Cisco Unity Installation Guide (With Microsoft Exchange), Release 4.0(2)
Customizing the Cisco Unity Platform

Table Of Contents

Customizing the Cisco Unity Platform

Setting Security-Monitoring Software Before Running the Installation Programs

Disabling Virus-Scanning Services

Setting the IDS Host Sensor Agent to Run in On-Warning Mode

Running the Cisco Unity System Preparation Assistant

Installing Administration Software for MSDE 2000 and Setting the MSDE System Administrator Password

Connecting the Cisco Unity Server to the Network

Configuring Dual NICs in the Cisco Unity Server

Assigning a Static IP Address or Reserving an IP Address in DHCP

Verifying the IP Address and the Network Connection

Changing Folder Settings in Windows Explorer

Installing Active Directory or Adding the Cisco Unity Server to an Existing Domain

Active Directory

Existing Domain

Resetting the Account That SQL Server Services Log On As


Customizing the Cisco Unity Platform


In this chapter, you do the following tasks in the order listed:

1. If virus-scanning software or the Cisco IDS Host Sensor Agent is installed on the Cisco Unity server: Disable virus-scanning services and set the IDS Host Sensor Agent to run in On-Warning mode. See the "Setting Security-Monitoring Software Before Running the Installation Programs" section.

2. Use the Cisco Unity System Preparation Assistant to install required Windows components, the browser and database, and required service packs. See the "Running the Cisco Unity System Preparation Assistant" section.

3. If the system is using MSDE 2000: Install Enterprise Manager, and set the MSDE system administrator password. See the "Installing Administration Software for MSDE 2000 and Setting the MSDE System Administrator Password" section.

4. Connect the Cisco Unity server to the network. See the "Connecting the Cisco Unity Server to the Network" section.


Note Cisco ICS 7750: If you are installing Cisco Unity in the Cisco ICS 7750, skip Task 5.


5. If the Cisco Unity server contains dual NICs: Configure the dual NICs or verify their configuration. See the "Configuring Dual NICs in the Cisco Unity Server" section.


Note Cisco ICS 7750: If you are installing Cisco Unity in the Cisco ICS 7750, skip Task 6.


6. If the system has a network connection: If you did not assign a static IP address while installing Windows 2000 Server, assign one now or reserve an address in DHCP. See the "Assigning a Static IP Address or Reserving an IP Address in DHCP" section.


Note Cisco ICS 7750: If you are installing Cisco Unity in the Cisco ICS 7750, skip Task 7.


7. If the system has a network connection: Confirm that the server has a valid IP address and is connected to the network. See the "Verifying the IP Address and the Network Connection" section.

8. Change folder settings in Windows Explorer so all files and folders are visible during Cisco Unity troubleshooting. See the "Changing Folder Settings in Windows Explorer" section.

9. Install Microsoft Active Directory, or add the Cisco Unity server to an existing domain. See the "Installing Active Directory or Adding the Cisco Unity Server to an Existing Domain" section.


Note Cisco ICS 7750: If you are installing Cisco Unity in the Cisco ICS 7750, skip Task 10.


10. If the system is using failover: Reset the accounts that SQL Server services log on as. See the "Resetting the Account That SQL Server Services Log On As" section.

When you are finished with this chapter, return to the applicable task list for your platform type to continue installing the Cisco Unity system correctly:

Task List for Installing Cisco Unity on a Qualified Server

Task List for Installing Cisco Unity in the Cisco ICS 7750


Note The tasks in the list reference detailed instructions in the Cisco Unity Installation Guide and in other Cisco Unity documentation. Follow the documentation for a successful installation.


Setting Security-Monitoring Software Before Running the Installation Programs

Before you run the programs that prepare the system and install the Cisco Unity software, you set security-monitoring programs so they do not interfere with the installation programs. See the applicable sections:

Disabling Virus-Scanning Services

Setting the IDS Host Sensor Agent to Run in On-Warning Mode

Note that for new installations, you do not install third-party applications such as virus-scanning software or Cisco Unity IDS Host Sensor software until later in the installation. The Cisco Unity Installation Guide alerts you when to install such software.

Disabling Virus-Scanning Services

You disable any virus-scanning services on the Cisco Unity server because running them during the installation process may slow down the installation programs or even prevent them from running.

The Cisco Unity Installation Guide alerts you when to re-enable the virus-scanning services later in the installation process.

To disable virus-scanning services


Step 1 Refer to the virus-scanning software documentation to determine the names of the virus-scanning services.

Step 2 On the Windows Start menu, click Programs > Administrative Tools > Services.

Step 3 Disable each virus-scanning service:

a. In the right pane, double-click the service.

b. Click the General tab, and click Stop.

c. In the Startup Type list, click Disabled and click OK.

Step 4 When all virus-scanning services have been disabled, close the Services MMC.


Setting the IDS Host Sensor Agent to Run in On-Warning Mode

You disable the IDS Host Sensor Agent on the Cisco Unity server by setting it to run in On-Warning mode. If the IDS Host Sensor Agent is running in On-Protecting mode during the installation, the agent will prevent files from being copied to the Cisco Unity server, and the installation will fail.

The Cisco Unity Installation Guide alerts you when to reset the IDS Host Sensor Agent to run in On-Protecting mode later in the installation process.

To set the IDS Host Sensor Agent to run in On-Warning mode


Step 1 On the server where the IDS Host Console is installed, on the Windows Start menu, click Programs > Cisco HIDS > Cisco HIDS Console.

Step 2 In the left pane of the Console, click Agents. The Agents view appears in the right pane.

Step 3 In the right pane, right-click the name of the IDS Host Sensor Agent on the Cisco Unity server, and click Set to Warning Mode. Note that it may take several minutes for the Current State to match the Requested State.


Running the Cisco Unity System Preparation Assistant

The Cisco Unity System Preparation Assistant is a program that helps customize the platform for Cisco Unity by checking for and installing the following required Windows components, browser, database, and service packs:

MSXML 3.0 with Service Pack 1

Internet Information Services (IIS)

Windows Terminal Services

NNTP Service

SMTP Service

Message Queuing Services version 2.0

Windows 2000 Service Pack 3

Internet Explorer 6.0 with Service Pack 1

SQL Server 2000 Service Pack 3 or MSDE 2000 Service Pack 3


Note To install missing components, the assistant requires the Service Packs and Data Store compact discs that are shipped with Cisco Unity.


To run the Cisco Unity System Preparation Assistant


Step 1 Log on to Windows by using an account that is a member of the Local Administrators group.

Step 2 On Cisco Unity Service Packs CD 1, or from the location to which you saved the downloaded Cisco Unity Service Packs CD 1 image files, browse to the Cuspa directory, and double-click Cuspa.vbs.

Step 3 If prompted, double-click the language of your choice to continue the installation.

Step 4 On the Welcome screen, click Next.

Step 5 On the Cisco Unity Server Characteristics page, set the following fields:

Configuration

Click Unified Messaging or Voice Messaging Only, depending on the Cisco Unity configuration.

Failover

Check the This Is a Primary or Secondary Failover Server check box if the system is using failover.

The assistant uses the information to determine if the system requires SQL Server or MSDE. If the system is using failover, SQL Server is required.

Number of Ports

Enter the number of voice ports that you are connecting with the Cisco Unity server.

If the system is not using failover, the assistant uses the information to determine if the system requires SQL Server or MSDE. For systems with more than 32 ports, SQL Server is required. Otherwise, MSDE is required.


Step 6 Click Next. The assistant lists the components and indicates whether or not they are installed.

Step 7 Follow the prompts to install any missing components until you are prompted to install the data store.


Note If a Microsoft AutoMenu window appears when the assistant is installing an application, close the window and allow the assistant to continue.


Step 8 If MSDE is being installed, skip to Step 9.

If SQL Server is being installed, do the following 21 substeps:


Note Install SQL Server in the location you made note of in the "Determining the Drive Locations for Files on the Cisco Unity System" section.


a. In the Welcome dialog box, click Next.

b. In the Computer Name dialog box, click Next to accept the default setting Local Computer.

c. In the Installation Selection dialog box, click Next to accept the default setting Create a New Instance of SQL Server, or Install Client Tools.

d. Follow the on-screen prompts until the CD Key dialog box appears.

e. Enter the key for Cisco Unity Data Store 2000 from the Cisco Unity Software Keys booklet that ships with the software discs, and click Next.

f. In the Installation Definition dialog box, click Next to accept the default setting Server and Client Tools.

g. In the Instance Name dialog box, check the Default check box.

h. Click Next.

i. In the Setup Type dialog box, click Next to accept the default setting Typical.

j. At the top of the Services Accounts dialog box, click Use the Same Account for Each Service.

k. Under Service Settings, click Use the Local System Account.

l. Click Next.

m. In the Authentication Mode dialog box, we recommend that you click Windows Authentication Mode.

If you click Mixed Mode—which is supported but is less secure—under Add Password for the SA Login, enter and confirm a password for the SQL Server system administrator logon.

n. Click Next.

o. In the Start Copying Files dialog box, click Next.

p. In the Choose Licensing Mode dialog box, click Processor License For, and specify the number of processors in the Cisco Unity server.

q. Click Continue.

r. If you are prompted about shutdown tasks before continuing with the installation, click Next.

s. Click Finish.

t. Skip to Step 10.

Step 9 If MSDE is being installed, do the following two substeps:

a. Follow the on-screen prompts.

b. When the installation is complete, click Yes to restart the server.

Step 10 When SQL Server or MSDE installation is complete, continue following the on-screen prompts in the assistant to complete the platform customization.

Step 11 If MSDE Service Pack 3 is being installed, skip to Step 12.

If SQL Server Service Pack 3 is being installed, do the following 11 substeps:

a. On the Welcome screen, click Next.

b. Follow the on-screen prompts until you are prompted to choose the authentication mode.

c. Select Windows authentication, and click Next.

d. If the SA Password Warning dialog box appears, enter and confirm the password, and click Next.

e. Check the Upgrade Microsoft Search and Apply SQL Server 2000 SP3[required] check box, and click Continue. (Do not check the Enable Cross-Database Ownership Chaining for All Databases [Not Recommended] check box.)

f. Follow the on-screen prompts to continue.

g. If you are prompted about shutdown tasks before continuing with the installation, click Next.

h. Click Finish to begin installing components.

i. When the Setup message appears, click OK.

j. Click Finish to restart the server.

k. Skip to Step 13.

Step 12 If MSDE Service Pack 3 is being installed, do the following two substeps:

a. Follow the on-screen prompts.

b. When the installation is complete, click Yes to restart the server.

Step 13 When the Cisco Unity System Preparation Assistant has completed, click Finish.


Caution When Internet Explorer was installed, the file WScript.exe was installed automatically. Do not remove WScript.exe, or the Cisco Unity Setup program will fail later in the installation process.


For the manual procedures for installing the required Windows components, browser, database, and service packs during a new installation, see "Manual Installation Procedures for Software Installed by the Cisco Unity System Preparation Assistant During a New Installation."

Installing Administration Software for MSDE 2000 and Setting the MSDE System Administrator Password

When the Cisco Unity System Preparation Assistant installs MSDE 2000, it does not include administration software. You install Enterprise Manager administration software so that Cisco TAC can access the Cisco Unity MSDE databases during troubleshooting.

For security reasons, Cisco highly recommends that you set a non-blank MSDE system administrator (sa) password. By default, the sa password is blank. After you install Enterprise Manager, you can use it to reset the sa password.

Do the following two procedures in the order listed.

To install Enterprise Manager


Step 1 After the server restarts, log on to Windows.

Step 2 If the Cisco Unity Data Store 2000 compact disc does not run automatically, browse to the root directory, and double-click Autorun.exe.

Step 3 Click SQL Server 2000 Components.

Step 4 Click Install Database Server.

Step 5 In the Welcome dialog box, click Next.

Step 6 In the Computer Name dialog box, click Next to accept the default setting Local Computer.

Step 7 In the Installation Selection dialog box, click Next to accept the default setting Create a New Instance of SQL Server, or Install Client Tools.

Step 8 Follow the on-screen prompts until the CD Key dialog box appears.

Step 9 Enter the key for Cisco Unity Data Store 2000 from the Cisco Unity Software Keys booklet that ships with the software discs.

Step 10 Click Next.

Step 11 In the Installation Definition dialog box, click Client Tools Only.

Step 12 Click Next.

Step 13 In the Select Components dialog box, uncheck all check boxes in the Components list except Management Tools.

Step 14 Select Management Tools (but do not uncheck the check box).

Step 15 In the Sub-Components list, uncheck all check boxes except Enterprise Manager, and click Next.

Step 16 In the Start Copying Files dialog box, click Next.

Step 17 Click Finish.


To set the sa password for MSDE


Step 1 On the Windows Start menu, click Programs > Microsoft SQL Server > Enterprise Manager.

Step 2 In the Tree, expand Console Root\Microsoft SQL Servers\SQL Server Group\
(local)(Windows NT)\Security.

Step 3 Click Logins.

Step 4 In the right pane, right-click sa, and click Properties.

Step 5 In the SQL Server Login Properties dialog box, click the General tab.

Step 6 Under SQL Server Authentication, enter the new password.

Step 7 Confirm the password, and click OK.

Step 8 Close Enterprise Manager.


Connecting the Cisco Unity Server to the Network

To connect the Cisco Unity server to the network


Attach the network cable(s) to the Cisco Unity server.


Configuring Dual NICs in the Cisco Unity Server

If the Cisco Unity server is using dual NICs, Cisco recommends that they be configured in adaptive fault tolerant mode (AFT) or network fault tolerant (NFT) mode. One NIC is designated as the primary and the other NIC as the secondary for active-passive fault tolerance. In this configuration, the primary (active) NIC handles 100 percent of the traffic. Only in the event that the primary NIC becomes unavailable does the secondary NIC then become active and handle 100 percent of the traffic.

Alternatively, if you do not want to configure AFT or NFT, or do not have a second LAN port available, the following configurations are supported, though not recommended:

Disable TCP/IP for the second NIC, which allows you to re-enable the second NIC remotely if the first NIC fails. (Use the Network and Dial-up Connections Control Panel to disable TCP/IP for the second NIC.)

Disable the second NIC in the BIOS.


Caution Note that not plugging a network cable into the second NIC is not sufficient. The NIC must be disabled in the BIOS, or Cisco Unity may not work properly.

To configure dual NICs in the Cisco Unity server


Step 1 Configure the NICs—or verify their configuration—so that:

Both are connected to the same network segment.

Both share the same IP address.

Both are set up for AFT when using a Dell or IBM server, or for NFT when using a Hewlett-Packard server. (Refer to the documentation provided by the NIC manufacturer or server vendor.)

Step 2 Restart the Cisco Unity server for any changes to take effect.


Assigning a Static IP Address or Reserving an IP Address in DHCP

The Cisco Unity server must have an IP address. If you installed the operating system by using the Platform Configuration discs that are shipped with a Cisco Unity server purchased from Cisco and you connected the server to a network that has a Dynamic Host Configuration Protocol (DHCP) server, the Cisco Unity server is configured to automatically obtain an IP address from the DHCP server. Cisco strongly recommends that you change this configuration in one of the following ways:

Assign the Cisco Unity server a static IP address by using the procedure "To assign a static IP address" in this section.

Reserve an IP address in DHCP. For information, refer to Windows Help.

When selecting an IP address for the Cisco Unity server, note the following considerations:

Do not select an address accessible from the Internet. Doing so can expose the Cisco Unity server to unwanted intrusion from the Internet, even when the server is hardened.

Do not select an address that puts the Cisco Unity server on the opposite side of a firewall from:

The Exchange server that Cisco Unity connects with.

Any Exchange server that homes Cisco Unity subscribers.

The domain controller/global catalog server that Cisco Unity accesses, if the Cisco Unity server is not a domain controller.

To assign a static IP address


Step 1 On the Windows Start menu, click Settings > Control Panel > Network and Dial-Up Connections > Local Area Connection.

Step 2 Click Properties.

Step 3 In the Components Checked Are Used by This Connection list, check the Internet Protocol (TCP/IP) check box.

Step 4 Click Internet Protocol (TCP/IP) (but do not uncheck the check box), and click Properties.

Step 5 Enter applicable values. For more information, refer to Windows 2000 Help.

Step 6 Click OK.

Step 7 Restart the server.


Verifying the IP Address and the Network Connection

Whether you assigned a static IP address or reserved an address in DHCP, verify the IP address and the network connection.

To verify the IP address and the network connection


Step 1 On the Windows Start menu, click Programs > Accessories > Command Prompt.

Step 2 In the Command Prompt window, enter ipconfig /all, and press Enter.

Step 3 Verify the IP address of the Cisco Unity server.

Step 4 Find the IP address of a router or server on the same network segment as the Cisco Unity server.

If no routers or servers are listed, either you did not specify a default gateway when you assigned a static IP address in the "Assigning a Static IP Address or Reserving an IP Address in DHCP" section, or the Cisco Unity server is not connected to the network.

Step 5 Ping the router or other server whose IP address you found in Step 4. In the Command Prompt window, enter ping <IP address>, and press Enter.

If the device sends a reply, the Cisco Unity server has a valid IP address.

If the device does not reply, there may be a variety of causes. Some of the most common problems include:

The assigned static IP address or the address reserved in DHCP conflicts with the IP address of another computer on the network.

For a static IP address, the subnet mask is incorrect.

The Cisco Unity server has a problem contacting the DHCP server.

Verify the network settings. If needed, troubleshoot any problem as you would a network connectivity problem.


Changing Folder Settings in Windows Explorer

You change folder settings so that all files and folders—including system files—are visible in Windows Explorer during Cisco Unity troubleshooting.

If you installed Windows 2000 from the Platform Configuration discs that are shipped with a Cisco Unity server purchased from Cisco, all files and folders are already visible in Windows Explorer.


Note If you do not do the following procedure now, Cisco TAC may ask you to do it later.


To change folder settings in Windows Explorer


Step 1 On the Windows desktop, double-click My Computer.

Step 2 On the Tools menu, click Folder Options.

Step 3 Click the View tab.

Step 4 Click Show Hidden Files and Folders.

Step 5 Uncheck the Hide File Extensions for Known File Types check box.

Step 6 Uncheck the Hide Protected Operating System Files check box, and click Yes to confirm.

Step 7 Click Apply.

Step 8 Click Like Current Folder, and click Yes to confirm.

Step 9 Click OK.


Installing Active Directory or Adding the Cisco Unity Server to an Existing Domain

The Cisco Unity server must be either a member server in an existing domain or a domain controller in its own domain. Cisco Unity interactions with the message store do not allow the server to be in a workgroup.

This section contains procedures for installing Active Directory and adding the Cisco Unity server as a member server in an existing domain. Do the procedure that is applicable to your installation. The message store does not support workgroups, so you must do one procedure or the other.

If the system is using failover, add both the primary and the secondary Cisco Unity servers to the same existing domain. Do not install Active Directory on either server.


Caution If the Cisco Unity server will be the only server in the domain, you must install Active Directory. However, because Active Directory is a very processor- and memory-intensive application, if you are adding the Cisco Unity server to an existing domain, we strongly recommend that you do not also install Active Directory on the Cisco Unity server. Instead, do the procedure in the "Existing Domain" section.

Active Directory

If you are setting up failover, do the procedure in the "Existing Domain" section instead.


Caution If the system is using failover, do not install Active Directory on either Cisco Unity server.

To install Active Directory


Step 1 On the Windows Start menu, click Run, then enter Dcpromo, and press Enter.

Step 2 Click Next.

Step 3 Follow the on-screen prompts until the Permissions dialog box appears.

If the system has no network connection, follow the on-screen prompts and use the values in Table 5-1.

For other configurations, consult the system administrator to determine how to set up the server.

Table 5-1 Values If the System Has No Network Connection 

Dialog Box Name
Value

Domain Controller Type

Domain Controller for a New Domain

Create Tree or Child Domain

Create a New Domain Tree

Create or Join Forest

Create a New Forest of Domain Trees

New Domain Name

Consult the system administrator.

NetBIOS Domain Name

Consult the system administrator.

Database and Log Locations

If possible, choose separate hard disks for the database and the logs. This was the old wording.

Shared System Volume

Consult the system administrator.


Step 4 Click Next.

Step 5 Enter and confirm a password.

Step 6 Click Next.

Step 7 Review the settings, and click Next to install Active Directory.

Step 8 Click Finish.

Step 9 Click Restart Now.


Existing Domain

Do the following procedure to add the Cisco Unity server to an existing domain without making it an additional domain controller in that domain.


Note We recommend that you install the Cisco Unity server in the same domain as the Exchange server that homes the Cisco Unity subscribers.


If the system has no network connection, do the procedure in the "Active Directory" section instead.

To add the Cisco Unity server to an existing domain


Step 1 On the Windows Start menu, click Settings > Control Panel > System.

Step 2 Click the Network Identification tab.

Step 3 Click Properties.

Step 4 In the Identification Changes dialog box, click Domain, and enter the name of the domain that you want to join.

If you are setting up failover, add both Cisco Unity servers to the same domain.

Step 5 Click OK.

Step 6 In the Domain Username and Password dialog box, enter the name and password of an account that has permission to add computers to the domain.

Step 7 Click OK three times.

Step 8 Click Yes to restart the server.


Resetting the Account That SQL Server Services Log On As

If you are installing a primary or secondary server for Cisco Unity failover, you must reset the account that the MSSQLServer and SQLServerAgent services log on as. The account must be a domain account and must:

Have the right to log on as a service.

Be a member of the Administrators local group.

When you installed SQL Server, you set the services to use the local system account because the Cisco Unity server was not connected to the network.

To reset the account that MSSQLServer and SQLServerAgent log on as


Step 1 On the Windows Start menu, click Programs > Administrative Tools > Services.

Step 2 Do the following eight substeps for each of the two services, MSSQLSERVER and SQLSERVERAGENT:

a. In the right pane, double-click <Name of service>.

b. Click the Log On tab.

c. Click This Account.

d. Click Browse.

e. In the Select User dialog box, in the Look In list, click the name of the domain to which the Cisco Unity server belongs.

f. Double-click the name of the account to use. You must use the same account on both the primary and secondary Cisco Unity servers.

g. Enter and confirm the password.

h. Click OK.

Step 3 When you are done setting both accounts, close the Services window.