Table Of Contents
Installing and Configuring Cisco Unity Software
Determining Whether to Set Up Cisco Unity to Use SSL
Installing the Microsoft Certificate Services Component
Installing and Configuring Cisco Unity Software
Starting the Cisco Unity Installation and Configuration Assistant and Installing Cisco Unity Software
Installing License Files
Configuring Services
Configuring Cisco Unity for the Message Store
Integrating the Phone System with Cisco Unity
Setting Up the Cisco Personal Communications Assistant to Use SSL
Skipping Cisco PCA Setup for SSL
Setting Up the Cisco PCA to Use SSL by Creating a Local Certificate Without a Certificate Authority
Setting Up the Cisco PCA to Use SSL by Using a Certificate Authority
Installing Cisco Unity 4.0(3) Service Release 1
Installing the Microsoft Updates Recommended for Use With Cisco Unity
Testing the Phone System Integration
Excluding from Virus Scanning the Directory in Which Cisco Unity Is Installed
Setting Up the Cisco Unity Administrator and Status Monitor to Use SSL
Securing the Example Administrator Account Against Toll Fraud
Moving the Data Store Databases and Transaction Log Files
Adding the /3GB Switch to Boot.ini
Re-enabling Virus-Scanning and Cisco Security Agent Services
Installing and Configuring Cisco Unity Software
In this chapter, you do the following tasks in the order listed:
1. 
Determine whether to set up Cisco Unity to use SSL. See the "Determining Whether to Set Up Cisco Unity to Use SSL" section.
2. If you plan to set up Cisco Unity to use SSL and want to use the Microsoft Certificate Services available with Windows to issue your own certificate: Install the Microsoft Certificate Services component. See the "Installing the Microsoft Certificate Services Component" section.
3. Use the Cisco Unity Installation and Configuration Assistant to install and configure Cisco Unity, and to set up the Cisco Personal Communications Assistant to use SSL. See the "Installing and Configuring Cisco Unity Software" section.
4. Install Cisco Unity 4.0(3) Service Release 1. See the "Installing Cisco Unity 4.0(3) Service Release 1" section.
5. Install the Microsoft updates recommended for use with Cisco Unity. See the "Installing the Microsoft Updates Recommended for Use With Cisco Unity" section.
6. Test the phone system integration. See the "Testing the Phone System Integration" section.
7. If virus-scanning software is installed on the Cisco Unity server: Exclude from scanning the directory in which Cisco Unity is installed. See the "Excluding from Virus Scanning the Directory in Which Cisco Unity Is Installed" section.
8. If you are setting up Cisco Unity to use SSL: Set up the Cisco Unity Administrator and Status Monitor to use SSL. See the "Setting Up the Cisco Unity Administrator and Status Monitor to Use SSL" section.
9. Secure the Example Administrator account against toll fraud. See the "Securing the Example Administrator Account Against Toll Fraud" section.
10. Move SQL Server or MSDE database files and transaction logs. See the "Moving the Data Store Databases and Transaction Log Files" section.
11. If Windows 2000 Advanced Server is installed on the Cisco Unity server: Add the /3GB switch to the Boot.ini file to improve Cisco Unity performance. See the "Adding the /3GB Switch to Boot.ini" section.
12. If virus-scanning software or Cisco Security Agent for Cisco Unity is installed on the Cisco Unity server: Re-enable virus-scanning services and the Cisco Security Agent service for Cisco Unity. See the "Re-enabling Virus-Scanning and Cisco Security Agent Services" section.
When you are finished with this chapter, return to "Overview of Mandatory Tasks for Installing Cisco Unity" to continue installing the Cisco Unity system.
Note The tasks in the list reference detailed instructions in the Cisco Unity Installation Guide and in other Cisco Unity documentation. Follow the documentation for a successful installation.
Determining Whether to Set Up Cisco Unity to Use SSL
When subscribers log on to the Cisco Personal Communications Assistant (PCA), their credentials are sent across the network to Cisco Unity in clear text. The same is true when the Cisco Unity Administrator and the Status Monitor are configured to use the Anonymous authentication method. In addition, the information that subscribers enter on the pages of the Cisco PCA and of the Cisco Unity Administrator (regardless of which authentication method it uses) is not encrypted.
For increased security, we recommend that you set up Cisco Unity to use the Secure Sockets Layer (SSL) protocol. SSL uses public-key encryption to provide a secure connection between servers and clients, and uses digital certificates to authenticate servers or servers and clients. (A digital certificate is a file that contains encrypted data that attests to the identity of an organization or entity, such as a computer.)
Using the SSL protocol ensures that all Cisco Unity subscriber credentials—as well as the information that a subscriber enters on any page of the Cisco Unity Administrator and the Cisco PCA—are encrypted as the data is sent across the network. In addition, when you set up Cisco Unity to use SSL, each time that a subscriber tries to access any Cisco Unity web application, the browser will confirm that it is connected with the real Cisco Unity server—and not an entity falsely posing as such—before allowing the subscriber to log on.
To set up a web server such as Cisco Unity to use SSL, you can either obtain a digital certificate from a Certificate Authority (CA) or use the Microsoft Certificate Services application available with Windows to create a local certificate without a certificate authority. (A CA is a trusted organization or entity that issues and manages certificates at the request of another organization or entity.) Cost, certificate features, ease of setup and maintenance, and the security policies practiced by the organization are some of the issues to consider when determining whether you should purchase a certificate from a CA or issue your own.
Information on third-party CAs, the Microsoft Certificate Services application, and SSL is widely available on the Internet, as well as in the Windows and IIS online documentation. Such sources can help you determine whether to use SSL and how to set up a web server to use it.
Installing the Microsoft Certificate Services Component
Note If you do not plan to set up Cisco Unity to use SSL or if you want to use a digital certificate from a Certificate Authority to set up Cisco Unity to use SSL, skip this section.
Do the procedure in this section if you plan to set up Cisco Unity to use SSL and want to use the Microsoft Certificate Services available with Windows to issue your own certificate. You may install the component on the Cisco Unity server or on another server.
To Install the Microsoft Certificate Services Component
Step 1 On the server that will act as your Certificate Authority (CA) and issue certificates, on the Windows Start menu, click Settings > Control Panel > Add/Remove Programs.
Step 2 Click Add/Remove Windows Components.
Step 3 In the Windows Components dialog box, check the Certificate Services check box. Do not change any other items. When the warning appears about not being able to rename the computer, or to join or be removed from a domain, click Yes.
Step 4 Click Next.
Step 5 Click Stand-alone Root CA, and click Next. (A stand-alone CA is a CA that does not require Active Directory.)
Step 6 Follow the on-screen prompts to complete the installation. For information, refer to the Windows documentation.
If a message appears that Internet Information Services is running on the computer and must be stopped before proceeding, click OK to stop the service.
Step 7 In the Completing the Windows Components Wizard dialog box, click Finish.
Step 8 Close the Add Remove Programs dialog box and Control Panel.
Installing and Configuring Cisco Unity Software
To install and configure Cisco Unity software, you use the Cisco Unity Installation and Configuration Assistant to run six programs in a specific order. The programs:
•Check the system and install the Cisco Unity software.
•Install the Cisco Unity licenses.
•Configure the Cisco Unity services.
•Configure Cisco Unity for the message store.
•Integrate Cisco Unity with the phone system.
•Configure the Cisco Personal Communications Assistant to use SSL.
Do the following six subsections in the order listed.
Starting the Cisco Unity Installation and Configuration Assistant and Installing Cisco Unity Software
From the Cisco Unity Installation and Configuration Assistant, you run the Cisco Unity Setup program first to install Cisco Unity. The Setup program checks the system, then installs the Cisco Unity software.
Caution Do not install Cisco Unity remotely by using Windows Terminal Services or other remote-access applications, or the installation may fail.
Caution Do not install features for which the system is not licensed, or Cisco Unity will shut down.
To Start the Assistant and Install the Cisco Unity Software
Step 1 Log on to Windows by using the Cisco Unity installation account.
Caution If you have not already done so, disable virus-scanning and Cisco Security Agent services on the server, if applicable. Otherwise, the installation may fail.
Step 2 On Cisco Unity DVD 1 or CD 1, or from the location to which you saved the downloaded Cisco Unity CD 1 image file, browse to the root directory and double-click Setup.exe.
Step 3 If prompted, double-click the language of your choice to continue the installation.
Step 4 On the Cisco Unity Installation and Configuration Assistant Welcome screen, click Continue.
If the Pre-Installation Requirements screen appears, saying that you need to run the Permissions wizard, close the Cisco Unity Installation and Configuration Assistant and see the "Setting Rights and Permissions with the Cisco Unity Permissions Wizard" section. Then log on to Windows by using the Cisco Unity installation account, and return to Step 2.
Step 5 Click Run the Cisco Unity Setup Program.
Step 6 If prompted, double-click the language of your choice to continue the installation.
Step 7 On the Welcome screen, click Next.
Step 8 Enter your name and the company name, and click Next.
Step 9 Specify locations for the Cisco Unity application, trace logs, and Unity Messaging Repository (UMR) files. Use the locations you made note of in the "Determining the Drive Locations for Files on the Cisco Unity System" section.
Step 10 Click Next.
Step 11 In the Select Features dialog box:
a. Check the Install Cisco Unity check box.
b. If the Cisco Unity license includes text to speech, check the Enable TTS check box.
If not, uncheck the Enable TTS check box.
c. If the Cisco Unity server or an attached expansion chassis contains Intel Dialogic voice cards, check the Install Voice Card Software check box.
If not, uncheck the Install Voice Card Software check box.
Step 12 Click Next.
Step 13 Choose the prompt set to install. Use the G.729a system prompt set if voice messages will be recorded and stored in G.729a format. Otherwise, use G.711 (the default).
Note that choosing a system prompt set does not change the default message recording and storage codec. If necessary, you can change the message recording and storage codec later in the installation process.
Step 14 Click Next.
Step 15 In the Cisco Unity Languages dialog box, choose the language(s) to install, and click Next.
If you installed Windows 2000 Server by using the manufacturer's guided system-setup utility and a retail Windows 2000 Server disc, one of the languages you choose here must match the locale you specified when you installed Windows 2000 Server.
Caution If the locale you specified when you installed Windows 2000 Server does not match any of the installed Cisco Unity languages, Cisco Unity will log errors in the event log and may stop taking calls. The language you choose here must exactly match the locale you selected when you installed Windows 2000 Server. For example, if you chose English (United Kingdom) for locale, you must also choose English (United Kingdom) as one of the Cisco Unity languages. English (Australia) will not work.
If you installed Windows 2000 Server by using the Platform Configuration discs that are shipped with the Cisco Unity server, the locale is automatically set to English (United States). The Cisco Unity Setup program always installs English (United States), so you do not need to choose it as one of the languages to install.
Note that if the system will be using text to speech (TTS) and will be using English (Australia) or English (New Zealand) as the phone language, also install English (United States) or English (United Kingdom) for the TTS language.
Step 16 Set the system-default languages for the phone, graphical user interface (GUI), and TTS, and click Next.
Step 17 Follow the on-screen prompts until you are prompted to restart the Cisco Unity server.
Step 18 The remainder of the procedure depends on whether the server contains Intel Dialogic D/120JCT-Euro or D/240PCI-T1 voice cards:
If the server does not contain
Intel Dialogic D/120JCT-EURO
or D/240PCI-T1 voice cards
|
Check the Yes, I Want to Restart My Computer Now check box, and click Finish. Cisco Unity software is now upgraded.
|
If the server contains
Intel Dialogic D/120JCT-EURO
or D/240PCI-T1 voice cards
|
a. Uncheck the Yes, I Want to Restart My Computer Now check box, and click Finish.
Caution If the Cisco Unity server contains Intel Dialogic D/120JCT-EURO or D/240PCI-T1 voice cards, do not restart the server now or you will not be able to access the Cisco Unity Administrator after Cisco Unity is installed.
b. Do the procedure under "Software Settings" for your voice card in "Voice Cards."
c. Restart the Cisco Unity server.
|
Installing License Files
From the Cisco Unity Installation and Configuration Assistant, you run the Cisco Unity Install License File wizard second to install the Cisco Unity license files.
To Install the License Files
Step 1 Log on to Windows by using the Cisco Unity installation account.
Step 2 On the Install the Cisco Unity License Files page, click Run the Cisco Unity Install License File Wizard.
Step 3 On the Welcome screen, click Next.
Step 4 Click Add.
Step 5 Insert the Cisco Unity license file disk, if applicable.
(When Cisco Unity was registered on Cisco.com, Cisco replied with an e-mail containing attached file(s) with license(s) for Cisco Unity features. The instructions in the e-mail directed that the attached files be saved. For more information, see the "Obtaining Cisco Unity License Files" section.)
Step 6 Browse to drive A or to the location where the license file(s) have been stored.
Step 7 Double-click the license file to add it to the License Files list.
If prompted, click Yes to copy the license file to the local system.
Step 8 If you are adding more than one license file, click Add, and repeat Step 6 and Step 7 for each license file.
Step 9 Click Next.
Step 10 In the Licenses dialog box, confirm that the license information is correct.
Step 11 Click Next.
Step 12 Click Finish.
Configuring Services
From the Cisco Unity Installation and Configuration Assistant, you run the Cisco Unity Services Configuration wizard third to associate the directory, message store, and local services with accounts you specify.
To Configure Services
Step 1 On the Configure the Cisco Unity Services page, click Run the Cisco Unity Services Configuration Wizard. (Note that you should be logged on to Windows with the Cisco Unity installation account.)
Step 2 On the Welcome screen, click Next.
Step 3 Choose the Domino version.
Step 4 Click Next.
Step 5 Follow the on-screen prompts to complete the configuration.
Configuring Cisco Unity for the Message Store
From the Cisco Unity Installation and Configuration Assistant, you run the Cisco Unity Message Store Configuration wizard fourth to configure Cisco Unity for the message store.
To Configure Cisco Unity for the Message Store
Step 1 On the Configure the Cisco Unity Message Store page, click Run the Cisco Unity Message Store Configuration Wizard. (Note that you should be logged on to Windows with the Cisco Unity installation account.)
Step 2 Confirm that the Domino server is running. If Domino is not running, configuring the message store on the Cisco Unity server will fail.
Step 3 On the Welcome screen, click Next.
Step 4 Enter the password for the installation account, and click Next.
Step 5 In the Select Partner Message Store dialog box, click Lotus Domino R5 or Lotus Domino R6, and click Next.
Step 6 Click Next.
Step 7 Enter the path and password for the local Notes.ini file. The default path is Lotus\Notes\Notes.ini.
Step 8 Click Next.
Step 9 For each directory database that Cisco Unity will monitor, enter the following information:
Server Name
|
The Domino name for the server. This name must be resolvable to an IP address by using DNS, a HOSTS file, or some other mechanism.
|
Address Book
|
The name of the Domino directory database. Typically, this is Names.nsf, unless you are using a different name for your Domino directory database.
|
Display Name
|
The Cisco Unity Administrator uses the text name you enter here for the file you entered in the Address Book field.
|
Step 10 Click Next.
Step 11 If you did not create a Cisco Unity administration account in the "Creating the Accounts Required for the Cisco Unity Installation" section, skip to Step 12. When installation is complete, you will log on to the Cisco Unity Administrator by using the installation account.
If you created a Cisco Unity administration account in the "Creating the Accounts Required for the Cisco Unity Installation" section, specify the account:
a. Click Change.
b. In the Select User dialog box, double-click the name of the Cisco Unity administration account.
Step 12 Click Next.
Step 13 Click OK to stop Cisco Unity services.
Step 14 Click Finish.
Integrating the Phone System with Cisco Unity
From the Cisco Unity Installation and Configuration Assistant, you run the Cisco Unity Telephony Integration Manager (UTIM) fifth to connect Cisco Unity with the phone system.
To Integrate the Phone System with Cisco Unity
Step 1 On the Integrate the Phone System with Cisco Unity page, click Run the Cisco Unity Telephony Integration Manager. (Note that you should be logged on to Windows with the Cisco Unity installation account.)
Step 2 In the right pane of the UTIM, click Create Integration.
Step 3 Refer to the applicable Cisco Unity integration guide for your phone system to complete the integration. (Cisco Unity integration guides are available at http://www.cisco.com/en/US/products/sw/voicesw/ps2237/prod_configuration_guides_list.html.)
When the integration is complete, the Set Up the Cisco Personal Communications Assistant to Use SSL screen appears in the main window.
Setting Up the Cisco Personal Communications Assistant to Use SSL
From the Cisco Unity Installation and Configuration Assistant, you can set up the Cisco PCA to use SSL. Using the SSL protocol ensures that all subscriber credentials—as well as the information that a subscriber enters on any page in the Cisco PCA—are encrypted as the data is sent across the network.
If you do not want to set up the Cisco PCA to use SSL, see the "Skipping Cisco PCA Setup for SSL" section.
To set up the Cisco PCA to use SSL, do the procedures in the applicable section, depending on whether you are using a certificate authority:
•Setting Up the Cisco PCA to Use SSL by Creating a Local Certificate Without a Certificate Authority
•Setting Up the Cisco PCA to Use SSL by Using a Certificate Authority
After the Cisco Unity Installation and Configuration Assistant is finished and the Cisco PCA is set up to use SSL, you manually set up the Cisco Unity Administrator and Status Monitor to use SSL. The Cisco Unity Installation Guide alerts you when to do the procedure.
Skipping Cisco PCA Setup for SSL
Do the procedure in this section if you do not want to set up the Cisco PCA to use SSL. (Note that without SSL when subscribers log on to the Cisco PCA, their credentials will be sent across the network to Cisco Unity in clear text. In addition, the information that subscribers enter on the pages of the Cisco PCA will not be encrypted.)
To Skip Cisco PCA Setup for SSL
Step 1 Click Do Not Set Up Cisco Personal Communications Assistant to Use SSL.
Step 2 Click Continue.
Step 3 Click Close to exit the Cisco Unity Installation and Configuration Assistant.
Setting Up the Cisco PCA to Use SSL by Creating a Local Certificate Without a Certificate Authority
To Set Up the Cisco PCA to Use SSL by Creating a Local Certificate Without a Certificate Authority
Step 1 In the Cisco Unity Installation and Configuration Assistant, click Create a Local Certificate Without a Certificate Authority.
Step 2 Click Internet Services Manager.
Step 3 Expand the name of the Cisco Unity server.
Step 4 Right-click Default Web Site, and click Properties.
Step 5 In the Default Web Site Properties dialog box, click the Directory Security tab.
Step 6 Under Secure Communications, click Server Certificate.
Step 7 In the Web Server Certificate wizard Welcome window, click Next.
Step 8 Click Create a New Certificate, and click Next.
Step 9 Click Prepare the Request Now, But Send It Later, and click Next.
Step 10 Enter a name and a bit length for the certificate.
We strongly recommend that you choose a bit length of 512. Greater bit lengths may decrease performance.
Step 11 Click Next.
Step 12 Enter the organization information, and click Next.
Step 13 For the site's common name, enter either the Cisco Unity server's system name or the fully qualified domain name.
Caution The name must exactly match the host portion of any URL that will access this system using a secure connection.
Step 14 Click Next.
Step 15 Enter the geographical information, and click Next.
Step 16 Specify the certificate request file name and location, and write down the file name and location because you will need the information later in this procedure.
Step 17 Click Next.
Step 18 Verify the request file information, and click Next.
Step 19 Click Finish to close the Web Server Certificate wizard.
Step 20 Click OK to Close the Default Web Site Properties dialog box.
Step 21 Close the Internet Services Manager window.
Step 22 In the Cisco Unity Installation and Configuration Assistant, in the Enter Certificate Request File box, enter the full path and file name of the certificate request file that you specified in Step 16.
Step 23 Click Create Certificate.
Step 24 In the Cisco Unity Installation and Configuration Assistant, click Enable Cisco PCA to Use SSL.
Step 25 Click Close to exit the assistant.
Setting Up the Cisco PCA to Use SSL by Using a Certificate Authority
This section contains four procedures.
If you are using Microsoft Certificate Services to issue your own certificate, do all four procedures in the order listed.
If you are using a certificate purchased from a Certificate Authority (for example, VeriSign), do only the fourth procedure, "To Install the Certificate."
To Create a Certificate Request by Using Microsoft Certificate Services
Step 1 In the Cisco Unity Installation and Configuration Assistant, click Use a Certificate Authority.
Step 2 Click Internet Services Manager.
Step 3 Expand the name of the Cisco Unity server.
Step 4 Right-click Default Web Site, and click Properties.
Step 5 In the Default Web Site Properties dialog box, click the Directory Security tab.
Step 6 Under Secure Communications, click Server Certificate.
Step 7 In the Web Server Certificate wizard Welcome window, click Next.
Step 8 Click Create a New Certificate, and click Next.
Step 9 Click Prepare the Request Now, But Send It Later, and click Next.
Step 10 Enter a name and a bit length for the certificate.
We strongly recommend that you choose a bit length of 512. Greater bit lengths may decrease performance.
Step 11 Click Next.
Step 12 Enter the organization information, and click Next.
Step 13 For the site's common name, enter either the Cisco Unity server's system name or the fully qualified domain name.
Caution The name must exactly match the host portion of any URL that will access this system using a secure connection.
Step 14 Click Next.
Step 15 Enter the geographical information, and click Next.
Step 16 Specify the certificate request file name and location, and write down the file name and location because you will need the information in the next procedure.
Save the file to a disk or to a directory that the Certificate Authority (CA) server can access.
Step 17 Click Next.
Step 18 Verify the request file information, and click Next.
Step 19 Click Finish to close the Web Server Certificate wizard.
Step 20 Click OK to Close the Default Web Site Properties dialog box.
Step 21 Close the Internet Services Manager window.
Step 22 Click Close to exit the Cisco Unity Installation and Configuration Assistant.
To Submit the Certificate Request by Using Microsoft Certificate Services
Step 1 On the server that is acting as the CA, on the Windows Start menu, click Run.
Step 2 Run Certreq.
Step 3 Browse to the directory where you saved the certificate request file, and double-click the file.
Step 4 Click the CA to use, and click OK.
Once the CA submits the certificate request, it assigns a pending status by default for added security. This requires a person to verify the authenticity of the request and to manually issue the certificate.
To Issue the Certificate by Using Microsoft Certificate Services
Step 1 On the server that is acting as the CA, on the Windows Start menu, click Programs > Administrative Tools > Certification Authority.
Step 2 In the left pane of the Certification Authority window, expand Certification Authority.
Step 3 Expand <Certification Authority name>.
Step 4 Click Pending Requests.
Step 5 In the right pane, right-click the request, and click All Tasks > Issue.
Step 6 In the left pane, click Issued Certificates.
Step 7 In the right pane, double-click the certificate to open it.
Step 8 Click the Details tab.
Step 9 In the Show list, choose <All>, and click Copy to File.
Step 10 In the Certificate Export wizard Welcome window, click Next.
Step 11 Accept the default export file format DER encoded binary X.509 (.CER), and click Next.
Step 12 Specify a file name and a location that the Cisco Unity server can access, and click Next.
Step 13 Verify the settings, and click Finish.
Step 14 Click OK to close the Certificate Details dialog box.
Step 15 Close the Certification Authority window.
To Install the Certificate
Step 1 On the Cisco Unity server, double-click the CUICA icon on the desktop.
Step 2 In the Cisco Unity Installation and Configuration Assistant, click Use a Certificate Authority.
Step 3 On the Set Up the Cisco Personal Communications Assistant to Use SSL page, at Step 3, click Internet Services Manager.
Step 4 In Internet Services Manager, expand the name of the Cisco Unity server.
Step 5 Right-click Default Web Site, and click Properties.
Step 6 In the Properties dialog box, click the Directory Security tab.
Step 7 Under Secure Communications, click Server Certificate.
Step 8 On the Web Server Certificate Wizard welcome screen, click Next.
Step 9 Click Process the Pending Request and Install the Certificate, and click Next.
Step 10 Browse to the directory of the certificate (.cer) file, and double-click the file.
Step 11 Verify the certificate information, and click Next.
Step 12 Click Finish to close the Web Server Certificate wizard window.
Step 13 Click OK to close the Default Web Site Properties dialog box.
Step 14 Close the Internet Services Manager window.
Step 15 In the Cisco Unity Installation and Configuration Assistant, click Enable Cisco PCA to Use SSL.
Step 16 Close the Cisco Unity Installation and Configuration Assistant.
Installing Cisco Unity 4.0(3) Service Release 1
A number of 4.0(3) engineering specials were rolled up into Cisco Unity 4.0(3) Service Release 1. The service release is on the Cisco Unity 4.0(3) SR1 Post-Install CD. The release is also available on the Cisco Unity 4.0 Software Download page at http://www.cisco.com/pcgi-bin/tablebuild.pl/unity-40.
For download and installation instructions, refer to Release Notes for Cisco Unity 4.0(3) Service Release 1 at http://www.cisco.com/univercd/cc/td/doc/product/voice/c_unity/unity40/relnote/403sr1rn.htm.
Installing the Microsoft Updates Recommended for Use With Cisco Unity
Microsoft regularly releases updates for the Microsoft software that is installed on the Cisco Unity server. The Cisco Unity 4.0(3) SR1 Post-Install CD includes Microsoft updates that were recommended at the time the Installation Guide was published. Later updates will be posted on the Voice Software Download page on the Cisco Software Center website. We recommend downloading the latest recommended updates.
Do the following two procedures in the order listed.
To Download the Latest Microsoft Updates Recommended for Use with Cisco Unity
Step 1 On a computer with a high-speed Internet connection, go to the Microsoft Updates for Unity Software Download page at http://www.cisco.com/pcgi-bin/tablebuild.pl/unity_msft_updates.
Note To access the software download page, you must be logged on to Cisco.com as a registered user.
Depending on the software that is installed on the Cisco Unity server, the downloads may total 200 MB or more. Be sure the computer you are using has sufficient disk space or has access to a network drive with sufficient disk space.
Step 2 Download the updates for the software installed on the Cisco Unity server.
Step 3 When all downloads are complete, extract the updates:
a. In Windows Explorer, double-click the file.
b. In WinZip, specify a directory to which the files will be extracted.
Step 4 When you are finished extracting the files, delete the downloaded .exe files to free disk space.
The Cisco Unity 4.0(3) SR1 Post-Install CD includes updates for all of the Microsoft software that is supported on the Cisco Unity server, including three versions of Exchange, and both SQL Server 2000 and MSDE 2000. Install only the updates that apply to the version of Microsoft software that is installed on the Cisco Unity server. (For example, if Exchange 2000 administration software is installed on the Cisco Unity server, install only the Exchange 2000 updates, not the Exchange 5.5 or Exchange 2003 updates.)
To Install the Microsoft Updates Recommended for Use with Cisco Unity
Step 1 Insert the Cisco Unity 4.0(3) SR1 Post-Install disc in the CD-ROM drive, or browse to the location of the downloaded Microsoft updates.
Step 2 Browse to each of the applicable directories and install all of the updates in the directory. Follow the on-screen prompts.
Note that each directory includes four versions of an update, one each for English (ENU), French (FRA), German (DEU), and Japanese (JPN). Install the correct language version for the software you are updating. (For example, if the French version of Exchange 2000 administration software is installed on the Cisco Unity server, install the French version of the Exchange 2000 update.)
Step 3 Restart the Cisco Unity server as recommended. Several restarts may be required.
Testing the Phone System Integration
Test the integration with the phone system. Refer to the Cisco Unity integration guide for your phone system.
Note that you use the Cisco Unity Administrator for part of the integration test. Use the user name and password for the account that you selected to administer Cisco Unity.
Excluding from Virus Scanning the Directory in Which Cisco Unity Is Installed
Note If virus-scanning software is not installed on the Cisco Unity server, skip this section.
You exclude from scanning the directory in which Cisco Unity is installed, as well as all subdirectories, so that the Cisco Unity Administrator and the Cisco Unity Assistant will work properly.
To Exclude from Virus Scanning the Directory in Which Cisco Unity Is Installed
Step 1 Refer to the virus-scanning software Help for instructions on excluding directories from scanning.
Step 2 Exclude from virus scanning the directory in which Cisco Unity is installed (the default directory is CommServer) and all subdirectories under the directory.
Setting Up the Cisco Unity Administrator and Status Monitor to Use SSL
Note If you are not setting up Cisco Unity to use SSL, skip this section.
Using the SSL protocol ensures that all subscriber credentials—as well as the information that a subscriber enters on any page in the Cisco Unity Administrator—are encrypted as the data is sent across the network.
To Set Up the Cisco Unity Administrator and Status Monitor to Use SSL
Step 1 On the Cisco Unity server, on the Windows Start menu, click Programs > Administrative Tools > Internet Services Manager.
Step 2 Expand the name of the Cisco Unity server.
Step 3 Expand Default Web Site.
Step 4 Under Default Web Site, right-click Web, and click Properties.
Step 5 In the Properties dialog box, set the Web directory to use SSL:
a. Click the Directory Security tab.
b. Under Secure Communications, click Edit.
c. Check the Require Secure Channel (SSL) check box.
d. Click OK to close the Secure Communications dialog box.
e. Click OK to close the Properties dialog box.
Step 6 Under Default Web Site, right-click SAWeb, and click Properties.
Step 7 Repeat Step 5 to set the SAWeb directory to use SSL.
Step 8 Under Default Web Site, right-click Status, and click Properties.
Step 9 Repeat Step 5 to set the Status directory to use SSL.
Step 10 Under Default Web Site, double-click AvXml.
Step 11 In the right pane, right-click AvXml.dll, and click Properties.
Step 12 In the Properties dialog box, click the File Security tab.
Step 13 Under Secure Communications, click Edit.
Step 14 Check the Require Secure Channel (SSL) check box.
Step 15 Click OK to close the Secure Communications dialog box.
Step 16 Click OK to close the AvXml.dll Properties dialog box.
Step 17 Close the Internet Services Manager window.
Securing the Example Administrator Account Against Toll Fraud
It is possible for a malicious user to dial into Cisco Unity, log on as the Example Administrator by using the default extension and password, and configure Cisco Unity to forward calls to phone numbers for which there are charges or to reconfigure greetings so an operator believes the voice messaging system is personally accepting collect-call charges. To help secure Cisco Unity against toll fraud, we strongly recommend that you change the phone password for the Example Administrator account after Cisco Unity is installed.
To Change the Password for the Example Administrator Account
Step 1 In the Cisco Unity Administrator, go to any Subscribers > Subscribers page.
Step 2 Click the Find icon.
Step 3 On the Find and Select Subscriber page, click Find.
Step 4 Click Example Administrator. Information on the Example Administrator appears in the Cisco Unity Administrator.
Step 5 In the left pane, click Phone Password.
Step 6 In the right pane, check the User Cannot Change Password check box.
Step 7 Check the Password Never Expires check box.
Step 8 Under Reset Phone Password, enter and confirm a new password by using digits 0 through 9.
We recommend that you enter a long and nontrivial password; 20 digits or more is desirable. (The minimum length of the password is set on the Subscribers > Account Policy > Phone Password Restrictions page.) In a nontrivial password:
•The digits are not all the same (for example, 9999).
•The digits are not consecutive (for example, 1234).
•The password is not the same as the extension assigned to the Example Administrator.
•The password does not spell Example Administrator, the name of the company, the name of the IT manager, or any other obvious words.
Step 9 Click the Save icon.
Step 10 Close the Cisco Unity Administrator.
Moving the Data Store Databases and Transaction Log Files
The Cisco Unity data store includes several databases and their corresponding transaction log files. Because the Cisco Unity and Reports databases and their log files are the fastest-growing data store files, you place them on the system in a way that makes optimum use of system storage capacity.
As you do the following procedure, if applicable, refer to the drive locations you made note of in the "Determining the Drive Locations for Files on the Cisco Unity System" section.
For more information on moving SQL Server or MSDE databases and transaction logs, refer to Microsoft documentation.
To Move the SQL or MSDE Databases and Transaction Log Files
Step 1 Stop Cisco Unity. (Right-click the Cisco Unity icon in the system tray, then click Stop Cisco Unity; if the Cisco Unity icon is not available, browse to the CommServer directory and double-click AvCsTrayStatus.exe.)
Step 2 Stop the Cisco Unity services, and stop and restart the SQL Server or MSDE service:
a. On the Windows Start menu, click Run.
b. Run cmd.
c. Change to the directory in which Cisco Unity is installed (CommServer is the default).
d. Run the command kill -f av* to stop all Cisco Unity services, including the Windows tray icon. (The tray icon may continue to appear in the Windows taskbar, but if you move the mouse cursor over it, it disappears.)
e. Close the Command Prompt window.
f. On the Windows Start menu, click Programs > Administrative Tools > Services.
g. Stop and restart the MSSQLSERVER service.
h. Close the Services MMC.
Step 3 On the Windows Start menu, click Run.
Step 4 Run cmd.
Step 5 Start OSQL by entering OSQL -E on the command line.
Caution OSQL commands are case-sensitive. Enter the instructions exactly as they appear in the procedure.
Step 6 Detach the databases from the data store application by entering the following instructions on the command line:
a. Enter
use master
and press Enter.
b. Enter
go
and press Enter.
c. Enter
EXEC sp_detach_db 'UnityDb'
and press Enter.
d. Enter
go
and press Enter.
e. Enter
EXEC sp_detach_db 'ReportDb'
and press Enter.
f. Enter
go
and press Enter.
Step 7 In Windows Explorer, create the new database and log destination directories on the drive locations you made note of in the "Determining the Drive Locations for Files on the Cisco Unity System" section. Use directory names that are easy to remember, for example:
UnityDb.mdf and ReportDb.mdf
|
<Database destination drive>\<Path>\Unity Data
|
UnityDb_log.ldf and ReportDb_log.ldf
|
<Log file destination drive>\<Path>\Unity Logs
|
Step 8 In Windows Explorer, copy the databases UnityDb.mdf and ReportDb.mdf from Program Files\Microsoft SQL Server\MSSQL\Data to the new database destination(s).
Step 9 In Windows Explorer, copy the transaction log files UnityDb_log.ldf and ReportDb_log.ldf from Program Files\Microsoft SQL Server\MSSQL\Data to the new log file destination(s).
Step 10 In OSQL, reattach the databases and log files to the data store application by entering the following instructions on the command line:
a. Enter
use master
and press Enter.
b. Enter
go
and press Enter.
c. Enter
EXEC sp_attach_db 'UnityDb', '<Database destination drive>\<New database directory path>\UnityDb.mdf', '<Log file destination drive>\<New log file directory path>\UnityDb_log.ldf'
and press Enter.
d. Enter
go
and press Enter.
e. Enter
EXEC sp_attach_db 'ReportDb', '<Database destination drive>\<New database directory path>\ReportDb.mdf', '<Log file destination drive>\<New log file directory path>\ReportDb_log.ldf'
and press Enter.
f. Enter
go
and press Enter.
Step 11 In OSQL, verify the change in the file locations by entering the following instructions on the command line:
a. Enter
use UnityDb
and press Enter.
b. Enter
go
and press Enter.
c. Enter
sp_helpfile
and press Enter.
d. Enter
go
and press Enter.
e. The file name column values should reflect the new locations.
Step 12 Enter
exit
and press Enter to close OSQL.
Step 13 Optional: In Windows Explorer, rename each of the databases and log files in the old locations <Original file name and extension>.old. (For example, in its original location, rename UnityDb.mdf to UnityDb.mdf.old.)
Step 14 Restart Cisco Unity:
a. On the Windows Start menu, click Programs > Startup > AvCsTrayIcon to restart the Cisco Unity tray icon.
b. When the tray icon appears in the Windows taskbar, use it to restart Cisco Unity.
Adding the /3GB Switch to Boot.ini
Note If Windows 2000 Advanced Server is not installed on the Cisco Unity server, skip this section.
When Windows 2000 Advanced Server is installed on the Cisco Unity server, you can improve Cisco Unity performance by adding the /3GB switch to the Boot.ini file. By default, Windows 2000 Advanced Server reserves 2 GB of virtual address space for the kernel and another 2 GB for applications. The /3GB switch causes Windows to reserve 3 GB of memory for applications. For more information, refer to Microsoft Knowledge Base articles 291988 and 298064.
To Add the /3GB Switch to Boot.ini
Step 1 Open the c:\boot.ini file in a text editor.
Step 2 Add /3GB to the line that includes WINNT="Microsoft Windows 2000 Server". For example:
multi(0)disk(0)rdisk(0)partition(2)\WINNT="Microsoft Windows 2000 Server" /fastdetect /3GB
Step 3 Restart the server.
Re-enabling Virus-Scanning and Cisco Security Agent Services
Note If virus-scanning software or Cisco Security Agent for Cisco Unity is not installed on the Cisco Unity server, skip this section.
You re-enable virus-scanning and Cisco Security Agent services now that all of the software installations that could have been affected if the services were running are complete.
To Re-enable and Start Virus-Scanning and Cisco Security Agent Services
Step 1 Refer to the virus-scanning software documentation to determine the names of the virus-scanning services.
Step 2 On the Windows Start menu, click Programs > Administrative Tools > Services.
Step 3 Re-enable and start each virus-scanning service and the Cisco Security Agent service:
a. In the right pane, double-click the service.
b. On the General tab, in the Startup Type list, click Automatic to re-enable the service.
c. Click Start to start the service.
d. Click OK to close the Properties dialog box.
Step 4 When the services have been re-enabled, close the Services MMC.
Feedback
