL certificate.
                              • The Administration site URL has changed. This URL is not present in your original SSL certificate.
                              • The FQDN of the administration virtual machine has changed. This FQDN is not present in your original SSL certificate.
                              • Your current SSL certificate has expired.

                              If your SSL certificate becomes invalid for any reason, your system will automatically generate new self-signed certificates and you are informed of this change by a global warning message at the top of the Administration site page indicating that SSL has become invalidated.

                              Generating SSL Certificates

                              Your system must have a SSL certificate configured. This product supports the following types of SSL certificates:

                              • Self-signed
                              • Certificate authority-signed
                              • External certificate authority-signed

                              Generating a Certificate Signing Request (CSR)

                              Procedure


                                Step 1   Sign in to the Administration site.
                                Step 2   Select Settings > Security > Certificates > Generate CSR.
                                Step 3   Complete the fields on the Generate CSR (Certificate Signing Request) page.
                                Option Description

                                Common Name

                                Select Subject Alternative Name certificate or Wildcard certificate.

                                Subject Alternative Names

                                Note   

                                This option appears only if you select Subject Alternative Name for your Common Name type.

                                Your administration site and virtual machine names. No subject alternative names are required if you selected a wildcard common name.

                                Organization

                                Enter your organization name.

                                Department

                                Enter your department name.

                                City

                                Enter your city.

                                State/Province

                                Enter your state or province.

                                Country

                                Select your country.

                                Key Size

                                Select your key size from the following options:
                                • 2048

                                Default: 2048 (Recommended)

                                Step 4   Select Generate CSR.

                                The Download CSR dialog box appears.

                                Step 5   Select Download.

                                You receive a ZIP file that contains the CSR and the associated private key. The CSR file is called csr.pem and the private key file is called csr_private_key.pem.

                                Step 6   Back up your system using VMware Data Recovery (vSphere 5.0) or VMware vSphere Data Protection (vSphere 5.1). See Creating a Backup by using VMware vCenter for more information.
                                Note    Backing up your system preserves the private key in the event that you need to restore it.

                                Importing a SSL Certificate

                                You can import a SSL certificate using this feature. Cisco WebEx Meetings Server supports X.509 certificates with PEM and DER encoding and PKCS12 Archives.

                                Procedure
                                  Step 1   Sign in to the Administration site.
                                  Step 2   Select Turn On Maintenance Mode and Continue to confirm.
                                  Step 3   Select Settings > Security > Certificates > More Options > Import SSL Certificate/private key.

                                  If you already have a certificate installed, the system warns you that importing a new certificate will overwrite it.

                                  Step 4   Select Continue.
                                  Step 5   Select Browse and choose your certificate file.

                                  You must choose an X.509-compliant certificate or certificate chain. Valid types include:

                                  • PEM/DER encoded certificate: .CER / .CRT / .PEM / .KEY
                                  • PKCS12 encrypted certificate: .P12 / .PFX

                                  You can import a certificate chain using a PKCS#12 file or a single file of PEM blocks. If use a PEM file, It must be formatted as follows:

                                  • (Optional) If you want to upload a private key, the private key must be the first block in the file. It can be encrypted or un-encrypted. It should be in PKCS#8 format, PEM encoded. If it is encrypted, you must enter the password to decrypt it in the passphrase field.
                                  • The next element must be the certificate of the intermediate certificate authority that issued your certificate in PEM encoded X.509 format.
                                  • You can include as many intermediate certificates as you use in your infrastructure. The certificate of the root certificate authority should not be included. If you are using a private certificate authority, you must make sure that the root certificate is distributed to all clients.

                                  All the certificates must be uploaded together in one file. You cannot upload one certificate and then add the intermediate certificates later. You might want to upload the intermediate certificates if you are using a certificate authority that uses intermediate certificates and the intermediate certificates are not distributed in their clients. Uploading them will prevent certificate warnings.

                                  PKCS#12 files must have a .p12 extension. They should only contain the certificates and private key (optional).

                                  Step 6   Select Upload.

                                  After you select Upload, the system will determine if your certificate is valid. A certificate can be invalid for the following reasons:

                                  • The certificate file is not a valid certificate file.
                                  • The certificate file you selected has expired.
                                  • Your public key must be at least 2048 bits.
                                  • The server domains in the certificate do not match the site URL.
                                  • The private key that was automatically generated by the system is not compatible with the certificate.

                                  If the certificate is valid, proceed to the next step. If the certificate is invalid, you cannot upload it. You must select a valid certificate before you can continue.

                                  Step 7   (Optional) Enter a passphrase in the Passphrase field.
                                  Note    A passphrase is required to decrypt PKCS12 archives or an encrypted private key (if uploaded .pem files contain the private key).
                                  Step 8   Select Continue.

                                  Your system imports your SSL certificate and displays it in a scrollable certificate file dialog box.

                                  Step 9   Select Done.
                                  Step 10   Select Turn Off Maintenance Mode and Continue to confirm.

                                  Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


                                  Exporting a SSL Certificate

                                  Procedure


                                    Step 1   Sign in to the Administration site.
                                    Step 2   Select Settings > Security > Certificates > More Options > Export SSL Certificate.
                                    Step 3   Save the certificate file.

                                    What to Do Next

                                    Ensure that both administrators and end users are able to sign in to the administration or web pages without seeing any site not trusted browser warnings.

                                    Exporting a SSL Certificate for Mobile Devices

                                    Apple iPhones or iPads running Apple iOS 5.0 or later have a built-in trusted root certificate. If your company uses a self-signed certificate or if the root certificate installed on your Cisco WebEx Meetings Server is not on the Apple trusted Certificate Authority list, you must export a SSL certificate and email it to your users to install on their mobile devices before they join a WebEx meeting.


                                    Note


                                    Exporting a SSL certificate is required only if you are using a self-signed certificate. If you are using a trusted Certificate Authority-signed certificate, exporting a SSL certificate is not required.


                                    Before You Begin

                                    Verify that the trusted root certificate pre-installed on a user's Apple iPhone or iPad is on Apple's trusted Certificate Authority list. See http:/​/​support.apple.com/​kb/​ht5012 for details.


                                    Note


                                    Users must have an active high-speed Internet connection for their mobile devices.


                                    Procedure
                                      Step 1   Sign into the Administration site.
                                      Step 2   Select Settings > Security > Certificates.
                                      Step 3   Copy the certificate name from the SSL Certificate section.
                                      Step 4   Select More Options > Export SSL Certificate.
                                      Step 5   Save the certificate file to your local hard drive.
                                      Step 6   Attach the saved certificate file to an email and send it to each user's iOS email account.
                                      Step 7   Users open the email on their mobile devices and save the file.
                                      Step 8   Users install the certificate file on their mobile devices:
                                      1. Tap Install on the Install Profile page.
                                      2. Tap Install Now on the Unsigned Profile dialog.
                                      3. Enter a user's iOS password.
                                      4. Tap Next.
                                      5. Tap Done.

                                      Downloading Your CSR and Private Key

                                      Procedure


                                        Step 1   Sign in to the Administration site.
                                        Step 2   Select Settings > Security > More Options > Download CSR.

                                        A dialog box appears asking you to save the file, CSR.zip, which contains the CSR and private key.

                                        Step 3   Select a location on your system to save the file and select OK.
                                        Step 4   Back up your private key file, csr-private-key.pem, in the event that you need it later.

                                        Generating a Self-Signed Certificate

                                        A self signed certificate is automatically generated after you deploy your system. We recommend that you install a certificate that is signed by a certificate authority. You can generate a new self-signed certificate at any time by using this feature.


                                        Note


                                        Users might have problems joining meetings if their system uses a self-signed certificate unless the administrator at the client side has configured his system to use self-signed certificates.


                                        Procedure
                                          Step 1   Sign in to the Administration site.
                                          Step 2   Select Settings > Security > Certificates > More Options > Generate self-signed certificate.
                                          Step 3   Complete the fields on the General Self Signed Certificate page.
                                          Option Description

                                          Certificate name

                                          Enter a name for your self signed certificate. (Required)

                                          X.509 subject name

                                          The hostname of your system. (Not configurable)

                                          Organization

                                          Enter your organization name.

                                          Department

                                          Enter your department name.

                                          City

                                          Enter your city name.

                                          State/Province

                                          Enter the name of your state or province.

                                          Country

                                          Select your country name.

                                          Step 4   Select Generate Certificate and Private Key.
                                          Note   

                                          If you need to use the same SSL certificate after a major upgrade, you must upload the private key generated with the CSR used to get the certificate. The private key must be the first block in the certificate file.

                                          Your certificate file is generated and displayed.

                                          Step 5   Select Done.

                                          Restoring a SSL Certificate

                                          In the event that your certificate becomes invalid or you have performed a disaster recovery on your system, you can restore a SSL certificate using this feature. Cisco WebEx Meetings Server supports X.509 certificates with PEM and DER encoding and PKCS12 Archives.

                                          Procedure
                                            Step 1   Sign into the Administration site.
                                            Step 2   Select Turn On Maintenance Mode and Continue to confirm.
                                            Step 3   Select Settings > Security > Certificates > More Options > Import SSL Certificate.

                                            If you already have a certificate installed, the system warns you that importing a new certificate will overwrite it.

                                            Step 4   Select Continue.
                                            Step 5   Select Browse and choose your certificate file.

                                            You must choose an X.509-compliant certificate or certificate chain. Valid types include:

                                            • PEM/DER encoded certificate: .CER / .CRT / .PEM / .KEY
                                            • PKCS12 encrypted certificate: .P12 / .PFX

                                            You can import a certificate chain using a PKCS#12 file or a single file of PEM blocks. If use a PEM file, It must be formatted as follows:

                                            • (Optional) If you want to reapply a previous private/public key pair for disaster recovery, combine the public key file (csr_private_key.pem) and the certificate received from your certificate authority (CA) into one file. The private key must be the first block in the file followed by the public key. It can be encrypted or unencrypted. It should be in PKCS#8 format and PEM encoded. If it is encrypted, you must enter the password to decrypt it in the passphrase field.
                                            • The next element must be the certificate of the intermediate certificate authority that issued your certificate in PEM encoded X.509 format.
                                            • You can include as many intermediate certificates as you use in your infrastructure. The certificate of the root certificate authority should not be included. If you are using a private certificate authority, you must make sure that the root certificate is distributed to all clients.

                                            All the certificates must be uploaded together in one file. You cannot upload one certificate and then add the intermediate certificates later. You might want to upload the intermediate certificates if you are using a certificate authority that uses intermediate certificates and the intermediate certificates are not distributed in their clients. Uploading them will prevent certificate warnings.

                                            PKCS#12 files must have a .p12 extension. They should only contain the certificates and private key (optional).

                                            Step 6   Select Upload.

                                            After you select Upload, the system will determine if your certificate is valid. A certificate can be invalid for the following reasons:

                                            • The certificate file is not a valid certificate file.
                                            • The certificate file you selected has expired.
                                            • Your public key must be at least 2048 bits.
                                            • The server domains in the certificate do not match the site URL.
                                            • The private key that was automatically generated by the system is not compatible with the certificate.

                                            If the certificate is valid, proceed to the next step. If the certificate is invalid, you cannot upload it. You must select a valid certificate before you can continue.

                                            Step 7   (Optional) Enter a passphrase in the Passphrase field.
                                            Note    A passphrase is required to decrypt PKCS12 archives or an encrypted private key (if uploaded .pem files contain the private key).
                                            Step 8   Select Continue.

                                            Your system imports your SSL certificate and displays it in a scrollable certificate file dialog box.

                                            Step 9   Select Continue on the SSL Certificate page to complete the import.
                                            Step 10   Select Done.
                                            Step 11   Select Turn Off Maintenance Mode and Continue to confirm. The system restarts. You can sign into the Administration site when the restart is completed.

                                            Importing SSO IdP Certificates

                                            Procedure


                                              Step 1   Sign in to the Administration site.
                                              Step 2   Select Settings > Security > SSO IdP Certificate.
                                              Step 3   Select Browse and choose your SSO IdP certificate.
                                              Step 4   Select Upload.

                                              Your certificate file is displayed.

                                              Step 5   Select Done to submit your certificate.

                                              Importing Secure Teleconferencing Certificates

                                              Secure teleconferencing certificates are only required if TLS conferencing is enabled. If TLS conferencing is not enabled, this option is not available.

                                              Before You Begin

                                              Secure teleconferencing certificates are required for your CUCM servers when TLS is selected as the transport type in your audio settings. See About Configuring Your Audio Settings for more information.

                                              Procedure
                                                Step 1   Sign in to the Administration site.
                                                Step 2   Select Turn On Maintenance Mode and Continue to confirm.
                                                Step 3   Select Settings > Security > Certificates.
                                                The Secure Teleconferencing Certificate section displays one of the following two messages:
                                                • This system does not require secure teleconferencing certificates because TLS teleconferencing is not enabled.
                                                • CUCM secure conferencing certificates are required for TLS teleconferencing which is enabled on this system.

                                                If secure teleconferencing certificates are required, an Import Certificate button is shown for each CUCM server that must be configured.

                                                Step 4   Select Import Certificate for CUCM 1.

                                                The Secure Teleconferencing Certificate page appears.

                                                Step 5   Enter a certificate name.
                                                Step 6   Select Browse and choose your certificate file.
                                                Note   

                                                If CUCM uses self-signed certificates, then use the CallManager.pem file. If CUCM uses third-party certificates, then use the Root Certificate Authority (CA) certificate. See "Downloading CUCM Certificates" in the Planning Guide for more details on how to download a CUCM certificate to your local hard drive.

                                                Step 7   Select Upload.

                                                After you select Upload, the system will determine if your certificate is valid.

                                                If the certificate is valid, proceed to the next step. If the certificate is invalid, you cannot upload it. You must select a valid certificate before you can continue.

                                                Step 8   Select Continue.

                                                Your system imports your SSL certificate and displays it in a scrollable certificate file dialog box. You are notified that you have imported an SSL certificate.

                                                Step 9   Select Done.
                                                Step 10   Return to step 4 and repeat the process for your CUCM 2 server.
                                                Step 11   Select Turn Off Maintenance Mode and Continue to confirm.

                                                Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


                                                Configuring User Session Security

                                                Procedure


                                                  Step 1   Sign in to the Administration site.
                                                  Step 2   Select Settings > Security > User Sessions.
                                                  Step 3   Complete the fields on the User Sessions page to set the web page expiration time.
                                                  Option Description

                                                  Web page expiration

                                                  Configure days, hours, and minutes before users are automatically signed out.

                                                  Default: One hour and 30 minutes.

                                                  Mobile or Productivity Tools expiration (SSO)

                                                  Configure days, hours, and minutes before users are automatically signed out.

                                                  Default: 14 days

                                                  Note   

                                                  This field only appears if SSO is configured.

                                                  Step 4   Select Save.

                                                  Configuring Federated Single Sign-On (SSO) Settings

                                                  Configuring SSO enables your end-users to sign into the system using their corporate credentials, thereby giving you a way to integrate the product with your corporate directory. You may also configure SSO to create or manage user accounts on the fly when users attempt to sign in.


                                                  Note


                                                  Configuring SSO can be a complex operation and we strongly recommend that you contact your Cisco Channel Partner or Cisco Advanced Services before you continue.


                                                  Before You Begin
                                                  • Before you enable the federated single sign-on feature, you must generate a set of public and private keys and an X.509 certificate that contains the public key. Once you have a public key or certificate, you must upload it in the Managing Certificates section.

                                                    Note


                                                    After you have enabled SSO, user credentials are managed by your corporate authentication system. Certain password management features no longer apply to your users. See Configuring Passwords and Editing Users for more information. Note that even though administrators are also end users, administrators do not sign in using SSO. They sign in using their administrator credentials for this product.


                                                  • Configure a SSO IdP certificate to use this feature. See Importing SSO IdP Certificates for more information.
                                                  Procedure
                                                    Step 1   Sign in to the Administration site.
                                                    Step 2   Select Settings > Security > Federated SSO.
                                                    Step 3   After you have generated public and private keys and an X.509 certificate, as described in the pre-requisites, select Continue.
                                                    Step 4   Select your initiation method:
                                                    • SP (Service Provider) Initiated–Users select a link to the service provider and are temporarily redirected to the identity provider for authentication. Users are then returned to the link they initially requested.
                                                    • IdP (Identity Provider) Initiated–Users start at their identity provider, log in, and are then redirected to a landing page at the service provider.
                                                    Step 5   Complete the fields and select your options on the SSO Configuration page:
                                                    Note    Refer to your IdP configuration file to complete the IdP fields. Select the IdP Certificate link.
                                                    Field Description

                                                    SP (Service Provider) Initiated

                                                    Select this option for service provider initiated sign in.

                                                    AuthnRequest signed

                                                    Select this option to require that the AuthnRequest message must be signed by the service provider's private key.

                                                    Note   

                                                    You must select this option if you want your exported SAML metadata file to include your site's SSL certificate.

                                                    Destination

                                                    The SAML 2.0 implementation URL of IdP that receives authentication requests for processing.

                                                    Note   

                                                    This field appears only when AuthnRequest signed is selected.

                                                    IdP (Identity Provider) Initiated

                                                    Select this option for identity provider initiated sign in.

                                                    Target page URL parameter name

                                                    Your system redirects to this URL when SSO is successful.

                                                    Default: TARGET

                                                    Note    On an IdP-initiated system, the URL must be a combined URL in the following format: your service login URL, "?" or "&," the target page URL parameter, "=" (if it is not present), and the target URL.

                                                    SAML issuer (SP ID)

                                                    Enter the same SP ID configured for IdP. Reference the SAML2 protocol.

                                                    Issuer for SAML (IdP ID)

                                                    Enter the same ID configured for IdP. Reference the SAML2 protocol.

                                                    Customer SSO service login URL

                                                    The assertion consumption URL for SAML2 in IdP.

                                                    NameID format

                                                    Select the same NameID format that you set in IdP. The NameID is the format in which you send the user ID in the assertion and single logout request from Cisco WebEx. See the SAML protocol for guidance.

                                                    We recommend that you set the email address as your NameID. Doing so will make the process of using SSO easy for end users who have already set up their accounts based on their email address on the system.

                                                    Using other NameID formats is supported but not recommended. If you use a format other than an email address,users will no longer be able to sign in to a WebEx site if SSO is disabled.

                                                    Default: Unspecified

                                                    AuthnContextClassRef

                                                    Enter the value that is configured in IdP. AuthnContextClassRef is the value that appears in the AuthnRequest message.

                                                    Default: urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified

                                                    Default Webex target page URL

                                                    Your system redirects to this URL when SSO is successful. The default page is the Cisco WebEx meeting page which is the same as a normal login.

                                                    Customer SSO error URL

                                                    Your system redirects to this URL when SSO is not successful. By default, the error page is a common Cisco WebEx error page.

                                                    Single logout

                                                    This option enables single logout which is defined by the SAML2 protocol. If you have chosen the SSO option but not the single logout option, the sign out option does not appear on end-user pages.

                                                    Deselect this option for ADFS 2.0.

                                                    Note   

                                                    IdP-Initiated SLO is not supported in this version.

                                                    Customer SSO service logout URL

                                                    Note   

                                                    This option appears only when Single logout is selected.

                                                    Enter the assertion consumption URL for SAML2 in IdP.

                                                    Auto account creation

                                                    Users without a Cisco WebEx account are unable to sign in. If you select this option, an account is automatically created for new users when they attempt to sign in.

                                                    Auto account update

                                                    If you select this option, user information is updated when there is an "updateTimeStamp" in the SAML2 assertion with more recent user information than the current data in Cisco WebEx.

                                                    Remove UID domain suffix for Active Directory UPN

                                                    Select this option to authenticate users without a domain suffix. The Remove UID domain suffix for Active Directory UPN option works in the following cases:

                                                    • The NameId format is email, and UID format is the X509 subject name or User Principal Name (UPN).
                                                    • The NameId format is the X509 subject name or UPN.
                                                    Step 6   Select Enable SSO.

                                                    The Review SSO Settings page appears. Review your settings and select Save.


                                                    Disabling SSO

                                                    Before You Begin

                                                    Disabling SSO will disable your users' ability to sign in with their company credentials. Make sure you inform your users that you are disabling SSO and that they can still sign in with their Cisco WebEx credentials.

                                                    Procedure
                                                      Step 1   Sign in to the Administration site.
                                                      Step 2   Select Settings > Security > Federated SSO.
                                                      Step 3   Find the sentence, "If you would like to disable SSO please click here." Select the click here link.
                                                      Step 4   Select Disable SSO to confirm.

                                                      The Federated SSO page appears with a banner that confirms you have disabled SSO.


                                                      Configuring Your Cloud Features

                                                      You can configure your system so that your users can use a single version of the Cisco WebEx Productivity Tools that can be used with both their Cisco WebEx Meetings Server and SaaS WebEx accounts or to view training videos hosted online by Cisco WebEx.

                                                      Note


                                                      Your system supports Cisco WebEx SaaS releases WBS27, WBS28, and Cisco WebEx Meetings 1.2.


                                                      Procedure
                                                        Step 1   Sign in to the Administration site.
                                                        Step 2   Select Settings > Security > Cloud Features.
                                                        Step 3   (Optional) Select the Enable users to sign in to SaaS WebEx accounts from WebEx Productivity Tools check box.
                                                        Step 4   Select Save.

                                                        Configuring Virtual Machine Security

                                                        Your virtual machine security features include the ability to update your encryption keys and enable or disable FIPS-compliant encryption.

                                                        Updating Your Encryption Keys

                                                        Cisco WebEx Meetings Server uses internally generated encryption keys to secure all communications between the virtual machines on your system. Use this feature to update your encryption keys periodically.

                                                        Procedure
                                                          Step 1   Sign in to the Administration site.
                                                          Step 2   Select Turn On Maintenance Mode and Continue to confirm.
                                                          Step 3   Select Settings > Security > Virtual Machines.
                                                          Step 4   Select Update Encryption Keys.
                                                          Step 5   Select Turn Off Maintenance Mode and Continue to confirm.

                                                          Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


                                                          About FIPS

                                                          The Federal Information Processing Standard (FIPS) 140 is a U.S. and Canadian government standard that specifies security requirements for cryptographic modules. A cryptographic module is a "set of hardware, software, and/or firmware that implements approved security functions (including cryptographic algorithms and key generation) and is contained within the cryptographic boundary." The cryptographic module is what is being validated.

                                                          FIPS 140 Requirements

                                                          At a very high level, the FIPS 140 requirements apply to the following module characteristics:

                                                          • Implementation of FIPS-approved algorithms
                                                          • Specific management of the key life cycle
                                                          • Approved generation of random numbers
                                                          • Self-tests of cryptographic algorithms, image integrity, and random number generators (RNGs)

                                                          Cisco WebEx Meetings Server uses CiscoSSL 2.0 to achieve FIPS 140-2 Level 2 compliance.

                                                          With FIPS Enabled

                                                          Enabling FIPS might result in reduced compatibility with popular web-browsers and operating systems. Symptoms might include, but are not limited to, problems signing into the system, 404 errors, and starting and joining meetings.

                                                          Cisco recommends that you take the following actions:

                                                          • Ensure that your Windows PCs are running at least Windows XP SP3 or above.
                                                          • Update all Windows computers to Microsoft Internet Explorer 8 or above regardless of whether your users' desired web browser is Internet Explorer, Mozilla Firefox, or Google Chrome. Your users must provide Internet Explorer 8 on all computers because our FIPS-enabled clients (Cisco WebEx Meetings, Productivity Tools, and WebEx Recording Player) use FIPS-enabled system libraries that are only available on Internet Explorer 8 and above.
                                                          • Configure Internet settings on all user computers to TLS encryption. On your PC desktop, select Control Panel > Internet Options > Advanced > Security > Use TLS 1.0 and Use TLS 1.2. We recommend selecting both options for maximum compatibility but you must at least select Use TLS 1.0.
                                                          • If your users plan to host meetings for guests (for example, people who do not work for your company) you must inform your guest users to manually update their operating systems and browsers as described above before they join your meetings. If they do not perform the above steps, they might experience compatibility issues. We recommend that you include the above instructions in your meeting invitations. You can do this by editing the appropriate meeting invitations available on your Administration site at Settings > Email > Templates.

                                                          Enabling FIPS Compliant Encryption

                                                          Use this feature to enable your Federal Information Processing Standard (FIPS) compliant encryption setting.

                                                          Procedure
                                                            Step 1   Sign in to the Administration site.
                                                            Step 2   Select Turn On Maintenance Mode and Continue to confirm.
                                                            Step 3   Select Settings > Security > Virtual Machines.
                                                            Step 4   Select Enable to enable FIPS compliant encryption and Continue to confirm.

                                                            FIPS compliant encryption is configured on your system.

                                                            Step 5   Select Turn Off Maintenance Mode and Continue to confirm.

                                                            Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.


                                                            Disabling FIPS Compliant Encryption

                                                            Use this feature to disable Federal Information Processing Standard (FIPS) compliant encryption on your system.

                                                            Procedure
                                                              Step 1   Sign in to the Administration site.
                                                              Step 2   Select Turn On Maintenance Mode and Continue to confirm.
                                                              Step 3   Select Settings > Security > Virtual Machines.
                                                              Step 4   Select Disable to disable FIPS compliant encryption and Continue to confirm.

                                                              FIPS compliant encryption is disabled on your system.

                                                              Step 5   Select Turn Off Maintenance Mode and Continue to confirm.

                                                              Your system restarts when you turn off maintenance mode. You can sign back into the Administration site after restart is complete.