Cisco Jabber for Mac Installation and Configuration …€¦ · Cisco Jabber for Mac Installation...

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1)First Published: September 23, 2013

Last Modified: February 25, 2014

Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000 800 553-NETS (6387)Fax: 408 527-0883

C O N T E N T S

C H A P T E R 1 Overview of Cisco Jabber for Mac 1

Overview of Cisco Jabber for Mac 1

How to use this guide 2

Deploy certificates for Cisco Jabber for Mac 2

C H A P T E R 2 Deploy Cisco Jabber for Mac on-demand 5

Overview of Cisco Jabber for Mac on-demand deployment 5

C H A P T E R 3 Deploy Cisco Jabber for Mac on-premises 7

Overview of Cisco Jabber for Mac on-premises deployment 7

On-premises deployment checklist 8

Before you deploy 9

Configure Cisco Unified Presence settings 9

Start essential services 10

Firewall requirements for Cisco Jabber for Mac 11

Cisco Jabber for Mac Configuration Requirements 13

Global configuration files 13

Group configuration files 14

Group Configuration File Names 14

Configuration file caching 15

Configuration file examples 15

Cisco Media Services Interface 19

Traffic Marking 19

Prepare Your Network 19

Install Cisco Media Services Interface 20

Configure IM and Availability 20

Configure LDAP Servers 20

Configure LDAP Servers in Cisco Unified Presence 20

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1) iii

Configure LDAP Servers in Cisco Unified Communication Manager 21

Add a new service profile in Cisco Unified CM 21

Configure LDAP Servers in Cisco Unified Communication Manager 23

Add Directory Profile to Service Profile in Cisco Unified Communication

Manager 23

Configure IM and Presence Servers 25

Add IM and Presence Profile to Service Profile 25

Configure a Secure Connection Between Cisco Unified Presence and the LDAP

Directory 26

Create LDAP Configuration 26

Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6 or earlier 26

Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6.3 or later 29

Specify LDAP Directory Configuration on Cisco Unified Communications

Manager 31

Configure the LDAP Attribute Map 33

LDAP Authentication 34

Indexed Active Directory Attributes 34

Intradomain Federation 35

Configure intradomain federation 35

Intradomain Federation Example 36

Predictive search 36

Cisco Unified Communications Manager User Data Service 37

Enable Integration with UDS 37

Set UDS Service Parameters 38

Contact photo retrieval 38

Retrieve photo with URI substitution 39

Retrieve binary data for photos 39

Configure LDAP Authentication 39

Configure LDAP Synchronization for User Provisioning 40

Enable Instant Messaging Policy 41

Turn IM History Logging On or Off 42

Fetch Contact Pictures from a Web Server 43

Configure IM Policy Settings 43

Optional configurations 44

Third-party XMPP client support 44

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1)iv

Contents

Requirements for supporting third-party XMPP clients 44

Configure a secure connection between Cisco Unified Presence and XMPP clients 45

Enable support for third-party XMPP clients 45

Telephony 46

Configure CCMCIP profiles 46

Configure CCMCIP profiles in Cisco Unified Presence 46

Configure CCMCIP profiles in Cisco Unified Presence Administration 48

Configure CTI profiles 50

Configure CTI gateway profiles in Cisco Unified Presence 50

Configure CTI Profile in Cisco Unifed Communications Manager 51

Add CTI Profile to Service Profile 52

Desk Phone Control Mode 52

Configuration of Cisco Unified Presence to enable use of desk phone for calls 52

Enable control of desk phone from CTI 52

Using the computer as a phone 53

Enable control of computer as a phone from CTI 53

Create a Cisco Unified Client Services Framework device for each user 53

Naming guidelines for Cisco Unified Client Services Framework devices 55

Associate a new device with a user 55

Associate a line for a phone device with a user 56

Configure the proxy listener and TFTP addresses 56

Configure proxy listener and TFTP addresses for Cisco Unified Presence 57

Configure proxy listener and TFTP addresses for IM and Presence Service 58

Configuration of security for calls 58

Configure security for a device 59

Reset a device 59

Voicemail 59

Configure Cisco Unity Connection servers 59

Add a Voicemail Service 61

Apply Voicemail Service 62

Add a Mailstore Service 63

Apply Mailstore Service 64

Configure Retrieval and Redirection 64

Set a Voicemail Credentials Source 65

Meetings 66

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1) v

Contents

Configure the Cisco WebEx Meetings Server 66

Configure Cisco WebEx Meeting Server for Cisco Unified Presence 66

Configure the Cisco WebEx Meeting Server in Cisco Unified CM 67

Add Conferencing Profile to Service Profile 69

Distribute the Cisco Jabber for Mac client 69

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1)vi

Contents

C H A P T E R 1Overview of Cisco Jabber for Mac

• Overview of Cisco Jabber for Mac, page 1

• How to use this guide, page 2

• Deploy certificates for Cisco Jabber for Mac, page 2

Overview of Cisco Jabber for MacCisco Jabber for Mac streamlines communications and enhances productivity by unifying availability, instantmessaging, voice, video, voice messaging, desktop sharing, and conferencing capabilities securely into oneclient on your desktop. Cisco Jabber for Mac delivers secure, clear, and reliable communications, offersflexible deploymentmodels, is built on open standards and integrates with commonly used desktop applications.Communicate and collaborate effectively from anywhere you have an Internet connection.

Release 9.2.1

The following improvements have been made in Cisco Jabber for Mac Release 9.2.1:

• Video

◦Place and receive Video calls to various video endpoints including EX60 and EX90 phones, andTP bridges

◦Full screen video

◦Moveable picture-in-picture

◦Support for multiple cameras and camera selection

◦Hold and resume video calls

◦Stop and start your video during a call

◦Handle multiple video calls

• Medianet Metadata

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1) 1

How to use this guideThis guide is designed to help you install, configure, and perform administrative tasks for Cisco Jabber forMac. The following table will direct you to the sections of this guide that are relevant to your needs:

Consult the following section(s):If you want to:

Overview of Cisco Jabber for Mac on-demanddeployment

Deploy Cisco Jabber for Mac in an on-demandenvironment using Cisco Collaboration Cloud

See Getting started with Cisco UnifiedCommunications Manager for Click to Call.

Configure or administrate telephony for Cisco Jabberfor Mac

See Specifying Visual Voicemail settings.Configure or administrate voicemail for Cisco Jabberfor Mac

See Understanding additional services.Configure or administrate meetings for Cisco Jabberfor Mac

See Overview of Cisco Jabber for Mac on-demanddeployment.

Distribute the Cisco Jabber for Mac client

Deploy certificates for Cisco Jabber for MacCisco Jabber for Mac features a new security enhancement that provides users with a warning dialog in theevent that a certificate cannot be validated (due to self-signage, incorrect name or date, or other reasons). Aslong as the certificate is valid and trusted, the dialog will not appear.

Cisco provides users with the opportunity to "Continue" connecting from the warning dialogs when CiscoJabber for Mac is deployed into networks with self-signed certificates. Users also have the option to mark theself-signed certificate as "Always Trust," which places the certificate in the user's Keychain and eliminatesthe warning dialog on subsequent launches.

Users may become frustrated when presented with several warning dialogs when first launching the product,since Cisco Jabber for Mac connects to many servers. In order to resolve this issue and improve the userexperience, Cisco recommends that administrators acquire proper certificates that are issued from a trustedCertificate Authority. When Cisco Jabber for Mac is presented with a valid certificate, it will connect normallywithout prompting the user (unless the user has chosen the option to see certificates before Cisco Jabber forMac connects).

Alternatively, you can provide self-signed certificates that the user can install on his or her local machine.The user will not encounter the dialog box if the certificates are already in place when Cisco Jabber for Maclaunches.

Perform the following steps to deploy self-signed certificates to users:

Cisco Jabber for Mac Installation and Configuration Guide 9.2(1)2

Overview of Cisco Jabber for MacHow to use this guide

http://www.webex.com/webexconnect/orgadmin/help/index.htm?toc.htm?17394.htm


http://www.webex.com/webexconnect/orgadmin/help/index.htm?toc.htm?cs_visual_voicemail.htm


Procedure

Step 1 Download the "tomcat-trust" certificate from the Cisco Unified OS administration interface, under Security> Certificate Management.

Step 2 Download the corresponding certificates from the Cisco Unified Presence, Cisco Unified CommunicationsManager, and Unity Connection servers, where applicable.

Step 3 Concatenate the certificates into a single file with the extension .pem (for example,"companyABCcertificates.pem").

Step 4 Send the file to your Cisco Jabber for Mac users and ask them to double-click it. Doing so launches theKeychain Access application and imports the certificates.

Note:

The operating system requires that the user enter the Mac OS X administration password for each certificatethat is being imported.


Overview of Cisco Jabber for MacDeploy certificates for Cisco Jabber for Mac


Overview of Cisco Jabber for MacDeploy certificates for Cisco Jabber for Mac

C H A P T E R 2Deploy Cisco Jabber for Mac on-demand

• Overview of Cisco Jabber for Mac on-demand deployment, page 5

Overview of Cisco Jabber for Mac on-demand deploymentYou can deploy Cisco Jabber for Mac in an on-demand (or "cloud") environment by using the Cisco WebExConnect Administration Tool. To learn how to use this tool, consult the CiscoWebEx Connect AdministrationGuide:

http://www.webex.com/webexconnect/orgadmin/help/index.htm

You may also download a PDF of the guide.

Recommended installation

To perform this type of deployment from start to finish, Cisco recommends that you follow the steps belowin the order specified:

1 Configure organization information. See Understanding the Configuration Tab.

2 Create and provision users. See Overview of User Management.

3 Configure IM and availability. See CiscoWebExConnect federation with other instant messaging providers.

4 Configure telephony services. See Getting started with Cisco Unified CommunicationsManager for Clickto Call.

5 Configure voicemail. See Specifying Visual Voicemail settings.

6 Configure meetings. See Understanding additional services.

This is a list of high-level tasks that may not include every aspect of your configuration. Consult theindividual links for more information.

Note


http://www.webex.com/webexconnect/orgadmin/help/index.htm

http://support.webex.com/webexconnect/70/orgadmin/en_us/pdf/webex_connect_administrator_guide.pdf


http://www.webex.com/webexconnect/orgadmin/help/index.htm?toc.htm?cs_user.htm




http://www.webex.com/webexconnect/orgadmin/help/index.htm?toc.htm?cs_visual_voicemail.htm



Deploy Cisco Jabber for Mac on-demandOverview of Cisco Jabber for Mac on-demand deployment

C H A P T E R 3Deploy Cisco Jabber for Mac on-premises

This chapter describes how to deploy Cisco Jabber for Mac in an on-premises environment, using CiscoUnified Presence.

• Overview of Cisco Jabber for Mac on-premises deployment, page 7

• On-premises deployment checklist, page 8

• Before you deploy, page 9

• Cisco Jabber for Mac Configuration Requirements, page 13

• Cisco Media Services Interface, page 19

• Configure IM and Availability, page 20

• Optional configurations, page 44

• Distribute the Cisco Jabber for Mac client, page 69

Overview of Cisco Jabber for Mac on-premises deploymentYou can deploy Cisco Jabber for Mac in an on-premises environment by leveraging the following key Ciscotechnologies:

• Cisco Unified Presence or Cisco Unified Communications IM and Presence

• Cisco Unified Communications Manager

• Cisco Unity Connection

• Cisco Webex Meeting

This guide has been prepared to align with Cisco Unified Presence release 8.6(1). The system administrationinterface and menu choices described in the procedures that follow may vary with other versions of CiscoUnified Presence. For example, references to Cisco Unified Personal Communicator have been updatedto Cisco Jabber in Cisco Unified Presence release 8.6(3).

Note


Recommended installation

To perform this type of deployment, Cisco recommends that you configure your system in the following order:

1 Configure directory (LDAP) services

2 Configure firewall

3 Create and provision users

4 Configure IM and availability

5 Configure optional features (federated IM, telephony, voicemail, meetings)

6 Distribute the client

This is a list of high-level tasks that may not include every aspect of your configuration. Consult theOn-premises deployment checklist for a more detailed example of a typical deployment.

You should also be aware that you will occasionally switch from entering information in the Cisco UnifiedPresence Administration Tool to entering information in the Cisco Unified Communications ManagerAdministration Tool.

Note

On-premises deployment checklistThe following checklist describes a typical on-premises deployment of Cisco Jabber forMac for your reference.Your organization's deployment may vary.

1 Configure Cisco Unified Presence settings

2 Start essential services, on page 10

3 Configure firewall(s)

4 Deploy certificates for Cisco Jabber for Mac

5 Configure LDAP Servers

6 Configure a Secure Connection Between Cisco Unified Presence and the LDAP Directory

7 Create LDAP profiles and add users

8 Configure the LDAP attribute map

9 Configure LDAP Synchronization for User Provisioning

10 Configure LDAP Authentication

11 Enable Instant Messaging Policy, on page 41

12 Fetch Contact Pictures from a Web Server

13 Option: Configure federated IM

14 Option: Configure telephony

15 Option: Configure voicemail


Deploy Cisco Jabber for Mac on-premisesOn-premises deployment checklist

16 Option: Configure meetings

17 Distribute the Cisco Jabber for Mac client

Before you deploy

Configure Cisco Unified Presence settings

You must perform this task in Cisco Unified Presence.Note

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> Settings.

Step 2 Enter information into the fields:SettingField

This field applies only if the Client ServicesFramework (CSF) requires you to import securitycertificates to authenticate with LDAP, webconferencing, and CCMCIP. For most deployments,you do not need to import security certificates. Youonly need to import security certificates for CSF totrust in the following scenarios:

• You use a signed certificate for Cisco UnifiedCommunications Manager Tomcat instead ofthe default self-signed certificate.

• You want CSF to connect to the LDAP servervia LDAPS.

• You use a signed certificate for Cisco UnityConnection Tomcat instead of the defaultself-signed certificate.

If you must specify a value, specify the directory thatcontains the security certificates as an absolute path.If you do not specify a directory, CSF looks for thecertificates in the default directory and trusts anycertificates in that location.

Default Setting: Not set

CSF certificate directory (relative to CSF installdirectory)


Deploy Cisco Jabber for Mac on-premisesBefore you deploy

If user credentials for the voicemail service are sharedwith another service, select the appropriate servicefrom this list box. The user credentials automaticallysynchronize from the service that you select.


Troubleshooting Tips

If this value is set to Not set, users must enter theircredentials manually using the Preferencesmenu fromthe client.

Credentials source for voicemail service

If user credentials for the meeting service are sharedwith another service, select the appropriate servicefrom this list box. The user credentials automaticallysynchronize from the service that you select.



If this value is set to Not set, users must enter theircredentials manually using the Preferencesmenu fromthe client.

Credentials source for web conferencing service

Enter the allowed size limit for instant messages, inbytes.

Maximum message size

Check this check box to allow users to cut and pastein their instant messages (IMs).

Default Setting: On

Allow cut & paste in instant messages

Step 3 Select Save.

Start essential services

You must perform this task in Cisco Unified Communications Manager.Note

To deploy Cisco Jabber, start the following Cisco Unified Presence Extensible Communication Platform(XCP) services on all Cisco Unified Presence nodes in all clusters:

• Cisco Unified Presence XCP Authentication Service

• Cisco Unified Presence XCP Connection Manager

You may also start the following optional Cisco Unified Presence XCP services on all Cisco Unified Presencenodes in all clusters, depending on what features you want to make available:


Deploy Cisco Jabber for Mac on-premisesStart essential services

• Cisco Unified Presence XCP Text Conference Manager, for group chat.

• Cisco Unified Presence XCP SIP Federation Connection Manager, to support federation services withthird-party applications that use SIP.

• Cisco Unified Presence XCP XMPP Federation Connection Manager, to support federation serviceswith third-party applications that use XMPP.

• Cisco Unified Presence XCP Counter Aggregator, if you want system administrators to be able to viewstatistical data on XMPP components.

• Cisco Unified Presence XCP Message Archiver, for automatic archiving of all instant messages.

Read the documentation relating to any feature that you are implementing before you turn on the relevantservices. Additional configuration might be required.

Note

Procedure

Step 1 Select Cisco Unified Serviceability > Tools > Control Center - Network Services.Step 2 Select the desired Cisco Unified Presence server from the Server list box.Step 3 Select Go.Step 4 Confirm the Cisco UP XCP Router service is running.Step 5 If the Cisco UP XCP Router service is not running, do the following:

a) Select the radio button next to the Cisco UP XCP Router service in the CUP Services section.b) Select OK.

Step 6 Select Cisco Unified Serviceability > Tools > Service Activation.Step 7 Select the desired Cisco Unified Presence server from the Server list box.Step 8 Select Go.Step 9 Select Cisco UP XCP Directory Service.Step 10 Select Save.

Firewall requirements for Cisco Jabber for MacInternet traffic moves through a firewall based on service identification numbers that are known as ports.Ports are an organizational concept used categorize and prioritize traffic. The primary purpose of a firewallis to recognize the traffic that moves through it and to allow or deny the traffic based on its port number.Firewalls must be configured to allow traffic on certain ports for Cisco Jabber to work properly. Networkadministrators typically block all unnecessary traffic on their networks. This involves only opening thoseports that are required by enterprise-specific applications and closing all others.

There are two types of firewalls that may be encountered in the enterprise environment, software and hardwarefirewalls. Software firewalls exist as a component of most modern computer operating systems. They areintended to provide a basic level of security at the individual user level. When users run Cisco Jabber for thefirst time, they may be asked to Accept or Unblock the application. This is the operating system software


Deploy Cisco Jabber for Mac on-premisesFirewall requirements for Cisco Jabber for Mac

firewall asking if the application should be allowed to run. Users should be notified of this and providedinformation on how to properly respond. If users experience problems with availability, phone mode switching,or instant messages, the firewall might be denying connections despite the previous allowed setting. RestartCisco Jabber. If this does not resolve the issue, return to the Firewall settings, remove Cisco Jabber, and addit again to the list of applications that allow incoming connections.

Hardware firewalls are network devices that provide protection from unwanted traffic at an enterprise level.Hardware firewalls must be configured to allow the ports carrying traffic for Cisco Jabber. The followingtable lists the ports used by Cisco Jabber. These ports must be open on all firewalls for Cisco Jabber to functionproperly.

DescriptionProtocolPort

Inbound

Real-Time Transport Protocol (RTP)media streams for audio

UDP16384-32766

Outbound

Trivial File Transfer Protocol (TFTP)service

UDP69

Cisco Unified Communications Manageradministrator and user web pages

TCPHTTP

80

Cisco WebEx Meetings Server foron-premises conferencingCisco Unity Connection for voicemail

Cisco WebEx Messenger service incloud-based deployments.

The client sends XMPP throughport 443 in cloud-baseddeployments. If port 443 isblocked, the client falls back toport 5222

Note

TCP(HTTPS and XMPP)

443

Cisco Unity Connection for notificationsof voice messages

TCP(HTTPS)

7080

LDAP directory serverUDP/TCP389

LDAP directory server (secure)LDAPS636

Global Catalog serverTCP3268

CTI gatewayTCP2748

Session Initiation Protocol (SIP) callsignaling

UDP/TCP5060

Secure SIP call signalingTCP5061


Deploy Cisco Jabber for Mac on-premisesFirewall requirements for Cisco Jabber for Mac

Cisco Unified Presence or Cisco UnifiedCommunications IM and Presence inon-premises deployments

In on-premises deployments, theclient sends XMPP trafficthrough port 5222. In cloud-baseddeployments, the client uses port5222 as fallback for XMPP trafficto the Cisco WebEx Messengerservice if port 443 is blocked.

Note

TCP(XMPP)

5222

Connection to Cisco UnifiedCommunications Manager IP Phone(CCMCIP) server to get a list ofcurrently-assigned devices.

HTTPS8443

RTP media streams for audioUDP16384-32766

Domain Name System (DNS) trafficUDP/TCP53

Peer to peer file transfersIf port 1080 is in use, the client attemptsto use the next available port in the rangefrom 1081 to 1089.

SOCKS5 Bytestreams1080

Locally Significant Certificates (LSC) forIP phonesThis is the listening port for Cisco UnifiedCommunications Manager CertificateAuthority Proxy Function (CAPF)enrollment.

TCP3804

The client listens for events from CiscoUnified Client Services Framework.

HTTP44442

Cisco Jabber for Mac Configuration RequirementsIn most environments, Cisco Jabber for Mac does not require any configuration. You should create aconfiguration file for Cisco Jabber for Mac only if the default configuration does not suit your environmentor you require custom configuration.

Global configuration filesGlobal configuration files apply to all Cisco Jabber for Mac users. Cisco Jabber for Mac downloads the globalconfiguration file from your TFTP server during the login sequence.

The default name for the global configuration file is jabber-config.xml.


Deploy Cisco Jabber for Mac on-premisesCisco Jabber for Mac Configuration Requirements

Group configuration filesGroup configuration files apply to subsets of Cisco Jabber for Mac users. Group configuration files takepriority over global configuration files.

Cisco Jabber for Mac retrieves group configuration files after users sign in to their phone account in the clientfor the first time. Cisco Jabber for Mac then prompts the users to sign out. During the second login sequence,Cisco Jabber for Mac downloads the group configuration file from your TFTP server.

Cisco Jabber for Mac loads group configuration files as follows:

Users are not signed in

1 Users sign in and then Cisco Jabber for Mac notifies the users about the change to their configurationsettings.

2 Users sign out.

3 Users sign in and then Cisco Jabber for Mac loads the group configuration settings.

Users are signed in and use Cisco Jabber for Mac for calls

1 Cisco Jabber for Mac notifies the users about the change to their configuration settings.

2 Users sign out.


Users are signed in and use Cisco Jabber for Mac for calls

1 Users sign out.

2 Users sign in and then Cisco Jabber for Mac notifies the users about the change to their configurationsettings.

3 Users sign out.


If users select the option to use Cisco Jabber for Macs for calls before they sign out, Cisco Jabber forMac notifies the users to sign out and then sign in again to load the group configuration settings.

Group Configuration File NamesYou specify the name of the group configuration files in the Cisco Support Field on the CSF deviceconfiguration in Cisco Jabber for Mac.

If you remove the name of the group configuration file in the CSF device configuration on Cisco Jabber forMac, Cisco Jabber for Mac detects the change, prompts the users to sign out, and loads the global configurationfile. You can remove the name of the group configuration file in the CSF device configuration by deletingthe entire configurationFile=group_configuration_file_name.xml string or by deletingthe group configuration filename from the string.


Deploy Cisco Jabber for Mac on-premisesGroup configuration files

Configuration file cachingCisco Jabber for Mac always attempts to download configuration files from your TFTP server during thelogin sequence. If Cisco Jabber for Mac cannot download a configuration file, it reads the previously loadedconfiguration from the cache.

Cisco Jabber for Mac caches the content of both group and global configuration files in a file namedJabberLocalConfig.xml. For this reason, if you create a group configuration file, the contents of thatfile replace the contents of the global configuration file in the cache.

Because the group configuration file replaces the global configuration file in the cache, you can loseconfiguration settings if the group configuration file does not contain the same parameters as the globalconfiguration. For example, you create a global configuration file that contains custom embedded tabdefinitions. You then create a global configuration file that does not contain those embedded tab definitions.When Cisco Jabber forMac downloads the group configuration file, those custom embedded tab definitionsno longer exist in the configuration that Cisco Jabber for Mac loads.

Note

TheJabberLocalConfig.xml file is in~/Library/Application Support/Cisco/UnifiedCommunications/Jabber/CSF/Config

The cache file isjabber-config.xml and is cached on the local machine.

Configuration file examplesEDI/BDI example

The following example includes elements for aWindows configuration (EDI) and a non-Windows configuration(BDI). EDI and BDI can coexist in the same jabber-config.xml file. .<?xml version="1.0" encoding="UTF-8"?><config version="1.0">

<Directory>

<PrimaryServerName>10.194.114.210</PrimaryServerName><PresenceDomain>jabbermac75.net</PresenceDomain><PresenceServer>10.189.123.231</PresenceServer><ServerPort1>389</ServerPort1><ConnectionUsername>aaaaaaa</ConnectionUsername><ConnectionPassword>xxxxxx</ConnectionPassword><SearchBase1>CN=Users,DC=jabbermac75,DC=net</SearchBase1>

<BDIPhotoURISubstitutionEnabled>True</BDIPhotoURISubstitutionEnabled><BDIPhotoURISubstitutionToken>sAMAccountName</BDIPhotoURISubstitutionToken><BDIPhotoURIWithToken>http://www.photo.cisco.com/url/path/sAMAccountName.jpg

</BDIPhotoURIWithToken><BDILDAPServerType>OpenLDAP</BDILDAPServerType><BDIPrimaryServerName>10.194.114.210</BDIPrimaryServerName><BDIPresenceDomain>jabbermac75.net</BDIPresenceDomain><BDIServerPort1>389</BDIServerPort1><BDISearchBase1>CN=Users,DC=jabbermac75,DC=net</BDISearchBase1><BDIConnectionUsername>[email protected]</BDIConnectionUsername><BDIConnectionPassword>xxxxxx</BDIConnectionPassword><BDIEnableTLS>True</BDIEnableTLS><BDIUseANR>False</BDIUseANR><BDIPredictiveSearchFilter>mail , displayName</BDIPredictiveSearchFilter>


Deploy Cisco Jabber for Mac on-premisesConfiguration file caching

</Directory>

</config>

Element definitions

The following table describes the elements in the jabber-config.xml file example.

Only the first element, DirectoryServerType, is required. All other keys are optional.Note

DescriptionElement

EDI, BDI or UDS . Only used if PresenceServerType is CUP. EDIis LDAP for Windows clients and BDI is LDAP for non-windowsclients

DirectoryServerType

IP address of the directory serverBDIPrimaryServerName

Port used to connect to the directory serverBDIServerPort1

Specifies a username to connect to the directory server.Important: The username is visible in the jabber-config.xml file asplain text. If you specify credentials in the configuration, you shoulduse a shared, read-only directory account for all users. For moreinformation on setting credentials, see “LDAP CredentialsConfiguration”

BDIConnectionUsername

Password you can specify to connect to the directory server.Important: The password is visible in the jabber-config.xml file asplain text. If you specify credentials in the configuration, you shoulduse a shared, read-only directory account for all users. For moreinformation on setting credentials, see “LDAP CredentialsConfiguration”

BDIConnectionPassword

BaseDNBDISearchBase1

Specifies a base filter for AD/LDAP queries. Use a directory subkeyname only to retrieve objects other than user objects when you queryAD/LDAP.The default value is (&(objectCategory=person) Configuration filescan contain only valid XML character entity references. Use&instead of & if you specify a custom base filter

BDIBaseFilter

LDAP server type. Possible values are OpenLDAP or AD. Defaultis AD.

BDILDAPServerType

LDAP domainBDIPresenceDomain

True or False. For more information about photos, see the section,“Contact Photo Retrieval”

BDIPhotoUriSubstitutionEnabled

Specify a directory attribute to use as a dynamic token (for example,sAMAccountName). For more information about photos, see thesection, “Contact Photo Retrieval”

BDIPhotoUriSubstitutionToken


Deploy Cisco Jabber for Mac on-premisesConfiguration file examples

Photo URL template. Specify the URL and the dynamic token as thevalue of the parameter . Possible values:

• http://staffphoto.example.com/sAMAccountName.jpg

• http://staffphoto.example.com/uid.jpeg

For more information about photos, see the section, “Contact PhotoRetrieval”

BDIPhotoUriWithToken

Default is False. Use True to enable TLSBDIEnableTLS

(Optional) Defines a filter Cisco Jabber for Mac applies to predictivesearch queries. This key is only used if BDIUseANR is set to False.If BDIUseANR is set to False and BDIPredictiveSearchFilter is notset, Cisco Jabber for Mac uses a default search filter.

BDIPredictiveSearchFilter

The default for BDIUseANR is True for AD and False for openLDAP.When it is set to False, LDAP search is based on the value of theBDIPredictiveSearchFilter set in jabber-config.xml, if that value isset.For more information about ANR, see “Predictive Search”.

BDIUseANR

Determines if the app should be SIP-aware. True or False. False isdefault.

BDIUseSIPURIToResolveContacts

String that Cisco Jabber for Mac searches for in the Primary Address,typically SIP. Default is an empty string.

BDIUriPrefix

Default is False. If this is set to True, and credentials are not set inconfiguration or in Cisco Unified Presence, Cisco Jabber credentialswill be used for login.

BDIUseJabberCredentials

Attribute for domain name. Default is dnBDIDomainName

Attribute for user name. Defaults:

• AD: sAMAccountName

• OpenLDAP: uid

BDIUserAccountName

Attribute for display name. Defaults:

• AD: displayName

• OpenLDAP: cn

BDIDisplayName

Attribute for common name. Default is cn for AD; no default forOpenLDAP

BDICommonName

Attribute for first name. Default is givenNameBDIFirstName

Attribute for last name. Default is snBDILastName



Attribute for nickname. Default is nickname for AD; no default forOpenLDAP

BDINickName

Attribute for email address. Default is mailBDIEmailAddress

Attribute for office phone number. Default is telephoneNumberBDIBusinessPhone

Attribute for mobile phone. Defaults:

• AD: mobile

• OpenLDAP: mobileTelephoneNumber

BDIMobilePhone

Attribute for home phone. Defaults:

• AD: mobile

• OpenLDAP: mobileTelephoneNumber

BDIHomePhone

Attribute for other phone. Default is otherTelephone for AD; nodefault for OpenLDAP

BDIOtherPhone

Attribute for title. Default is titleBDITitle

Attribute for company name. Default is companyBDICompanyName

Attribute for location. Default is locationBDILocation

Attribute for street address. Default is streetAddressBDOStreetAddress

Attribute for state. Default is stBDIState

Attribute for city. Default is lBDICity

Attribute for postal code. Default is postalCodeBDIPostalCode

Attribute for country. Default is coBDICountry

Attribute for photo source. Defaults:

• AD: thumbnaiPhoto

• OpenLDAP: jpegPhoto

To use a photo with AD, remove any BDIPhotoSource attributes injabber-config.xml. You need not specify thumbnailPhoto as theattribute, because Cisco Jabber for Mac uses thumbnailPhoto as thedefault. Simply upload the user image to the thumbnailPhoto attributein AD.

For more information about photos, see the section, “Contact PhotoRetrieval”

BDIPhotoSource

Attribute for SIP URI. Default is msRTCSIP-PrimaryUserAddressBDISipUri

UDS example



The following example includes a UDS configuration.<?xml version="1.0" encoding="UTF-8"?><config version="1.0">

<Directory><DirectoryServerType>UDS</DirectoryServerType><PhotoURISubstitutionEnabled>True</PhotoURISubstitutionEnabled><PhotoURISubstitutionToken>sAMAccountName</PhotoURISubstitutionToken><PhotoURIWithToken>http://10.194.114.133/software/photo/%%uid%%.jpg

</PhotoURIWithToken><OtherPhone>telephoneNumber</OtherPhone><EmailAddress>mail</EmailAddress><CcmipServer1>10.194.114.240</CcmipServer1><PresenceDomain>jabbermac75.net</PresenceDomain></Directory>

</config>

Cisco Media Services Interface

Traffic MarkingCisco Media Services Interface provides a service that works with Cisco Prime Collaboration Manager andCisco Medianet-enabled routers to ensure that Cisco Jabber can send audio media and video media on yournetwork with minimum latency or packet loss.

Before Cisco Jabber sends audio media or video media, it checks for Cisco Media Services Interface.

• If the service exists on the computer, Cisco Jabber provides flow information to Cisco Media ServicesInterface.

The service then signals the network so that routers classify the flow and provide priority to the CiscoJabber traffic.

• If the service does not exist, Cisco Jabber does not use it and sends audio media and video media asnormal.

Cisco Jabber checks for Cisco Media Services Interface for each audio call or video call.Note

Prepare Your NetworkTo install Cisco Media Service Interface for traffic marking, you must prepare your network.

Procedure

Step 1 Install Cisco Prime Collaboration manager.Step 2 Install routers or switches enabled for Cisco Medianet where appropriate.Step 3 Configure your network to handle the metadata attributes that Cisco Media Service Interface applies to

applications.


Deploy Cisco Jabber for Mac on-premisesCisco Media Services Interface

Not all devices on your network must support Cisco Medianet.

The first hop should prioritize traffic based on the metadata attributes from Cisco Media Service Interface.As the traffic traverses the network, all other devices should also prioritize that traffic unless you configurepolicies on those devices to handle the traffic differently.

Install Cisco Media Services Interface

Procedure

Step 1 Download the Cisco Media Services Interface installation program from the download site on cisco.com.Step 2 Install Cisco Media Services Interface on each computer on which you install Cisco Jabber.

See the appropriate Cisco Medianet documentation for installing Cisco Media Services Interface.

Configure IM and Availability

Configure LDAP Servers

Configure LDAP Servers in Cisco Unified Presence

Use this procedure for Cisco Unified Presence 8.6 or earlier. If you have installed Cisco UnifiedCommunications Manager IM and Presence Service 9.0 or later, see Configure LDAP Servers in CiscoUnified Communication Manager, on page 21

Note

Before You Begin

• Configure the LDAP attribute map.

• Obtain the hostnames or IP addresses of the LDAP directories.


Deploy Cisco Jabber for Mac on-premisesInstall Cisco Media Services Interface

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> LDAP Server.

Step 2 Select Add New.Step 3 Enter the LDAP server name.Step 4 Enter an IP address or a Fully Qualified Domain Name (FQDN) of the LDAP server.Step 5Step 6 Select TCP or TLS for the protocol type.Step 7 Select Save.

Related Topics

Configure LDAP Servers in Cisco Unified Communication Manager, on page 21

Configure LDAP Servers in Cisco Unified Communication Manager

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > UC Service.Step 2 Select Add New.Step 3 Select Directory. Then, click Next.Step 4 Enter the LDAP server name.Step 5 Enter the IP address or Fully Qualified Domain Name (FQDN) of the LDAP server.Step 6 Specify the port number to be used by the LDAP server. The default port is 389 for either TCP or TLS.Step 7 Select TCP or TLS as the protocol type.Step 8 Select Save.

Add a new service profile in Cisco Unified CM

Procedure

Step 1 In Unified CommunicationsManagement Administration, selectUserManagement >User Settings > ServiceProfile.The Find and List window opens.

Step 2 Select Add New.Step 3 Enter the following settings for the service profile fields:


Deploy Cisco Jabber for Mac on-premisesConfigure LDAP Servers

Entry DetailsField Name

Enter the name of the service profile, which isdescriptive enough for you to instantly recognize it.This name is visible on the End User settings window.The field allows all but the following characters:

• Quote (")

• Angle brackets (< >)

• Backslash (\)

• Ampersand (&)

• percent (%)

Maximum characters is 50 (ASCII only)

Name

(Optional) Enter a description that helps you todistinguish between service profiles when youconfigure more than one. You can change thedescription at any time

Description

Check this check box to make this service profile thedefault option for the system.

If you specify a default service profile, endusers who do not have an associated serviceprofile automatically inherit the defaultservice profile settings.

Note

Make this the default service profile for the system

Step 4 Select Save.The Add Successful message appears and Cisco Unified Communications Management creates the serviceprofile in the database.



Configure LDAP Servers in Cisco Unified Communication Manager

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > UC Service.Step 2 Select Add New.Step 3 Select Directory. Then, click Next.Step 4 Enter the LDAP server name.Step 5 Enter the IP address or Fully Qualified Domain Name (FQDN) of the LDAP server.Step 6 Specify the port number to be used by the LDAP server. The default port is 389 for either TCP or TLS.Step 7 Select TCP or TLS as the protocol type.Step 8 Select Save.

Add Directory Profile to Service Profile in Cisco Unified Communication Manager

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > Service ProfileStep 2 Select the service profile.Step 3 Go to Directory Profile.Step 4 Enter information in the following fields:

SettingField

Select a primary directory server from the drop-downlist. The list contains the directory servers that youpreviously configured on the UC Services window.

If you select User Data Service (UDS) fordirectory integration, then you can use UDSfor directory searches without selecting anyprimary, secondary, or tertiary servers.Clients connect to UDS using DNS/SRV.

Note

Tip: You can specify, instead of (or in addition to)UDS, primary, secondary, or tertiary basic oradvanced LDAP UC services. Some clients that usethese services might not support UDS.

Primary

Select a secondary directory server, if applicable.If you do not set up any backup directory servers, youcannot perform directory searches for Cisco Jabberclients if the first server fails.

Secondary



SettingField

Select a tertiary directory server, if applicable.If you do not set up any backup directory servers, youcannot perform directory searches for Cisco Jabberclients if the first server fails.

Tertiary

(Optional) Check this option to use the usercredentials to sign in to the LDAP server.

Use Logged On User Credential

Enter LDAP administrator login name.Username

Enter the LDAP bind password, which is limited to128 characters. This password for theadministrator-level account that you provided in theBindDistinguishedName string allows users to accessthis LDAP server.

Password

Enter the location where you configured all the LDAPusers. This location is a container or directory.Maximum allowable characters is 256. Only use asingle OU/LDAP search context.

Follow these guidelines is you integrate withMicrosoft Active Directory:

Note

• Set O and OU

OU must contain users; ou=users,dc=cisco, dc=com). For example,cn=users, DC=EFT-LA,DC=cisco,DC=com

• Include all users of Cisco Jabber in thesearch base

Search Base 1

(Optional) Check this check box to perform arecursive search of the directory, starting at the searchbase

Recursive Search on All Search Bases

Specify the timeout interval. Default is five seconds.Search Timeout (seconds)

Step 5 Select Save.



Configure IM and Presence Servers

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > UC Service.Step 2 Select Add New.Step 3 Select IM and Presence.. Then, click Next.Step 4 Enter the Cisco Unified Communication Manager IM and Presence Administration server name.Step 5 Enter a description.Step 6 Enter the IP address or Fully Qualified Domain Name (FQDN) of the Cisco Unified Presence server.Step 7 Select Save.

Add IM and Presence Profile to Service Profile

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > Service Profile.Step 2 Select the service profile.Step 3 Go to IM and Presence Profile.Step 4 Enter information in the following fields:

SettingField

Select a IM and Presence server from the drop-downlist. The list contains the IM and Presence servers thatyou previously configured on the UC Serviceswindow.

An IM and Presence profile cannot mix theIM and Presence server and Webex.

Note

Primary

Select a secondary IM and Presence server, ifapplicable.

Secondary

Select a tertiary IM and Presence server, if applicable.Tertiary



Configure a Secure Connection Between Cisco Unified Presence and the LDAPDirectory

Before You Begin

Enable SSL for LDAP on Cisco Unified CommunicationsManager, and upload the LDAP directory certificateto Cisco Unified Communications Manager.

Procedure

Step 1 Select Cisco Unified OS Administration > Security > Certificate Management.Step 2 Select Upload Certificate.Step 3 Select directory-trust from the Certificate Name menu.Step 4 Browse and select the LDAP server certificate from your local computer.Step 5 Select Upload File.Step 6 Restart the Tomcat service from the CLI using this command:

utils service restart Cisco Tomcat

Create LDAP Configuration

Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6 or earlier

Before You Begin

Use this procedure for Cisco Unified Presence 8.6 or earlier. If you have installed Cisco Unified Presence8.6.3 or later, see Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6.3 or later. If youhave installed Cisco Unified Communications Manager IM and Presence Service 9.0 or later, see CreateLDAP Profiles and Add Users in Cisco Unified Communications Manager IM and Presence Service 9.0or later.

Note

Cisco Jabber connects to an LDAP server on a per-search basis.

You can see LDAP server information in the Server Health window in Cisco Jabber (Help > Show SystemDiagnostics). If Cisco Jabber cannot connect to any of the LDAP servers, it reports the failure in the SystemDiagnostics window.

• Specify the LDAP server names and addresses.


Deploy Cisco Jabber for Mac on-premisesConfigure a Secure Connection Between Cisco Unified Presence and the LDAP Directory

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> LDAP Profile.

Step 2 Select Add New.Step 3 Enter information into the fields.

SettingField

Enter the profile name limited to 128 characters.Name

(Optional) Enter a description limited to 128characters.

Description

(Optional) Enter administrator-level accountinformation limited to 128 characters. This is thedistinguished name with which you bind forauthenticated bind.The syntax for this field depends on the type of LDAPserver that you deploy. For details, see the LDAPserver documentation.

Bind Distinguished Name

(Optional) Uncheck this option to use the usercredentials to sign in to this LDAP server.For non-anonymous bind operations, Cisco Jabberreceives one set of credentials. If configured, thesecredentials must be valid on the backup LDAPservers.

If you check Anonymous Bind, users cansign in anonymously to the LDAP serverwith read-only access. Anonymous accessmight be possible on your directory server,but Cisco does not recommend it. Instead,create a user with read-only privileges onthe same directory where the users to besearched are located. Specify the directorynumber and password in Cisco UnifiedPresence for Cisco Jabber to use.

Note

Anonymous Bind

(Optional) Enter the LDAP bind password limited to128 characters. This is the password for theadministrator-level account that you provided in theBind Distinguished Name string to allow users toaccess this LDAP server.

Password


Deploy Cisco Jabber for Mac on-premisesCreate LDAP Configuration

Reenter the same password as the password youentered in the Password field.(Optional) After configuring Cisco Unified Presencefor authenticated bind with the LDAP server,configure the LDAP server for anonymouspermissions and anonymous login so that all directoryinformation (name, number, mail, fax, home number,and so forth) is passed to the Cisco Jabber client.

Confirm Password

(Optional) Enter the location where you configuredall the LDAP users. This location is a container ordirectory. The name is limited to 256 characters. Onlyuse a single OU/LDAP search context.

If you integrate with Microsoft ActiveDirectory:

Note

• Set O andOU (OUmust contain users;for example, ou=users, dc=cisco,dc=com). For example, cn=users,DC=EFT-LA,DC=cisco, DC=com

• Include all users of Cisco Jabber in thesearch base.

Search Context

(Optional) Check to perform a recursive search of thedirectory starting at the search base.

Recursive Search

Select the primary LDAP server.Primary LDAP Server

(Optional) Check to add any new users to the systeminto this default profile. If you turn on this setting,Cisco Unified Presence adds any users that itsynchronizes from Cisco Unified CommunicationsManager to this default profile. Cisco UnifiedPresence adds users to this default profile only afteryou select the default profile (and you turn on theSync Agent). Cisco Unified Presence does not changeany existing profile configuration. Therefore, Ciscorecommends that you select and configure the defaultprofile before you turn on the Sync Agent.

Make this the Default LDAP Profile for the System

Select the button to open the Find and List Userswindow. Select Find to populate the search resultsfields. Alternatively, search for a specific users andselect Find. To add users to this profile, select theusers, and then select Add Selected.

Add Users to Profile

Step 4 Select Save.



Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6.3 or later

Before You Begin

Use this procedure for Cisco Unified Presence 8.6.3 or later. If you have installed Cisco Unified Presence8.6 or earlier, see Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6 or earlier. If youhave installed Cisco Unified Communications Manager IM and Presence Service 9.0 or later, see CreateLDAP Profiles and Add Users in Cisco Unified Communications Manager IM and Presence Service 9.0or later.

Note

You can see LDAP server information in the Server Health window in Cisco Jabber (Help > Show SystemDiagnostics). If Cisco Jabber cannot connect to any of the LDAP servers, it reports the failure in the SystemDiagnostics window.

• Specify the LDAP server names and addresses.

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Jabber > LDAP Profile.Step 2 Select Add New.Step 3 Enter information into the fields.

SettingField

Enter the profile name limited to 128 characters.Name

(Optional) Enter a description limited to 128characters.

Description

(Optional) Enter administrator-level accountinformation limited to 128 characters. This is thedistinguished name with which you bind forauthenticated bind.The syntax for this field depends on the type of LDAPserver that you deploy. For details, see the LDAPserver documentation.

Bind Distinguished Name



(Optional) Uncheck this option to use the usercredentials to sign in to this LDAP server.For non-anonymous bind operations, Cisco Jabberreceives one set of credentials. If configured, thesecredentials must be valid on the backup LDAPservers.

If you check Anonymous Bind, users cansign in anonymously to the LDAP serverwith read-only access. Anonymous accessmight be possible on your directory server,but Cisco does not recommend it. Instead,create a user with read-only privileges onthe same directory where the users to besearched are located. Specify the directorynumber and password in Cisco UnifiedPresence for Cisco Jabber to use.

Note

Anonymous Bind

(Optional) Enter the LDAP bind password limited to128 characters. This is the password for theadministrator-level account that you provided in theBind Distinguished Name string to allow users toaccess this LDAP server.

Password

Reenter the same password as the password youentered in the Password field.(Optional) After configuring Cisco Unified Presencefor authenticated bind with the LDAP server,configure the LDAP server for anonymouspermissions and anonymous login so that all directoryinformation (name, number, mail, fax, home number,and so forth) is passed to the Cisco Jabber client.

Confirm Password

(Optional) Enter the location where you configuredall the LDAP users. This location is a container ordirectory. The name is limited to 256 characters. Onlyuse a single OU/LDAP search context.

If you integrate with Microsoft ActiveDirectory:

Note

• Set O andOU (OUmust contain users;for example, ou=users, dc=cisco,dc=com). For example, cn=users,DC=EFT-LA,DC=cisco, DC=com

• Include all users of Cisco Jabber in thesearch base.

Search Context

(Optional) Check to perform a recursive search of thedirectory starting at the search base.

Recursive Search

Select the primary LDAP server.Primary LDAP Server



(Optional) Check to add any new users to the systeminto this default profile. If you turn on this setting,Cisco Unified Presence adds any users that itsynchronizes from Cisco Unified CommunicationsManager to this default profile. Cisco UnifiedPresence adds users to this default profile only afteryou select the default profile (and you turn on theSync Agent). Cisco Unified Presence does not changeany existing profile configuration. Therefore, Ciscorecommends that you select and configure the defaultprofile before you turn on the Sync Agent.

Make this the Default LDAP Profile for the System

Select the button to open the Find and List Userswindow. Select Find to populate the search resultsfields. Alternatively, search for a specific users andselect Find. To add users to this profile, select theusers, and then select Add Selected.

Add Users to Profile

Step 4 Select Save.

Specify LDAP Directory Configuration on Cisco Unified Communications ManagerIf your environment includes Cisco Unified CommunicationsManager version 9.x and higher, you can specifycredentials when you add a directory service. The client can then get the configuration from the server toauthenticate with the directory source. If you have installed Cisco Unified Presence 8.6 or earlier, see CreateLDAP Profiles and Add Users in Cisco Unified Presence 8.6 or earlier. If you have installed Cisco UnifiedPresence 8.6.3 or later, see Create LDAP Profiles and Add Users in Cisco Unified Presence 8.6.3 or later.

Complete the steps to add a directory service, apply the directory service to the service profile, and specifythe LDAP authentication configuration for the directory service.

Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Add a directory service as follows:

a) Select User Management > User Settings > UC Service.The Find and List UC Services window opens.

b) Select Add New.The UC Service Configuration window opens.

c) In the Add a UC Service section, select Directory from the UC Service Type drop-down list.d) Select Next.e) Specify details for the directory service as follows:



Product Type

Select Directory.

Name

Enter a descriptive name for the server, for example, PrimaryDirectoryServer.

Description

Enter an optional description.

Hostname/IP Address

Enter the address of the directory server in one of the following formats:

• Hostname

• IP Address

• FQDN

Protocol Type

Select one of the following protocols from the following drop-down list:

• TCP

• UDP

f) Select Save.

Step 3 Apply the directory service to your service profile as follows:a) Select User Management > User Settings > Service Profile.

The Find and List Service Profiles window opens.

b) Find and select your service profile.The Service Profile Configuration window opens.

c) In the Directory Profile section, select up to three services from the following drop-down lists:

• Primary

• Secondary

• Tertiary

d) Specify the credentials that the client can use to authenticate with the LDAP server in the following fields:

• Username

• Password

e) Select Save.

Step 4 Apply the service profile to users as follows:a) Select User Management > End User.

The Find and List Users window opens.



b) Find and select your user.The End User Configuration window opens.

c) In the Service Settings section, select the service profile from the UC Service Profile drop-down list.Cisco Unified Communications Manager version 9.x only: If the user has only instantmessaging and presence capabilities (IM only), you must select Use Default. For IM onlyusers, Cisco Unified CommunicationsManager version 9.x always applies the default serviceprofile regardless of what you select from the UC Service Profile drop-down list.

Important

d) Select Save.

Configure the LDAP Attribute Map


Before You Begin

Note • You can map an LDAP field to only one Cisco Jabber field.

Procedure


Step 2 Select a supported LDAP server from Directory Server Type.The LDAP server populates the LDAP attribute map with Cisco Jabber user fields and LDAP user fields.

Step 3 If necessary, make modifications to the LDAP field to match your specific LDAP directory.The values are common to all LDAP server hosts. Note the following LDAP directory product mappings:

UserID MappingLastName MappingProduct

sAMAccountNameSNMicrosoft Active Directory

uidSNiPlanet, Sun ONE orOpenLDAP

Step 4 Select Save.


Deploy Cisco Jabber for Mac on-premisesConfigure the LDAP Attribute Map


• If you want to stop using the current attribute mappings and use the factory default settings, selectRestore Defaults.

LDAP AuthenticationYou can set the credentials that are required for LDAP authentication in several ways for Cisco Jabber forMac. The following sequence describes the order of how the credentials are obtained:

1 LDAP credentials from CUP: Set Credentials in CUP for LDAP authentication. This is a secure way ofsetting and accessing the credentials for LDAP authentication. For more details on how to set the LDAPcredentials in CUP see "Create LDAP Profiles and Add User."

2 LDAP credentials from configuration file: Set the credentials in the configuration file. The credentialsare read from the parameters BDIConnectionUsername and BDIConnectionUsername. The username andpassword are visible in the configuration file as plain text.

If you specify credentials in the configuration, you should use a shared, read-only directory account forall users.

If the LDAP credentials are set in CUP (see #1 above) then the credentials set in the configuration filewill be ignored.

Note

3 Cisco Jabber credentials as LDAP credentials: Set BDIUseJabberCredentials to True in the configurationfile to use Cisco Jabber credentials for LDAP authentication.

If credentials are set in #1 or #2, above, the Cisco Jabber credentials are not used for LDAP authentication.Note

4 Anonymous bind: Anonymous bind is used to connect to LDAP. Anonymous binding happens only ifthe LDAP credentials were not set using any of the methods mentioned above.

Indexed Active Directory AttributesThe following Active Directory attributes must be indexed:

• sAMAccountName

• displayName

• mail

Any attributes that are used for contact resolution must also be indexed. For example, you might need to indexthe following attributes:

• telephoneNumber

• ipPhone, if this attribute is used in your environment


Deploy Cisco Jabber for Mac on-premisesLDAP Authentication

Intradomain FederationIntradomain federation enables users within the same domain to share availability and send instant messagesbetween Cisco Unified Presence and Microsoft Office Communications Server, or Microsoft Lync Server, orother presence server.

Intradomain federation allows you tomigrate users to CiscoUnified Presence or CiscoUnified CommunicationsIM and Presence from a different presence server. For this reason, you configure intradomain federation forCisco Jabber for Mac on the presence server. See the following documents for more information:

• Cisco Unified Presence: Integration Guide for Configuring Partitioned Intradomain Federation forCisco Unified Presence Release 8.6 and Microsoft LCS/OCS

• Cisco Unified Communications IM and Presence: Partitioned Intradomain Federation for IM andPresence Service on Cisco Unified Communications Manager

Configure intradomain federationIn addition to configuring intradomain federation on the presence server, you might need to specify someconfiguration settings in the Cisco Jabber for Mac configuration files.

To resolve contacts during contact search or retrieve contact information from your directory, Cisco Jabberfor Mac requires the contact ID for each user. Cisco Unified Presence uses a specific format for resolvingcontact information that does not always match the format on other presence servers such as Microsoft OfficeCommunications Server or Microsoft Lync.

Procedure

PurposeCommand or Action

Set the value of the UseSIPURIToResolveContactsparameter to true.

Step 1

Specify an attribute that contains the contact ID that CiscoJabber for Mac uses to retrieve contact information as the

Step 2

value of the SipUri parameter. The default value ismsRTCSIP-PrimaryUserAddress.

For example, you specifymsRTCSIP-PrimaryUserAddress as the

Specify any text that prefixes each contact ID as the valueof the UriPrefix parameter. The prefix is any text thatexists before the username in the contact ID.

Step 3

value of SipUri. In your directory thevalue ofmsRTCSIP-PrimaryUserAddress foreach user has the following format:sip:username@domain.

Sample Configuration

The following XML snippet provides an example of the resulting configuration:<Directory><UseSIPURIToResolveContacts>true</UseSIPURIToResolveContacts>


Deploy Cisco Jabber for Mac on-premisesIntradomain Federation

<SipUri>non-default-attribute</SipUri><UriPrefix>sip:</UriPrefix>

</Directory>

Intradomain Federation ExampleThis topic provides an example of intradomain federation contact resolution using the SipUri,UseSIPURIToResolveContacts, and UriPrefix parameters.

In this example, your configuration has the following settings:

• The value of the SipUri parameter is msRTCSIP-PrimaryUserAddress.

• The value of the UseSIPURIToResolveContacts parameter is true.

• The value of the UriPrefix parameter is sip:.

• The directory contains sip:[email protected] as the value of the msRTCSIP-PrimaryUserAddressattribute for a user named Mary Smith.

Cisco Jabber for Mac connects to your directory to resolve contact information

1 Your presence server passes [email protected] to Cisco Jabber for Mac

2 Cisco Jabber for Mac appends sip: to [email protected] and then queries your directory

3 sip:[email protected] matches the value of the msRTCSIP-PrimaryUserAddress attribute

4 Cisco Jabber for Mac retrieves contact information for Mary Smith.

Cisco Jabber for Mac users search for Mary Smith

Cisco Jabber for Mac removes the prefix of sip: from sip:[email protected] and gets the contact ID [email protected]

Predictive searchWhen Cisco Jabber for Mac performs a predictive search, it issues a query using Ambiguous NameResolution(ANR). This query disambiguates the search string and returns results that match the attributes that are set forANR on your directory server

You must configure your directory server to set attributes for ANR if you want the client to search forthose attributes.

Note

See the following Microsoft documentation for more information on ANR:

• Ambiguous Name Resolution for LDAP in Windows 2000

• DAP Referrals, see the Ambiguous Name Resolution section

• Common Default Attributes Set for Active Directory and Global Catalog


Deploy Cisco Jabber for Mac on-premisesPredictive search

Cisco Unified Communications Manager User Data ServiceUDS is a REST interface on Cisco Unified Communications Manager that provides contact resolution. Yousynchronize contact data into Cisco Unified Communications Manager from a directory server. Cisco Jabberfor Mac then automatically retrieves that contact data directly from UDS.

A known issue in UDS exists on versions of Cisco Unified Communications Manager lower than 8.6.2.This known issue prevents successful contact resolution.

Note

Enable Integration with UDSTo enable integration with UDS, perform the following steps:

Procedure

Step 1 Create your directory source in Cisco Unified Communications Manager.Step 2 Synchronize the contact data to Cisco Unified Communications Manager.

After the synchronization occurs, your contact data resides in Cisco Unified Communications Manager.

Step 3 Provision users with CCMCIP profiles on Cisco Unified Presence or Cisco Unified Communications IM andPresenceThe client requires a CCMCIP profile that contains the primary Cisco Unified Communications Managerserver address. The client uses the CCMCIP profile to locate Cisco Unified Communications Manager andresolve contacts with UDS.


Deploy Cisco Jabber for Mac on-premisesCisco Unified Communications Manager User Data Service

Step 4 Specify UDS as the value of the DirectoryServerType parameter in your configuration file.The following is an example configuration where UDS is the directory server type:

<Directory><DirectoryServerType>UDS</DirectoryServerType></Directory>

Step 5 Configure the client to retrieve contact photos with UDS.The following is an example configuration for contact photo retrieval:

<PhotoUriWithToken>http://server_name.domain/%%uid%%.jpg</PhotoUriWithToken>

Set UDS Service ParametersYou can set service parameters for UDS on Cisco Unified Communications Manager.

Procedure

Step 1 Open the Cisco Unified Communications Manager Administration interface.Step 2 Select System > Enterprise Parameters.

The Enterprise Parameters Configuration window opens.

Step 3 Locate the User Data Service Parameters section and enter information according to the following table.DescriptionParameter

Allows searches for all users in the directory.Enable All User Search

Limits the number of users returned in a query.User Search Limit

Specifies the number of digits to match when userssearch for phone numbers.

To resolve PSTN numbers, you should setthe value as equal to the number of digits inthe PSTN numbers. For example, if thePSTN numbers have 10 digits, set the valueto 10.

Note

Number of Digits to Match

Contact photo retrievalCisco Jabber for Mac retrieves and displays contact photos with the following methods:


Deploy Cisco Jabber for Mac on-premisesContact photo retrieval

Retrieve photo with URI substitutionCisco Jabber for Mac can dynamically build a URL to locate contact photos with a directory attribute and aURL template. To use this method, set the following values in your configuration file:

Procedure

Step 1 Specify true as the value of the BDIPhotoUriSubstitutionEnabled parameter.Step 2 Specify a directory attribute to use as a dynamic token as the value of the BDIPhotoUriSubstitutionToken

parameter

Example:<BDIPhotoUriSubstitutionToken>sAMAccountName</BDIPhotoUriSubstitutionToken>

Step 3 Specify the URL and the dynamic token as the value of the BDIPhotoUriWithToken parameter.

Example:<BDIPhotoUriWithToken>http://staffphoto.example.com/sAMAccountName.jpg</BDIPhotoUriWithToken>In this example, the sAMAccountName attribute might resolve to msmith in your directory. Cisco Jabber forMac would take this value and replace the token to build the following URL:

http://staffphoto.example.com/msmith.jpg

Retrieve binary data for photosCisco Jabber for Mac can retrieve the binary data for a photo from your database.

To use this method for contact photo retrieval, make sure that the following parameters are not used in theconfiguration:

• BDIPhotoUriWithToken

• BDIPhotoUriSubstitutionToken

• BDIPhotoUriSubstitutionEnabled

Cisco Jabber forMac uses the value of the BDIPhotoSource parameter from the configuration file. For example,<BDIPhotoSource>jpegPhoto</BDIPhotoSource> . By default the value of this BDIPhotoSource parameteris thumbnailPhoto for AD and jpegPhoto for openLDAP.

Configure LDAP Authentication



Deploy Cisco Jabber for Mac on-premisesConfigure LDAP Authentication

The LDAP authentication feature enables Cisco Unified Communications Manager to authenticate userpasswords against the corporate LDAP directory.

LDAP authentication does not apply to the passwords of application users; Cisco Unified CommunicationsManager authenticates application users in its internal database.

Note

Before You Begin

Enable LDAP synchronization on Cisco Unified Communications Manager.

Procedure

Step 1 Select Cisco Unified Communications Manager Administration > System > LDAP > LDAPAuthentication.

Step 2 Check Use LDAP Authentication for End Users.Step 3 Configure the LDAP authentication settings.Step 4 Configure the LDAP server hostname or IP address, and port number.

To use Secure Socket Layer (SSL) to communicate with the LDAP directory, check UseSSL.

Note

Step 5 Click Save.

Troubleshooting Tip

If you configure LDAP over SSL, upload the LDAP directory certificate to Cisco Unified CommunicationsManager.

Configure LDAP Synchronization for User Provisioning


LDAP synchronization uses the Cisco Directory Synchronization (DirSync) tool on Cisco UnifiedCommunications Manager to synchronize information (either manually or periodically) from a corporateLDAP directory.When you enable the DirSync service, Cisco Unified CommunicationsManager automaticallyprovisions users from the corporate directory. Cisco Unified Communications Manager still uses its localdatabase but disables its facility to allow you to create user accounts. You use the LDAP directory interfaceto create and manage user accounts.

• Make sure that you install the LDAP server before you attempt the LDAP-specific configuration onCisco Unified Communications Manager.

• LDAP synchronization does not apply to application users on Cisco Unified Communications Manager.

• Activate and start the Cisco DirSync service on Cisco Unified Communications Manager.


Deploy Cisco Jabber for Mac on-premisesConfigure LDAP Synchronization for User Provisioning

Youmust manually provision application users in Cisco Unified CommunicationsManager Administration.Note

Procedure

Step 1 Select Cisco Unified Communications Manager Administration > System > LDAP > LDAP System.Step 2 Select Add New.Step 3 Configure the LDAP server type and attribute.Step 4 Select Enable Synchronizing from LDAP Server.Step 5 Click Save.Step 6 Select Cisco Unified Communications Manager Administration > System > LDAP > LDAP Directory.Step 7 Select Add New.Step 8 Configure the following items:

• LDAP directory account settings

• User attributes to be synchronized

• Synchronization schedule

• LDAP server hostname or IP address, and port number

Step 9 Check Use SSL if you want to use Secure Socket Layer (SSL) to communicate with the LDAP directory.Step 10 Click Save.


• If you configure LDAP over SSL, upload the LDAP directory certificate onto Cisco UnifiedCommunications Manager.

• See the LDAP directory content in the Cisco Unified Communications Manager SRND for informationon the account synchronization mechanism for specific LDAP products, and general best practices forLDAP synchronization.

Enable Instant Messaging Policy


This procedure describes how to turn on or off IM capabilities for all IM client applications in a Cisco UnifiedPresence cluster. IM capabilities are turned on by default on Cisco Unified Presence.


Deploy Cisco Jabber for Mac on-premisesEnable Instant Messaging Policy

When you turn off IM capabilities on Cisco Unified Presence, all group chat functionality (ad hoc andpersistent chat) will not work on Cisco Unified Presence. Cisco recommends that you do not turn on theCisco UP XCP Text Conference service or configure an external database for persistent chat on CiscoUnified Presence.

Caution

Procedure

Step 1 Select Cisco Unified Presence Administration >Messaging > Settings.Step 2 Configure the IM settings as follows:

Do ThisIf You Want To

Check Enable instantmessaging.

Turn on IM capabilities for client applications in the Cisco Unified Presencecluster.

If you turn on this setting, local users of client applications can send and receiveIMs.

If you turn off this setting, local users of client applications cannot send andreceive IMs. Users can use the IM application for availability and phoneoperations only.

Step 3 Select Save.Step 4 Restart the Cisco UP XCP Router service.

Turn IM History Logging On or Off


You can prevent or allow users to log IM history locally on their computer. On the client side, the applicationmust support this functionality; it must enforce the prevention of IM logging.

Procedure

Step 1 Select Cisco Unified Presence Administration >Messaging > Settings.Step 2 Configure the IM history log as follows:

Do ThisIf You Want To

Check Allow clients to log instant message history(on supported clients only).

Allow users of client applications to log IM historyon Cisco Unified Presence.


Deploy Cisco Jabber for Mac on-premisesTurn IM History Logging On or Off

Uncheck Allow clients to log instant messagehistory (on supported clients only).

Prevent users of client applications from logging IMhistory on Cisco Unified Presence.

Step 3 Select Save.

Fetch Contact Pictures from a Web ServerYou can configure a parameterized URL string in the Photo field in the LDAP attribute map so that CiscoJabber can fetch pictures from a web server instead of from the LDAP server. The URL string must containan LDAP attribute with a query value containing a piece of data that uniquely identifies the photo of the user.Cisco recommends that you use the User ID attribute. However, you can use any LDAP attribute whose queryvalue contains a piece of data that uniquely identifies the photo of the user.

Cisco recommends that you use <userID> as the substitution string, for example:

• http://mycompany.example.com/photo/std/uid.jpg

• http://mycompany.example.com/photo/std/sAMAccountName.jpg

You must include the double percent symbols in this string, and they must enclose the name of the LDAPattribute to substitute. Cisco Jabber removes the percent symbols and replaces the parameter inside with theresults of an LDAP query for the user whose photo it resolves.

For example, if a query result contains the attribute “uid” with a value of “johndoe,” then a template such ashttp://mycompany.com/photos/ui.jpg creates the URL http://mycompany.com/photos/johndoe.jpg. CiscoJabber attempts to fetch the photo.

This substitution technique works only if Cisco Jabber can use the results of the query and can insert it intothe template you specify above to construct a working URL that fetches a JPG photo. If the web server thathosts the photos in a company requires a POST (for example, the name of the user is not in the URL) or usessome other cookie name for the photo instead of the username, this technique does not work.

Cisco Jabber does not support authentication for this query; the photo must be retrievable from the webserver without credentials.

Note

Configure IM Policy Settings

Procedure

Step 1 Select Cisco Unified Presence Administration > Presence > Settings.Step 2 Select Cisco Unified Presence Administration >Messaging > Settings.Step 3 Perform the following configuration:


Deploy Cisco Jabber for Mac on-premisesFetch Contact Pictures from a Web Server

Do ThisIf You Want To . . .

Uncheck Enable instant messaging.Globally disable instant messaging services.

Uncheck Suppress Offline Instant Messaging.Globally enable offline instant messaging.

Check Allow clients to log instant message history(on supported clients only).

Globally display client instant messaging history.

Step 4 Select Save.Step 5 Restart the Cisco UP XCP Router service.

Optional configurations

Third-party XMPP client support

Requirements for supporting third-party XMPP clients

Support for Third-Party XMPP Clients

Cisco Unified Presence supports standards-based XMPP to enable third-party XMPP client applications tointegrate with Cisco Unified Presence for availability and instant messaging (IM) services. Third-party XMPPclients must comply with the XMPP standard as outlined in the Cisco Software Development Kit (SDK).

License Requirements for Third-Party Clients

For each user of an XMPP client application, you require a Cisco Unified Presence user feature license. TheCisco Unified Presence user feature license consumes one Cisco Unified Communications Manager DeviceLicense Unit (DLU). On Cisco Unified Communications Manager, you will need to upload the user DLU,and assign Cisco Unified Presence capabilities to the user.

XMPP Client Integration on Cisco Unified Communications Manager

Before you integrate an XMPP client, perform the following tasks on Cisco Unified CommunicationsManager:

• Configure the licensing requirements. Upload the user DLU, and then assign Cisco Unified Presencecapabilities for the user.

• Configure the users and devices. Associate a device with each user, and associate each user with a lineappearance.


Deploy Cisco Jabber for Mac on-premisesOptional configurations

LDAP Integration for XMPP Contact Search

To allow users of the XMPP client applications to search and add contacts from an LDAP directory, configurethe LDAP settings for XMPP clients on Cisco Unified Presence.

Domain Name for XMPP Clients

The domain name on the XMPP client, specifically the XMPP connection attempt domain name, must matchthe domain on Cisco Unified Presence. To verify the domain value on Cisco Unified Presence, select CiscoUnified Presence Administration > System >Cluster Topology, select Settings in the right pane, and verifythe Domain Name value.

DNS Configuration for XMPP Clients

Youmust enable DNS SRV in your deployment when you integrate XMPP clients with Cisco Unified Presence.TheXMPP client performs aDNS SRV query to find anXMPP server (CiscoUnified Presence) to communicatewith, and then performs a record lookup of the XMPP server to get the IP address.

Configure a secure connection between Cisco Unified Presence and XMPP clientsTo configure a secure connection between your Cisco Unified Presence server and third-party XMPP clients:

Procedure

Step 1 Select Cisco Unified Presence Administration > System > Security > Settings.Step 2 To establish a secure TLS connection between Cisco Unified Presence and XMPP client applications in a

cluster, select Enable XMPP Client To CUP Secure Mode.Cisco recommends that you do not turn off this secure mode unless the XMPP client application can protectthe client login credentials in non-secure mode. If you do turn off the secure mode, verify that you can securethe XMPP client-to-server communication in some other way.

Step 3 To establish a secure TLS connection between Cisco Unified Presence andXMPP-based API client applicationsin a cluster, select Enable Web Client To CUP Secure Mode.If you turn on this setting, upload the certificates or signing certificates for the web client in thecup-xmpp-trust repository on Cisco Unified Presence.

Step 4 Select Save.

Enable support for third-party XMPP clientsTo enable support for third-party XMPP clients, perform the following steps for each node of your CiscoUnified Presence cluster:

Procedure

Step 1 Select Cisco Unified Serviceability > Tools > Service Activation.Step 2 Select the Cisco Unified Presence server from the Server menu.Step 3 Turn on the following services:


Deploy Cisco Jabber for Mac on-premisesThird-party XMPP client support

Cisco UP XCP Connection Manager - Turn on this service if you are integrating third-party XMPPclients on Cisco Unified Presence.

•

• Cisco UP XCP Authentication Service - Turn on this service if you are integrating third-party XMPPclients, or XMPP-based API clients, on Cisco Unified Presence.

• Cisco UP XCPWeb Connection Manager - Turn on this service if you are integrating XMPP-based APIclients on Cisco Unified Presence.

For XMPP clients to function correctly, make sure you turn on the Cisco UP XCP Router on all nodes in yourcluster.

Step 4 Click Save.

Telephony

Configure CCMCIP profiles

Configure CCMCIP profiles in Cisco Unified Presence

The CCMCIP service runs on Cisco Unified CommunicationsManager and retrieves a list of devices associatedwith each user. CCMCIP profiles are required before the client application can retrieve the list of user devicesfrom Cisco Unified Communications Manager. You can create a profile to control client applications whenthe application allows a user to use a desk phone for phone calls. The profile can also facilitate discovery ofdevices when the client applications allow users to use a desk phone for phone calls, or to use a computer forphone calls.

You can then associate selected users with the new profile.

Before You Begin

This procedure applies to Cisco Unified Presence 8.6 or earlier. If you installed Cisco Unified CommunicationsManager IM and Presence Service 9.0 or later, see Configure CCMCIP profiles in Cisco Unified PresenceAdministration, on page 48

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> CCMCIP Profile.

Step 2 Select Add New.Step 3 Enter the profile name and description.Step 4 Enter information into the fields:


Deploy Cisco Jabber for Mac on-premisesTelephony

SettingField

Enter the address of the server for the CCMCIP service to use to retrieve the list ofassociated devices when users sign in to Cisco Jabber.

Enter the address in one of the following forms:

• IP address

• Host name

• Fully-qualified domain name (FQDN)

This value must match exactly the IP address, host name, or FQDN of the CCMCIPserver.

Primary CCMCIPHost

Enter the address of the backup server for the CCMCIP service to use if the primaryCCMCIP server fails.


• IP address

• Host name

• FQDN

This value must match exactly the IP address, host name, or FQDN of the backupCCMCIP server.

Backup CCMCIPHost

Specify how the CCMCIP server associated with this profile supports TLSconnections. This setting is for TLS verification of the CCMCIP servers listed forthis CCMCIP profile.

Select from the following options:

• Self Signed or Keystore—Cisco Unified Presence accepts the certificate if thecertificate is self-signed, or the signing Certificate Authority certificate is inthe local trust store. A keystore is a file that stores authentication and encryptionkeys.

• Any Certificate—Cisco Unified Presence accepts all valid certificates.

• Keystore Only—Cisco Unified Presence accepts only certificates that aredefined in the keystore. You must import the certificate or its CertificateAuthority signing certificate into the local trust store.

Default Setting: Self Signed or Keystore

Server CertificateVerification



SettingField

(Optional) Check this option if you want new users to be automatically added tothe default profile.

Users who are already synchronized to Cisco Unified Presence from Cisco UnifiedCommunications Manager are not added to the default profile. However, any userswho are synchronized after the default profile is created are added to the defaultprofile.

Make this the defaultCCMCIP Profile forthe system

Step 5 Select Add Users to Profile.Step 6 Use the Find and List Users window to find and select users, and select Add Selected to add users to the

profile.Step 7 Select Save.

Configure CCMCIP profiles in Cisco Unified Presence Administration

Procedure

Step 1 SelectCisco Unified Presence Administration > Application > Legacy Applications > CCMCIP Profile.Step 2 Select Add New.Step 3 Enter the profile name and description.Step 4 Enter information into the fields:

SettingField

Enter the address of the server for the CCMCIP service to use to retrieve the list ofassociated devices when users sign in to Cisco Jabber.


• IP address

• Host name

• Fully-qualified domain name (FQDN)

This value must match exactly the IP address, host name, or FQDN of the CCMCIPserver.

Primary CCMCIPHost



SettingField

Enter the address of the backup server for the CCMCIP service to use if the primaryCCMCIP server fails.


• IP address

• Host name

• FQDN

This value must match exactly the IP address, host name, or FQDN of the backupCCMCIP server.

Backup CCMCIPHost

Specify how the CCMCIP server associated with this profile supports TLSconnections. This setting is for TLS verification of the CCMCIP servers listed forthis CCMCIP profile.

Select from the following options:

• Self Signed or Keystore—Cisco Unified Presence accepts the certificate if thecertificate is self-signed, or the signing Certificate Authority certificate is inthe local trust store. A keystore is a file that stores authentication and encryptionkeys.

• Any Certificate—Cisco Unified Presence accepts all valid certificates.

• Keystore Only—Cisco Unified Presence accepts only certificates that aredefined in the keystore. You must import the certificate or its CertificateAuthority signing certificate into the local trust store.

Default Setting: Self Signed or Keystore

Server CertificateVerification

(Optional) Check this option if you want new users to be automatically added tothe default profile.

Users who are already synchronized to Cisco Unified Presence from Cisco UnifiedCommunications Manager are not added to the default profile. However, any userswho are synchronized after the default profile is created are added to the defaultprofile.

Make this the defaultCCMCIP Profile forthe system

Step 5 Select Add Users to Profile.Step 6 Use the Find and List Users window to find and select users, and select Add Selected to add users to the

profile.Step 7 Select Save.



Configure CTI profiles

Configure CTI gateway profiles in Cisco Unified Presence


You must create CTI gateway profiles in Cisco Unified Presence Administration and assign primary andbackup servers for redundancy.

Before You Begin

Use this procedure for Cisco Unified Presence 8.6 or earlier. If you installed Cisco Unified CommunicationsManager IM and Presence Service 9.0 or later, see Configure CTI Profile in Cisco Unifed CommunicationsManager, on page 51

Note

• The CTI gateway profile must be created before you can add licensed users of the client application tothe application profile.

• The CTI gateway server names and addresses must be specified in Cisco Unified PresenceAdministration > Application > Cisco Unified Personal Communicator > CTI Gateway Serverbefore you can select the servers as primary or backup servers in this procedure.

• Cisco Unified Presence dynamically creates a TCP-based CTI gateway profile based on the hostnameof Cisco Unified CommunicationsManager. Before using this profile, verify that Cisco Unified Presenceand the application clients can ping Cisco Unified Communications Manager by the DNS name. If theycannot contact the server, you need to add the IP address of Cisco Unified Communications Managerin Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> CTI Gateway Server. You do not need to delete the host profiles that are created automatically.

• If you previously configured Cisco Unified Communications Manager with an IP address through theCisco Unified Communications Manager Administration > System > Server menu, Cisco UnifiedPresence dynamically creates a TCP-based CTI gateway profile based on that address. The fields inCisco Unified Presence Administration > Application > Cisco Unified Personal Communicator >CTI Gateway Profile are automatically populated, and you need only add users to the default CTI TCPprofile that is created (see Step 3).

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> CTI Gateway Profile.

Step 2 Search for the CTI gateway profile in the Find and List CTI Gateway Profiles window.If the CTI gateway profile is found, no further action is required.

Step 3 If the CTI gateway profile is not found, select Add New.Step 4 Enter information into the fields.



SettingField

Enter the profile name.Name

Enter a profile description.Description

Select a primary server and backup servers.Primary CTI Gateway Server andBackup CTI Gateway Server

Check this option if you want any new users that are added to thesystem to be placed automatically into this default profile.

Users who are already synchronized to Cisco Unified Presence fromCisco Unified CommunicationsManager are not added to the defaultprofile. However, once the default profile is created, any userssynchronized after that are added to the default profile.

Make this the Default CTI GatewayProfile for the System

Step 5 Select Add Users to Profile.Step 6 Use the Find and List Users window to find and select users.Step 7 Select Add Selected to add users to the profile.Step 8 Select Save in the main CTI Gateway Profile window.

Configure CTI Profile in Cisco Unifed Communications Manager

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > UC Service.Step 2 Select Add New.Step 3 Enter the Cisco Unified Communication Manager server name.Step 4 Enter a description.Step 5 Enter an IP address or a Fully Qualified Domain Name (FQDN) of the Cisco Unified CommunicationManager

server.Step 6 Specify the port number used by the Cisco Unified Communication Manager server.Step 7 Select Save.



Add CTI Profile to Service Profile

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > Service Profile.Step 2 Select the service profile.Step 3 Go to CTI Profile.Step 4 Enter information in the following fields:

SettingField

Select a primary server from the drop-down list. Thelist contains the CTI servers that you previouslyconfigured on the UC Services window.

Primary

Select a secondary CTI server, if applicable.Secondary

Select a tertiary CTI server, if applicable.Tertiary

Desk Phone Control Mode

Configuration of Cisco Unified Presence to enable use of desk phone for calls

If you want Cisco Jabber to be able to control a desk phone, the following must be true:

• The desk phone registers to Cisco Unified Communications Manager.

• The Cisco Unified Communications Manager server has a CTI server.

• Cisco Unified Presence must be configured to enable Cisco Jabber to connect to a CTI server to controlthe phone.

This section describes how to configure Cisco Unified Presence to enable Cisco Jabber to connect to a CTIserver.

Enable control of desk phone from CTI




Procedure

Step 1 Select Cisco Unified Communications Manager Administration > Device > Phone.Step 2 Search for the desk phone in the Find and List Phones window.Step 3 Select the device name of the desk phone.Step 4 Check Allow Control of Device from CTI to enable CTI to control and monitor this device.Step 5 Select Save.

Using the computer as a phone

Enable control of computer as a phone from CTI

To enable control of the computer as a phone device from the computer telephony interface (CTI) in CiscoJabber:

Procedure

Step 1 Select User Management > End User in Cisco Unified Communications Manager Administration.Step 2 Select the user you want to add.Step 3 Select Add to User Group in the Permissions Information group in the End User Configuration window.Step 4 Search for "Standard CTI" in the Find and List User Groups window.Step 5 Select Standard CTI Enabled user group.

If the phone of the user is a Cisco Unified IP Phone 6900, 8900 or 9900 series model, select the StandardCTI Allow Control of Phones supporting Connected Xfer and conf user group also.

Step 6 Select Add Selected.Step 7 Select Save in the End User Configuration window.

Create a Cisco Unified Client Services Framework device for each user


To enable users to use phone features on their computers, you must create a new Cisco Unified Client ServicesFramework device for each user. This topic describes how to create this device for one user. To create thesedevices for many users, you can use the Bulk Administration Tool (BAT).

BAT performs bulk updates to the Cisco Unified Communications Manager database. For more informationabout BAT, see the Cisco Unified Communications Manager Bulk Administration Guide at the followingURL:

http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html



http://www.cisco.com/en/us/products/sw/voicesw/ps556/prod_maintenance_guides_list.html

Before You Begin

• Read the licensing requirements information, including the information on adjunct licensing.

• Read the guidelines on configuring the device name.

• Restriction: The auto-registration features in Cisco Unified CommunicationsManager are not supportedwith this application.

Procedure

Step 1 Select Cisco Unified Communications Manager Administration > Device > Phone.Step 2 Select Add New.Step 3 Select Cisco Unified Client Services Framework from the Phone Type menu.Step 4 Select Next.Step 5 Configure the following information:

a) Specify the device name in the Device Name field.b) Enter a descriptive name for the phone in the Description field. For example, enter

Richard-phone-on-computer.c) Select Default from the Device Pool list.d) Select Standard Client Services Framework from the Phone Button Template list.e) In the Product Specific Configuration Layout section, set Video Calling to Enabled.f) Configure all the required fields for your environment.g) If you want to use an adjunct license with this device, select the user ID from the Owner User ID listh) If you want to use an adjunct license with this device, select the device name of the Cisco Unified IP Phone

to associate with the client application from the Primary Phone list.i) Enter information in the Protocol Specific Information section, as follows:

DescriptionField

Select Standard Presence Group.Presence Group

Select Cisco Unified Client Services Framework - Standard SIPNon-Secure Profile.

Device Security Profile

Select Standard SIP Profile to specify the default SIP profile. SIP profilesprovide specific SIP information for the phone such as registration andkeep-alive timers, media ports, and Do Not Disturb control.

SIP Profile

Step 6 Select Save.Step 7 Select the Add a New DN link in the Association Information section that displays on the left side of the

window.Step 8 Configure the following information:

a) Enter the directory number and route partition for Cisco Jabber.b) Enter the caller ID in Display (Internal Caller ID), in the Line 1 on Device Device-Name section.c) In theMultiple Call/Call Waiting section, specify the maximum number of calls that can be presented

to the application in theMaximum Number of Calls field.



d) In theMultiple Call/Call Waiting section, specify the trigger after which an incoming call receives abusy signal in the Busy Trigger field.

The Busy Trigger setting works with theMaximum Number of Calls setting. For example, ifthe maximum number of calls is set to six and the busy trigger is set to six, the seventh incomingcall receives a busy signal.

Note

Step 9 Select Save.Troubleshooting Tips

• Cisco Unified Communications Manager reminds you that changes to line or directory number settingsrequire a restart. However, a restart is required only when you edit lines on Cisco Unified IP Phonesthat are running at the time of the modifications.

• The directory number that is configured for the Cisco Unified Client Services Framework device andthe Cisco Unified IP Phone must be identical. A directory number is configured with a partition, andyou assign a directory number to the Cisco Unified Client Services Framework device and the CiscoUnified IP Phone. This configuration causes the Cisco Unified Client Services Framework device toshare the line with the Cisco Unified IP Phone for this user.

Naming guidelines for Cisco Unified Client Services Framework devicesTo enable users to use phone features on their computers, you must create a new Cisco Unified Client ServicesFramework device for each user. When you create a Cisco Unified Client Services Framework device, ensurethat the device name conforms to these guidelines:

• Can contain uppercase and lowercase letters, and numerals.

• Contains no more than 15 characters.

No correlation to the username is required, but for convenience you might choose to include a username inthe device name. For example, you might use the device name CSFabaker.

Associate a new device with a userThis procedure contains information on how to associate a new device with an existing user.



Procedure

Step 1 Select Cisco Unified Communications Manager Administration > User Management > End User.Step 2 Search for the user in the Find and List Users window.Step 3 Select the user.Step 4 Select Device Association in the Device Information section.Step 5 Search for the device in the User Device Association window.Step 6 Select the device.Step 7 Select Save Selected/Changes.Step 8 Select Back to User from the menu in the Related Links navigation box at the top right of the window.Step 9 Select Go.Step 10 Verify that the device is listed in the Device Information section on the End User Configuration window.

Associate a line for a phone device with a user


You must ensure that user IDs are the same between LDAP and Cisco Unified Communications Manager.This is easier to accomplish if you have LDAP synchronization enabled in Cisco Unified CommunicationsManager.

Procedure

Step 1 Select Cisco Unified Communications Manager Administration > Device > Phone.Step 2 Search for the device for the user in the Find and List Phones window.Step 3 Select the name of the device.Step 4 Select the directory number for the device in the Association Information section that displays on the left

side of the window.Step 5 Select Associate End Users at the bottom of the window.Step 6 Search for the user in the Find and List Users window.Step 7 Select the user, then select Add Selected.Step 8 Select Save on the Directory Number Configuration window.

Configure the proxy listener and TFTP addressesYou must perform this task in Cisco Unified Presence.



Before You Begin

• Obtain the hostnames or IP addresses of the TFTP servers.

Cisco recommends that Cisco Jabber use TCP to communicate with the proxy server. If you use UDP tocommunicate with the proxy server, availability information for contacts in the Cisco Jabber contact listmight not be available for large contact lists.

Note

Procedure


Step 2 Select the Proxy Listener Default Cisco SIP Proxy TCP Listener.Step 3 Assign the primary (required) and backup (optional) TFTP server addresses in the fields provided. You can

enter an IP address or an FQDN (Fully Qualified Domain Name).Step 4 Select Save.


You can see the TFTP server addresses in the Server Healthwindow in Cisco Jabber (Help > Show SystemDiagnostics).

Configure proxy listener and TFTP addresses for Cisco Unified Presence

Before You Begin

Use this procedure for Cisco Unified Presence 8.6 and earlier. If you installed Cisco UnifiedCommunications Manager IM and Presence Service 9.0 or later, see Configure proxy listener and TFTPaddresses for IM and Presence Service, on page 58

Note

• Obtain the hostnames or IP addresses of the TFTP servers.

Cisco recommends that Cisco Jabber use TCP to communicate with the proxy server. If you use UDP tocommunicate with the proxy server, availability information for contacts in the Cisco Jabber contact listmight not be available for large contact lists.

Note



Procedure


Step 2 Select the Proxy Listener Default Cisco SIP Proxy TCP Listener.Step 3 Assign the primary (required) and backup (optional) TFTP server addresses in the fields provided. You can


You can see the TFTP server addresses in the Server Healthwindow in Cisco Jabber (Help > Show SystemDiagnostics).

Configure proxy listener and TFTP addresses for IM and Presence Service

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Legacy Applications > Settings.Step 2 Select the Proxy Listener Default Cisco SIP Proxy TCP Listener.Step 3 Assign the primary (required) and backup (optional) TFTP server addresses in the fields provided. You can


Configuration of security for callsIf your organization has a requirement for encrypted voice traffic on the network, the following configurationmust be performed:

1 Configure the Cisco Unified Communications Manager server in secure mode.

2 Configure the Certificate Authority Proxy Function (CAPF) server with secure tokens.

3 Create device security profiles.

4 Apply the device security profiles to the Cisco Unified Client Services Framework devices of your users.

The client application can be configured to authenticate to CAPF with a null string, or a string. If a string isused, the user is prompted to enter their authentication string when they connect to Cisco UnifiedCommunications Manager for the first time.

Administrators must distribute the authentication string to the users.

For more information about how to configure security for calls, see the Cisco Unified CommunicationsManager Security Guide:

http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_support_series_home.html



http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_support_series_home.html

Configure security for a device

Procedure

Step 1 Select Cisco Unified Communications Manager Administration > Device > Phone.Step 2 Search for the device in the Find and List Phones window.Step 3 Select the name of the device.Step 4 Select the security profile you require for the device from the Device Security Profile drop-down list.

Only the phone security profiles that are configured for the phone type and device protocol display.

Step 5 (Optional) If you select Cisco Unified Client Services Framework- Standard SIP Secure Profile, do thefollowing:a) Enter certification and authentication information in theCertification Authority Proxy Function (CAPF)

Information section.b) Select Generate String.c) Email the contents of the Authentication String field to the user.

Reset a device


Procedure

Step 1 Select Cisco Unified Communications Manager Administration > Device > Phone.Step 2 Search for the device for the user in the Find and List Phones window.Step 3 Select the name of the device.Step 4 Select the directory number for the device in the Association Information section that displays on the left

side of the window.Step 5 Select Reset on the Directory Number Configuration window.Step 6 Select Confirm Reset on the Device Reset window.

Voicemail

Configure Cisco Unity Connection serversCisco Unity Connection provides users with the ability to view, play, sort, and delete voicemail messagesfrom the application interface.


Deploy Cisco Jabber for Mac on-premisesVoicemail

Before You Begin

• Install and configure a supported release of Cisco Unity Connection.

• Integrate Cisco Unified Communications Manager and Cisco Unity Connection. Both servers must beinstalled and running to configure voicemail ports.

Procedure

Step 1 Set up a new or existing class of service in Cisco Unity Connection Administration to enable Internet MailAccess Protocol (IMAP) client access to voice messages.a) Expand Class of Service in the section on the left-hand side.b) Select Class of Service.c) Select the display name of the applicable class of service in the search results table, in the Search Class

of Service window.d) Check Allow Users to Use Unified Client to Access Voice Mail, under Features.e) CheckAllow Users to Access VoiceMail Using an IMAP Client, under Licensed Features. Then select

Allow Users to Access Message Bodies.f) Select Save.

Step 2 Configure the user:

• If the users are existing Cisco Unity Connection users, add them to the Cisco Unified CommunicationsManager database. Proceed to Step 4.

• If the user is a new user, add the user to the Cisco Unified Communications Manager database andproceed to Step 3.

Step 3 Create a Cisco Unity Connection user account on the Cisco Unity Connection server with a voice mailboxfor each user.

The user ID in Cisco Unity Connection does not need to match the user ID in Cisco Unified Presenceor in the client application. The client application has an independent voicemail ID, which is set inthe application Options dialog box. However, you might find it useful to have the same user IDsacross your Cisco Unified Communications system.

Note

Step 4 (Optional) Enable secure messaging as follows:a) Expand Class of Service in the section on the left-hand side.b) Select Class of Service.c) Select the display name of the applicable class of service in the search results table, in the Search Class

of Service window.d) Select the option you require from theRequire SecureMessaging drop-down list in theMessage Options

section.

Step 5 (Optional) Specify how to handle unidentified caller message security for your users as follows:a) Expand Users in the section on the left-hand side.b) Select Users.c) Select the alias of a user.d) Select Edit >Message Settings.e) CheckMark Secure in the Unidentified Callers Message Security section.



Step 6 If one does not already exist, specify a web application password in Cisco Unity Connection for the applicableuser accounts.Troubleshooting Tips

• Users may need to enter their voicemail credentials in the client application if synchronization withCisco Unified Presence is not enabled.

• If the server can be contacted and the user credentials are correct, but voicemail messages are notdownloaded, do the following:

◦Check the configuration of port 7993.

◦Make sure that Cisco Unity Connection is listening on port 7993.

◦Check the firewall configuration. Use Telnet from a remote computer to the computer runningCisco Jabber, and make sure that you can connect to the firewall. Allow the Cisco Unified ClientServices Framework executable file (cucsf.exe) to establish IMAP network connections usingTCP, TLS, and SSL at the appropriate server and port. For information about the ports and protocolsused by the client application and Cisco Unified Client Services Framework, see the release notes:

http://www.cisco.com/en/US/products/ps6844/prod_release_notes_list.html

Add a Voicemail ServiceAllow users to receive voice messages

Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Select User Management > User Settings > UC Service.

The Find and List UC Services window opens.Step 3 Select Add New.

The UC Service Configuration window opens.Step 4 In the Add a UC Service section, select Voicemail from the UC Service Type drop-down list.Step 5 Select Next.Step 6 Specify details for the voicemail service as follows:

Product Type

Select Unity Connection.

Name

Enter a descriptive name for the server, for example, PrimaryVoicemailServer.

Description

Enter an optional description.



http://www.cisco.com/en/us/products/ps6844/prod_release_notes_list.html

Hostname/IP Address

Enter the address of the voicemail server in one of the following formats:

• Hostname

• IP Address

• FQDN

Port

You do not need to specify a port number. By default, the client always uses port 443 to connect to thevoicemail server. For this reason, any value you specify does not take effect.

Protocol Type

You do not need to specify a value. By default, the client always uses HTTPS to connect to the voicemailserver. For this reason, any value you specify does not take effect.

Step 7 Select Save.

What to Do Next

Add the voicemail service to your service profile.

Apply Voicemail Service

After you add a voicemail service on Cisco Unified Communications Manager, you must apply it to a serviceprofile so that the client can retrieve the settings.

Before You Begin

Create a service profile if none already exist or you require a separate service profile for voicemail.

Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Select User Management > User Settings > Service Profile.

The Find and List Service Profiles window opens.Step 3 Find and select your service profile.

The Service Profile Configuration window opens.Step 4 Configure the Voicemail Profile section as follows:

a) Select up to three services from the following drop-down lists:

• Primary

• Secondary

• Tertiary



b) To synchronize credentials with the voicemail service, select Unified CM - IM and Presence fromtheCredentials source for voicemail service drop-down list.Unified CM - IM and Presence uses the instant messaging and presence credentials to log in to thevoicemail service. As a result, users do not need to enter their credentials for voicemail services in theclient.

Do not selectWeb conferencing. This option uses the conferencing credentials to log in to thevoicemail service. You cannot currently synchronize with conferencing credentials.

Note

Step 5 Select Save.

Add a Mailstore ServiceThe mailstore service provides users with visual voicemail capabilities.

Before You Begin

Apply a Voicemail Service

Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Select User Management > User Settings > UC Service.

The Find and List UC Services window opens.Step 3 Select Add New.Step 4 In theAdd a UC Service section, from theUC Service Type drop-down list, selectMailStore and then click

Next.Step 5 Provide details for the mailstore service as follows:

• Name—Enter a descriptive name for the server, for example, PrimaryMailStoreServer.

• Hostname/IP Address—Enter the IP address or the Fully Qualified Domain Name (FQDN) of themailstore server.

• Port—You do not need to specify a port number. By default, the client always uses port 443 to connectto the mailstore server. For this reason, any value you specify does not take effect.

• Protocol Type—You do not need to specify a value. By default, the client always uses HTTPS to connectto the mailstore server. For this reason, any value you specify does not take effect.

Step 6 Select Save.

What to Do Next

Apply Mailstore Service, on page 64



Apply Mailstore Service

After you add a mailstore service on Cisco Unified Communications Manager, you must apply it to a serviceprofile so that the client can retrieve the settings.

Before You Begin

Add a Mailstore Service, on page 63

Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Select User Management > User Settings > Service Profile.

The Find and List Service Profiles window opens.

Step 3 Find and select your service profile.The Service Profile Configuration window opens.

Step 4 Configure theMailStore Profile section as follows:a) Select up to three services from the following drop-down lists:

• Primary

• Secondary

• Tertiary

b) Specify appropriate values for the following fields:

• Inbox Folder

• Trash Folder

• Polling Interval

Step 5 Select Save.

What to Do Next

Configure Retrieval and Redirection

Configure Retrieval and RedirectionConfigures retrieval so that users can access voicemail messages in the client interface. Configure redirectionso that users can send incoming calls to voicemail. You configure retrieval and redirection on Cisco UnifiedCommunications Manager.



Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Configure the voicemail pilot.

a) Select Advanced Features > Voice Mail > Voice Mail Pilot.The Find and List Voice Mail Pilots window opens.

b) Select Add New.The Voice Mail Pilot Configuration window opens.

c) Specify the appropriate details on the Voice Mail Pilot Configuration window.d) Select Save.

Step 3 Add the voicemail pilot to the voicemail profile.a) Select Advanced Features > Voice Mail > Voice Mail Profile.

The Find and List Voice Mail Mail Profiles window opens.b) Specify the appropriate filters in the Find Voice Mail Profile where Voice Mail Profile Name field and

then select Find to retrieve a list of profiles.c) Select the appropriate profile from the list.

The Voice Mail Pilot Configuration window opens.d) Select the voicemail pilot from the Voice Mail Pilot drop-down list.e) Select Save.

Step 4 Specify the voicemail profile in the directory number configuration.a) Select Device > Phone.

The Find and List Phones window opens.b) Specify the appropriate filters in the Find Phone where field and then select Find to retrieve a list of

devices.c) Select the appropriate device from the list.

The Phone Configuration window opens.d) Locate the Association Information section.e) Select the appropriate device number.

The Directory Number Configuration window opens.f) Locate the Directory Number Settings section.g) Select the voicemail profile from the Voice Mail Profile drop-down list.h) Select Save.

Set a Voicemail Credentials SourceYou can specify a voicemail credentials source for users.



Procedure

Step 1 Open the Cisco Unified CM Administration interface.Step 2 Select User Management > User Settings > Service Profile.Step 3 Select the appropriate service profile to open the Service Profile Configuration window.Step 4 In the Voice mail Profile section, select Unified CM - IM and Presencefrom the Credentials source for

voicemail service drop-down list.Do not selectWeb Conferencing from the Credentials source for voicemail service drop-downlist. You cannot currently use conferencing credentials as a credentials source for voicemail services.

Note

The user's instant messaging and presence credentials match the user's voicemail credentials. As a result, usersdo not need to specify their voicemail credentials in the client user interface.

What to Do Next

There is no mechanism to synchronize credentials between servers. If you specify a credentials source,you must ensure that those credentials match the user's voicemail credentials.

For example, you specify that a user's instant messaging and presence credentials match the user's CiscoUnity Connection credentials. The user's instant messaging and presence credentials then change. Youmust update the user's Cisco Unity Connection credentials to reflect that change.

Important

Meetings

Configure the Cisco WebEx Meetings ServerThe first step in setting up integration between Cisco WebEx Meetings Server and the client is to install andconfigure Cisco WebEx Meetings Server. You should refer to the Cisco WebEx Meetings Server productdocumentation for installation and configuration procedures.

Cisco WebEx Meetings Server Install and Upgrade Guides

Configure Cisco WebEx Meeting Server for Cisco Unified Presence

Before You Begin

Use this procedure for Cisco Unified Presence 8.6 and earlier. If you installed Cisco Unified CommunicationsManager IM and Presence Service 9.0 or later, see Configure the Cisco WebEx Meeting Server in CiscoUnified CM, on page 67.


Deploy Cisco Jabber for Mac on-premisesMeetings

http://www.cisco.com/en/US/products/ps12732/prod_installation_guides_list.html

Procedure

Step 1 Select Cisco Unified Presence Administration > Application > Cisco Unified Personal Communicator> Conferencing Server.

Step 2 Select Add New.Step 3 Enter information in the following fields.

DescriptionField Name

Enter the name of the conferencing server. The nameshould be descriptive enough for you to instantlyrecognize it.

Name

(Optional) Enter a description that helps you todistinguish between conferencing servers. You canchange the description at any time.

Description

Enter the site URL for CiscoWebExMeetings Server.Hostname/IP Address

Leave the default value.Port

Select HTTPS: from the drop-down list.Protocol

SelectWebEx from the drop-down list.Server Type

Step 4 Select Save.

Configure the Cisco WebEx Meeting Server in Cisco Unified CM

Procedure

Step 1 In Cisco Unified Communications Manager, select User Management > User Settings > UC Service.Step 2 Select Add New.Step 3 Select Conferencing from the UC Service drop-down list.Step 4 Enter information in the following fields.


Select Conferencing as the UC service type.UC Service Type

SelectWebExProduct Type

Enter the name of the conferencing service. The name should bedescriptive enough for you to instantly recognize it. Maximum characterlength is 50 (ASCII only).

Name




(Optional) Enter a description that helps you to distinguish betweenconferencing services. You can change the description at any time.Maximum character length is 100.

Description

Address of the conferencing service.May take one of the following forms:

• Hostname

• IP address

• FQDN

This field value must exactly match the hostname, IP address, or FQDNof the associated directory service. If the address of the directory servicechanges, change this field value accordingly.

Allowed values are:

• Alphanumeric (a-zA-Z0-9)

• period (.)

• backslash (\)

• dash (-)

• underscore (_)

Hostname/IP Address

Enter the port for the conferencing service so that users can contact theservice when they sign in to web conferences. Allowable values are 1 to65535. Default is 80.Note • Use port 80 for HTTP and port 443 for HTTPS

communications

• This value must match the available port on theconferencing service. Change the port number only if itconflicts with other services.

Port

SelectHTTPSProtocol

Step 5 Select Save.An Add Successful message appears and the conferencing service is created in the Unified CommunicationsManager database.



Add Conferencing Profile to Service Profile

Procedure

Step 1 Select Cisco Unified Communication Manager > User Management > User Settings > Service ProfileStep 2 Select the service profile.Step 3 Go to Conferencing Profile.Step 4 Enter information in the following fields:

SettingField

Select a primary directory server from the drop-downlist. The list contains the conferencing servers thatyou previously configured on the UC Serviceswindow.

Primary

Select a secondary directory server, if applicable.Secondary

Select a tertiary directory server, if applicable.Tertiary

Specify how the conferencing server associated withthis profile supports TLS connections. This setting isfor TLS verification of the conferencing servers listedfor this conferencing profile.Select from one of the following options:

• AnyCertificate:Cisco Jabber would accept allvalid certificates. (This is the default setting)

• Self Signed or Keystore: Cisco Jabber wouldaccept any certificate that is self-signed, or onefor which the signing Certificate Authority isin the local trust store

A keystore is a file that storesauthentication and encryption keys.

Note

• KeystoreOnly:Cisco Jabber would accept onlycertificates that are defined in the keystore.When you select this option, you must importa certificate or its Certificate Authority signingcertificate into the local trust store.

Server Certificate Validation

Distribute the Cisco Jabber for Mac clientVisit the Cisco Software Center to download the Cisco Jabber for Mac client.


Deploy Cisco Jabber for Mac on-premisesDistribute the Cisco Jabber for Mac client

http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm

Upgrading in theMac OSX environment is performed automatically by the application, with permission fromthe user.


Deploy Cisco Jabber for Mac on-premisesDistribute the Cisco Jabber for Mac client

Cisco Jabber for Mac Installation and Configuration …€¦ · Cisco Jabber for Mac Installation...

Documents

Transcript of Cisco Jabber for Mac Installation and Configuration …€¦ · Cisco Jabber for Mac Installation...