Cisco Unity Connection - Restricted and Unrestricted Version
This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute, or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws.
Cisco Unity Connection provides two versions of the Connection software - restricted and unrestricted that address import requirements for some countries related to encryption of user data. Restricted version of the Cisco Unity Connection allows you to enable the encryption on the product to use the below given security modules whereas in Unrestricted version, you are not allowed to use the security modules
Functionality | Restricted Version of Connection | Unrestricted Version of Connection |
---|---|---|
SSL for IMAP connections used to access voice messages | Allowed | Disallowed |
Secure SCCP, SIP, and SRTP for call signaling and media | Allowed | Disallowed |
Communications among networked Connection servers or clusters (over secure MIME) | Allowed | Disallowed |
SSL for Comet notification (Jetty SSL command) | Allowed | Disallowed |
Caution |
With restricted and unrestricted versions of Connection software available, download software or order a DVD. Upgrading a restricted version to an unrestricted version is supported, but future upgrades are then limited to unrestricted versions. Upgrading an unrestricted version to a restricted version is not supported. |
With Unity Connection 11.5(1) Service Update 3 and later, by default the encryption is disabled for the Restricted version of the product in Demo mode. Hence you are not allowed to use the above security modules with Restricted version of Unity Connection until you install the Encryption license $0 ENC SKU on Prime License Manager. The $0 ENC SKU license enables the Export Controlled Functionality for Cisco Unity Connection.
Note |
Prime License Manager server must be 11.5(1) SU3 and later to install the Encryption license. |
When you are upgrading Cisco Unity Connection from any earlier releases to 11.5(1) SU3 and later, you get the following behavior of encryption on Cisco Unity Connection:
Upgrade Path | Cluster Mode before Upgrade | License Status before Upgrade | License Status after Upgrade | Action |
---|---|---|---|---|
Pre-9.x to 11.5(1) SU3 | Secure | Licensed | Demo |
Cisco Unity Connection continues to run in secure mode. If Unity Connection is not connected with PLM or Encryption license is not installed on PLM for 60 days, system will generate an alarm on RTMT. |
9.x, 10.x to 11.5(1) SU3 | Secure | Demo | Demo |
Cisco Unity Connection continues to run in secure mode. If Unity Connection is not connected with PLM or Encryption license is not installed on PLM for 60 days, system will generate an alarm on RTMT. |
PLM Licensed | Violation |
Cisco Unity Connection continues to run in secure mode. However, system will generate an alarm on RTMT. When licenses are migrated to upgraded release and Unity Connection connects with PLM server, occurrence of alarm will stop. |
Note |
With release 11.5(1) SU3 onwards, upgrade from 11.5(1) SU3 to 11.5(1) SU3 and later will have the existing encryption status of the system after upgrade. |
For more information on the licenses, see "Managing Licenses" chapter of Install, Upgrade and Maintenance Guide for Cisco Unity Connection 11.x available at https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/11x/install_upgrade/guide/b_11xcuciumg.html.
To enable or disable the encryption on Cisco Unity Connection Restricted version, a new CLI command "utils cuc encryption <enable/disable>" is introduced in Unity Connection 11.5(1) SU3 and later.
For more information on the CLI, see the Command Line Interface Reference Guide for Cisco Unified Solutions for the latest release, available at http://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-callmanager/products-maintenance-guides-list.html