This document provides installation instructions for Unified CCE 12.6(1) ES9. It also contains a list of Unified CCE issues resolved by this engineering special. Review all installation information before installing the product. Failure to install this engineering special as described can result in inconsistent Unified CCE behavior.
This document contains these sections:
In the Product
Alert Tool, you can set up profiles to receive email notification of new
Field Notices, Product Alerts, or End of Sale information for your selected
products.
The Product
Alert Tool is available at https://www.cisco.com/cisco/support/notifications.html.
This ES Patch will
support ECDSA signature certificate and ciphers for unified CCE components.
Secured
interface components are divided into two categories that is Web services and
Unified CCE core,
The
list of applications under web services are:
•
WebSetup
•
Unified CCEadmin
•
DiagnosticPortico
•
ISE
The
list of applications under Unified CCE core component services are:
•
CTIServer
•
Dialer
•
AppGw Client
•
Media Routing
•
VRU
Admin
can refer to below sections in security guide to enable ECDSA across CCE components.
|
Interfaces
to Enable ECDSA |
Section
|
|
Unified
CCE web services |
CCE Certificate Management Utilities
|
|
CiscoCertUtil
Tool |
CCE Certificate Management Utilities
|
|
Dialer
to Media Routing Interface |
Dialer-MRPG Secure Connection (RSA/ECDSA)
|
|
VRUPG
to CVP Interface |
VRUPG-CVP
Secure Connection(RSA/ECDSA) |
|
CTI
Server to Finesse Interface |
CTIServer-Finesse
Secure connection (RSA/ECDSA) |
For
PCCE Deployment and cceadmin operations, please refer to “Self-Signed
Certificates” at
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/pcce/pcce_12_6_1/configuration/guide/pcce_b_admin_configuration_guide_12_6_1.html
12.6(1)
This section lists the Unified CCE components on which you can and cannot install this engineering special.
Unified
CCE 12.6(1) ES9 Patch can be installed
on any or all Unified CCE
component for which ECDSA needs to be enabled.
For enabling ECDSA in core components,
you can install on
· Router for Application GW secured interface.
· Media Routing PG for secured interface towards Dialer, ECE and CCP.
· Agent PG for CTIServer secured interface towards Dialer, Finesse and ECE.
· VRU PG for secured interface towards CVP.
For enabling ECDSA in web services
components, you can install on Unified CCE
component which access
· Websetup
· Diagnostic Portico.
· AW for CCEadmin
· ISE client.
Do not install this engineering special on the any of unified cce components if ECDSA is not required.
1. Launch the installer provided for ES9
and follow the instructions provided by the installer to
complete the installation.
2. Once the installation is complete,
restart the machine.
3. Using the ICM Service Control, start
the UCCE services if they are not started already.
For Enabling ECDSA for unified CCE core
and webservices, please refer to “Enabling ECDSA Certificate”
in ucce-security-guide <provide link>
Before you uninstall,
ensure to set “ECDSAEnabled” registry to false and reboot the box.
The
“ECDSAEnabled” registry can be found at “HKLM\SOFTWARE\WOW6432Node\Cisco Systems, Inc.\ICM\Cisco SSL
Configuration”
For
More details please Refer to https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/icm_enterprise/icm_enterprise_12_6_1/installation/guide/ucce_b_12_6_1-install_upgrade_guide/ucce_b_12_6_1-install_upgrade_guide_chapter_01011.html
Note: Remove patches in the reverse order of their installation. For example, if you installed patches 3, then 5, then 10 for a product, you must uninstall patches 10, 5, and 3, in that order, to remove the patches from that product.
This section provides a list of significant Unified CCE defects resolved by this engineering special. It contains these subsections:
Note: You can view more information on and track individual Unified CCE defects using the Cisco Bug Search tool, located at: https://bst.cloudapps.cisco.com/bugsearch/search?null.
This section lists caveats specifically resolved by Unified CCE 12.6(1) ES9.
Caveats in this section are ordered by UNIFIED CCE component, severity, and
then identifier.
.
|
Identifier |
Severity |
Component |
Headline |
Caveats are ordered by severity then defect number.
You can access current Cisco documentation on the Support pages at the following sites:
To provide comments about this document, send an email message to the following address:
contactcenterproducts_docfeedback@cisco.com
We appreciate your comments.
Cisco.com is a starting point for all technical assistance. Customers and partners can obtain documentation, troubleshooting tips, and sample configurations from online tools. For Cisco.com registered users, additional troubleshooting tools are available from the TAC site.
Cisco.com provides a broad range of features and services to help customers and partners streamline business processes and improve productivity. Through Cisco.com, you can find information about Cisco and our networking solutions, services, and programs. You can also resolve technical issues with online technical support and download software packages. Valuable online skill assessment, training, and certification programs are also available.
Customers and partners can self-register on Cisco.com to obtain additional personalized information and services. Registered users can order products, check on the status of an order, access technical support, and view benefits specific to their relationships with Cisco.
The Cisco TAC site is available to all customers who need technical assistance with a Cisco product or technology that is under warranty or covered by a maintenance contract.
If you have a priority level 3 (P3) or priority level 4 (P4) problem, contact TAC by going to https://www.cisco.com/c/en/us/support/index.html.
P3 and P4 level problems are defined as follows:
In each of the above cases, use the Cisco TAC site to quickly find answers to your questions.
If you cannot resolve your technical issue by using the TAC online resources, Cisco.com registered users can open a case online by using the TAC Case Open tool at the following site: https://mycase.cloudapps.cisco.com/create/start/
If you have a priority level 1(P1) or priority level 2 (P2) problem, contact TAC by telephone and immediately open a case. To obtain a directory of toll-free numbers for your country, go to the following sites:
P1 and P2 level problems are defined as follows: