Cisco IPICS Installation and Upgrade Guide Release 4.6(1) Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL-29674-01 TTHE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1), Copyright © 2013 Cisco Systems, Inc. All rights reserved. CONTENTS Preface vii CHAPTER 1 Overview 1-1 Installation Overview 1-1 Installed Components 1-3 System Requirements 1-3 CHAPTER 2 Installing Cisco IPICS 2-1 Before You Begin 2-1 Obtaining the IP Addresses for Your Cisco IPICS System 2-2 Preinstallation Checklist 2-3 Installing the IPICS Operating System on a Multiservices Platform Series Server 2-7 Installing the Operating System from a Flash Drive 2-8 Installing the Operating System from a DVD 2-9 Configuring Server Parameters on the Multiservices Platform Series Server 2-10 Installing the Cisco IPICS Server Software 2-13 Restarting or Shutting Down the Server 2-17 Preparing to Use Cisco IPICS 2-19 Checking the Installation 2-19 Managing Your Licenses and Certificates 2-20 Obtaining Your License File 2-21 Uploading the Cisco IPICS License Files 2-23 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 iii Contents Viewing the License Summary Information 2-25 Tracking Your License Usage 2-26 Managing Time-Bound Licenses 2-30 Managing Server Certificates 2-32 Backing Up Server Certificates and Stores 2-33 Customizing and Generating a Self-Signed Server Certificate 2-34 Installing Third Party Certificates on the Cisco IPICS Server 2-36 Requesting a Third Party Certificate 2-37 Installing a Third Party Certificate 2-38 Converting DER Formatted Certificates to PEM Format 2-40 Modifying Network Settings 2-40 CHAPTER 3 Upgrading Cisco IPICS 3-1 Before You Begin 3-1 Performing a Cisco IPICS Server Software Upgrade 3-2 Upgrading from Cisco IPICS Release 4.5(1) or 4.5(2) to Cisco IPICS Release 4.6(1) in a Deployment without High Availability 3-3 Upgrading from Cisco IPICS Release 4.5(1) or 4.5(2) to Cisco IPICS Release 4.6(1) in a Deployment with High Availability 3-5 Using the Cisco Incident Dispatch Console with Cisco IPICS 4.6 3-9 CHAPTER 4 Installing or Upgrading the UMS 4-1 Configuring the Multiservices Platform Series Server for Your Environment 4-1 Installing or Upgrading the UMS Software 4-5 CHAPTER 5 Installing or Upgrading the ISSIG 5-1 ISSIG Overview 5-2 Configuring the Multiservices Platform Series Server for Your Environment 5-2 Installing or Upgrading the ISSIG Software 5-5 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) iv OL-29674-01 Contents Provisioning the ISSIG on the Cisco IPICS Server 5-9 CHAPTER 6 Installing the DFSIG 6-1 DFSIG Overview 6-1 Configuring the Multiservices Platform Series Server for Your Environment 6-2 Installing the DFSIG Software 6-5 CHAPTER 7 Installing Language Packs for Cisco IPICS 7-1 CHAPTER 8 Uninstalling or Rolling Back the Cisco IPICS Server Software 8-1 Uninstalling the Cisco IPICS Software from the Server 8-2 Uninstalling the Cisco IPICS Server Software Remotely 8-4 Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1) 8-5 CHAPTER 9 Using a Virtual Machine with Cisco IPICS 9-1 Installing VMWare ESX or ESXi on a Device 9-1 Installing VMware ESX or ESXi on a Cisco UCS B-Series Server 9-2 Installing VMware ESX or ESXi on a Cisco UCS C-Series Server 9-2 Installing VMware ESX or ESXi on a Cisco UCS E-Series Server 9-2 Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM by Deploying the OVF Template 9-3 Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually 9-4 Obtaining the ISO Image for the Cisco IPICS Operating System 9-5 Configuring the Virtual Machine 9-6 CHAPTER 10 Troubleshooting Cisco IPICS Installation Issues 10-1 No Network Connectivity After Connecting the Ethernet Cable to Interface 1 on the Server 10-2 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 v Contents The Cisco IPICS Operating System Detects Unsupported Hardware 10-2 The Server Cannot Allocate Partitions 10-3 Troubleshooting “Bad Interpreter: Permission Denied” Errors 10-3 Troubleshooting “Permission Denied” Errors 10-4 You Cannot Connect to the Server By Using Your Browser 10-4 Cisco IPICS Displays an Authorization Error 10-9 Cisco IPICS Displays “Server Initializing” for More than 1 Hour 10-11 INDEX Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) vi OL-29674-01 Preface Introduction This guide provides you with the information that you need to install, upgrade, and uninstall the Cisco IP Interoperability and Collaboration System (Cisco IPICS) release 4.6(1). It also explains how to install the Unified Media Service (UMS, IPICS ISSI Gateway (ISSIG) and Digital Fixed Station Interface Gateway (DFSIG), which are optional components of Cisco IPICS, and how to configure a virtual machine (VM) for use with Cisco IPICS. For information about installing the Cisco IPICS Dispatch Console, see Cisco IPICS Dispatch Console User Guide. Audience This guide is intended for system administrators who install, configure, operate, and upgrade Cisco IPICS. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 vii Preface Organization This document is organized as follows: Chapter 1, “Overview” Provides an overview of the Cisco IPICS software installation and related information Chapter 2, “Installing Cisco IPICS” Describes how to install the Cisco IPICS operating system and the Cisco IPICS server software. Chapter 3, “Upgrading Cisco IPICS” Describes ho to upgrade the Cisco IPICS server software. Chapter 4, “Installing or Upgrading Describes how to install the UMS. the UMS” Chapter 5, “Installing or Upgrading Describes how to install the ISSIG. the ISSIG” Chapter 6, “Installing the DFSIG” Describes how to install the DFSIG. Chapter 7, “Installing Language Packs for Cisco IPICS” Describes how to install Cisco IPICS language packs, which you can use to localize the Cisco IPICS Administration Console and the IDC Chapter 8, “Uninstalling or Rolling Back the Cisco IPICS Server Software” Describes how to uninstall the Cisco IPICS server software components. Chapter 9, “Using a Virtual Machine Describes how to configure a virtual machine for Cisco IPICS. The Cisco with Cisco IPICS” IPICS application, UMS, ISSIG, and DFSIG can be installed and run on a virtual machine. Chapter 10, “Troubleshooting Cisco IPICS Installation Issues” Provides troubleshooting tips for server installation issues that you may encounter. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) viii OL-29674-01 Preface Document Notes and Conventions This document uses the following conventions for instructions and information: Note Caution Means reader take note. Notes contain helpful suggestions or references to materials not contained in this manual. This caution symbol means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data. Table 1 Conventions Convention Description boldface font Commands and keywords appear in boldface. italic font Command input for which you supply the values appear in italics. [ ] Optional keywords and default responses to system prompts appear within square brackets. {x | x | x} A choice of keywords (represented by x) appears in braces separated by vertical bars. You must select one. string A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks. ^ or Ctrl Represent the key labeled Control. For example, when you read ^D or Ctrl-D, you should hold down the Control key while you press the D key. screen font boldface screen font italic screen font Examples of information displayed on the screen. Information that you must enter is in boldface font. screen Arguments for which you supply values are in italic screen font. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 ix Preface Obtaining Documentation, Obtaining Support, and Security Guidelines For information about obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation. This document also lists all new and revised Cisco technical documentation. It is available at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) x OL-29674-01 CH A P T E R 1 Overview This chapter provides an overview of the Cisco IPICS software installation. It also contains information about system requirements for the Cisco IPICS server software and the Cisco IPICS Dispatch Console (IDC) application. This chapter includes the following sections: • Installation Overview, page 1-1 • Installed Components, page 1-3 • System Requirements, page 1-3 Installation Overview You can install the Cisco IPICS software on a supported Cisco Physical Security Multiservices Platform Series server. For information about supported servers, see Cisco IPICS Compatibility Matrix at http://www.cisco.com/en/US/products/ps6718/ products_device_support_tables_list.html. The software that installs the Cisco IPICS server software is mostly automated, but it does require some user interaction to complete. Table 1-1 describes the general steps that you need to perform to set up the installation of the Cisco IPICS server software. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 1-1 Chapter 1 Overview Installation Overview Table 1-1 Cisco IPICS Server Software Setup Step Description 1. End user license agreement This window displays the end user license agreement for the Cisco IPICS server software. You must accept this agreement to continue with the installation. 2. Password creation for the ipics user This procedure permits you to create a password for the ipics user, who performs all administrative tasks in the Cisco IPICS Administration Console. 3. Password creation for the ipicsadmin user This procedure enables you to create a password for the ipicsadmin user, who has the Cisco IPICS operating system privileges that are related to the database server files and folders. 4. Package installation This window displays the progress of the installation and the Cisco IPICS files that the installer writes to the server. This installation also installs the Cisco IPICS policy engine (hereafter referred to as policy engine). 5. Uninstaller creation This procedure creates a utility to uninstall the Cisco IPICS software. 6. Option to restart the server This procedure allows you to choose between restarting the server immediately or at a later time. For more information about the steps that you need to follow to install the Cisco IPICS server software, see the “Installing the Cisco IPICS Server Software” section on page 2-13. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 1-2 OL-29674-01 Chapter 1 Overview Installed Components Installed Components The Cisco IPICS installation includes the Cisco IPICS server software, with the following components: • Cisco IPICS Administration Console • Cisco IPICS Data Store (IBM Informix Dynamic Server) • Cisco IPICS Web Application Server (tomcat service) System Requirements For the list of hardware and software components that Cisco supports for use with Cisco IPICS, see Cisco IPICS Compatibility Matrix at http://www.cisco.com/ en/US/products/ps6718/products_device_support_tables_list.html. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 1-3 Chapter 1 Overview System Requirements Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 1-4 OL-29674-01 CH A P T E R 2 Installing Cisco IPICS This chapter describes the procedures that you need to follow to install the Cisco IPICS operating system and the Cisco IPICS server software. This chapter includes the following sections: • Before You Begin, page 2-1 • Installing the IPICS Operating System on a Multiservices Platform Series Server, page 2-7 • Configuring Server Parameters on the Multiservices Platform Series Server, page 2-10 • Installing the Cisco IPICS Server Software, page 2-13 • Restarting or Shutting Down the Server, page 2-17 • Preparing to Use Cisco IPICS, page 2-19 • Managing Server Certificates, page 2-32 • Modifying Network Settings, page 2-40 Before You Begin This section describes the activities that you must follow to prepare for the Cisco IPICS operating system and server installations and includes the following topics: • Obtaining the IP Addresses for Your Cisco IPICS System, page 2-2 • Preinstallation Checklist, page 2-3 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-1 Chapter 2 Installing Cisco IPICS Before You Begin Obtaining the IP Addresses for Your Cisco IPICS System To facilitate communications between your users, your Cisco IPICS system requires a pool of IP addresses that can be reached by all users in your network domain. The Cisco IPICS server requires a static, local IP address that is advertised on the network. Cisco IPICS end points, such as the IDC or Cisco Unified IP Phone, must have the static address of the Cisco IPICS server to maintain communications. Because Cisco IPICS converts analog push-to-talk (PTT) radio traffic to IP traffic, each radio channel gets mapped to an IP multicast address. Similarly, in hoot’n’holler systems, each talk group gets mapped to an IP multicast address. Users on IP-connected devices, such as the IDC, can participate in these channels by connecting via a multicast IP address or by using a unicast remote connection through the Session Initiation Protocol (SIP). Cisco IPICS requires a multicast address for each of the following activities: • Creating a PTT channel • Creating a talk group in a hoot’n’holler system • Activating a virtual talk group (VTG) • Connecting a dial user into a channel or VTG For ease of allocating IP addresses, it is helpful to obtain a subnet of IP addresses from which you can configure the devices that are part of that subnet. Note Cisco recommends that you specifically configure the Loopback0 interface when there is more than one IP path to the RMS. However, you may configure an interface other than Loopback0 if specific criteria are met. For details about this criteria, see the “Configuring the Cisco IPICS RMS Component” appendix in Cisco IPICS Server Administration Guide. For information about configuring and using IP addresses with Cisco IPICS, and for more information about the RMS, refer to the “Configuring the Cisco IPICS RMS Component” appendix in Cisco IPICS Server Administration Guide. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-2 OL-29674-01 Chapter 2 Installing Cisco IPICS Before You Begin Preinstallation Checklist Before you begin the installation, make sure that you perform the following tasks: Preinstallation Tasks Checkoff For Cisco Multiservices Platform Series servers, Attach the power cable, monitor, keyboard, and mouse. Check that the power cords on your server and monitor are securely attached and plugged in to a power source. Check that your monitor cable connector is appropriate for the connector on the server. Video Graphics Array (VGA) analog and Digital Visual Interface (DVI) are common connector types but are not compatible with each other without the proper adapter. Attach an Ethernet network cable to the Ethernet 0 (eth0) port on your server. Note You must connect your network cable to the eth0 interface on your server. Generally, for servers that label their Ethernet interfaces as NIC 1 and NIC 2, connect the Ethernet cable to the NIC 1 interface; this interface is usually the eth0 interface. For servers that label their Ethernet interfaces as 1 and 2, consult the product documentation that you received with your server to determine how the server labels its interfaces. In all cases, it is a good practice to verify the location of the eth0 interface on your specific server before you proceed. Make sure that you have at least 60 GB of hard disk space available in your Cisco IPICS server. Cisco strongly recommends that you attach an uninterruptible power supply (UPS) to your system and ensure that the UPS is operating correctly. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-3 Chapter 2 Installing Cisco IPICS Before You Begin Preinstallation Tasks (continued) Checkoff Before you begin the installation process, check the power settings on your monitor to make sure that the display is not configured with any timeout values. Note If your display times out while you are performing the installation and you can no longer see the progress on your monitor, move your mouse to restore the display. Make sure that you do not press any keys on the keyboard in an effort to restore your display. Pressing keys without being able to view the information that displays on your monitor can cause undesirable results. Ensure that you have obtained the IP address, subnet mask, default gateway, and DNS server (optional) information for the Cisco IPICS server from your network administrator. Check that you have obtained the Media Access Control (MAC) address for the eth0 interface of the Cisco IPICS server. Cisco IPICS uses the MAC address of the server to validate the Cisco IPICS license. Note To obtain the MAC address, enter the following command. The HWaddr field in the command output contains the MAC address for the eth0 interface: [root]# ifconfig eth0 Alternatively, you can start the Cisco IPICS Administration Console from a web browser. When the License Management page appears, the MAC address is displayed near the top of the page. In a system with multiple network interface cards (NICs), Cisco IPICS always uses the eth0 MAC address to validate the license, even if eth0 is disabled. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-4 OL-29674-01 Chapter 2 Installing Cisco IPICS Before You Begin Preinstallation Tasks (continued) Checkoff If your network uses the Network Time Protocol (NTP), obtain the IP address or DNS name of the NTP server. You can install a third party certificate to replace the Cisco IPICS self-signed certificate. For more information about installing third party certificates, see the “Installing Third Party Certificates on the Cisco IPICS Server” section on page 2-36. A third-party certificate is not required for use with Cisco IPICS. To ensure the functionality of Cisco IPICS, you should also perform the following tasks either before or after you install Cisco IPICS: Tasks Checkoff Ensure that you have obtained multicast IP addresses for channels and VTGs. (If you do not have access to this information, contact your system administrator.) If your deployment includes the RMS component, check to make sure that the T1/E1 interfaces on the RMS are connected via a loopback cable. This cable is a short-length crossover cable with the following pinouts: 1-4, 2-5, 4-1, 5-2. One end of the cable is attached to each of the RJ-45 connectors on the T1/E1 interfaces for the RMS device. The connected interfaces are used for voice signaling and media for any SIP-based connections with Cisco IPICS. If you do not have a crossover cable, contact your authorized Cisco support representative for assistance to obtain one. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-5 Chapter 2 Installing Cisco IPICS Before You Begin If you use the Cisco IPICS dial engine, which controls dial-in and dial-out functionality, ensure that you complete the following tasks before you use the dial engine: Tasks Checkoff Ensure that you have the IP address, SIP listening port, and preferred transport type of your SIP provider. Support for SIP-based dial functionality is provided via Cisco Unified Communications Manager or a Cisco router that runs a supported version of Cisco IOS and Cisco Unified Communications Manager Express as the SIP provider. The policy engine requires that a SIP provider be configured in the customer network. For information about configuring a SIP provider, see Cisco IPICS Server Administration Guide. If your SIP provider is Cisco Unified Communications Manager, determine the authentication credentials that Cisco IPICS uses when it initiates a call into Cisco Unified Communications Manager. Authentication is not required with Cisco Unified Communications Manager Express. Be sure that your SIP provider uses a supported version of Cisco Unified Communications Manager, Cisco IOS or Cisco Unified Communications Manager Express. See Cisco IPICS Compatibility Matrix for a current list of supported hardware and software for use with Cisco IPICS. Determine how your Cisco IPICS system fits into the dial plan of your SIP provider. For example, determine the range of directory numbers (DNs) that must be routed from the SIP provider to the Cisco IPICS system. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-6 OL-29674-01 Chapter 2 Installing Cisco IPICS Installing the IPICS Operating System on a Multiservices Platform Series Server Installing the IPICS Operating System on a Multiservices Platform Series Server If you are installing Cisco IPICS on a Multiservices Platform Series server, the Cisco IPICS operating system is already installed. If you need to reinstall the IPICS operating system, follow the instructions in these sections: • Installing the Operating System from a Flash Drive, page 2-8—Use this procedure if you are installing the operating system on a Multiservices Platform 2RU server and have the optional USB flash drive that was provided with the server. The flash drive contains the operating system. • Installing the Operating System from a DVD, page 2-9—Use this procedure to download the operating system, create an Cisco IPICS operating system installation DVD, and install the operating system from the DVD. If you are using a Multiservices Platform 2RU server, you must attach an external USB DVD player. See Cisco IPICS Compatibility Matrix for a list of supported drives. Before you begin, insert the hard drives into the drive bays, if necessary. MSP-1RU: Insert the drives from left to right. The drive numbering is as follows (looking at the front of the server): 1--2--3--4 MSP-2RU: Insert the drives from left to right. The drive numbering is as follows (looking at the front of the server): 3--6--9--12 2--5--8--11 1--4--7--10 Note If you have issues with RAID after following the procedure in this section, reset the BIOS/RAID settings back to the factory defaults, and verify that the disk drives are in the correct bays. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-7 Chapter 2 Installing Cisco IPICS Installing the IPICS Operating System on a Multiservices Platform Series Server Installing the Operating System from a Flash Drive The Multiservices Platform 2RU server may be provided with an optional USB flash drive that contains the Cisco IPICS operating system. To reinstall the operating system from this flash drive, follow these steps: Procedure Step 1 Put the USB flash drive in the lower USB port on the back of the Multiservices Platform server. Step 2 If the Multiservice Platform server is powered on, reboot it. Otherwise, power it on. Step 3 When you see the SuperMicro splash screen, press the F11 key repeatedly until the next screen appears. This screen displays RAID controller information and a list of hard drives. After a short time, a menu for selecting the boot device appears. Step 4 From the boot device selection menu, use the arrow keys to highlight the USB flash drive, then press Enter. The flash drive typically is the option that starts with “USB:.” The system continues booting from the flash drive. Step 5 When you see the prompt that asks if you want to continue installing the operating system, type y and press Enter. The operating system installs. Step 6 When you see the screen that displays “Congratulations, the installation is complete,” remove the flash drive from the Multiservices Platform server, then click Reboot. Step 7 When the login prompt appears, follow the instructions in the “Configuring Server Parameters on the Multiservices Platform Series Server” section on page 2-10. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-8 OL-29674-01 Chapter 2 Installing Cisco IPICS Installing the IPICS Operating System on a Multiservices Platform Series Server Installing the Operating System from a DVD You can download the Cisco IPICS operating system installation, create an installation DVD, and reinstall the operating from this DVD. If you are using a Multiservices Platform 2RU server, you must attach an external USB DVD player to do so. See Cisco IPICS Compatibility Matrix for a list of supported drives. To reinstall the operating system from a DVD, follow these steps: Procedure Step 1 From a client PC, take these actions to obtain the operating system and create an operating system installation disk: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid= 280723930&flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to the operating system iso image (the file with the .iso extension). Follow the onscreen instructions to download the operating system to your local drive. d. Burn the file to a DVD. This disk is your Cisco IPICS operating system installation disk. Step 2 (MSP-2RU only) Attach an external USB DVD player to the lower USB port on the back of the Multiservices Platform server. Step 3 Power on the server and immediately put the Cisco IPICS operating system installation disk into the DVD player (internal player for the MSP-1RU or external player for the MSP-2RU). The server boots from the inserted disk. (If the server does not boot from the inserted disk, power cycle the server.) Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-9 Chapter 2 Installing Cisco IPICS Configuring Server Parameters on the Multiservices Platform Series Server Step 4 When you see the prompt that asks if you want to continue installing the operating system, type y and press Enter. If you see a prompt to select a driver during the operating system reinstallation, it may mean that the DVD player is not compatible. If you see a prompt to choose a language, power off the DVD player, power it back on, and then reboot the server to try the install again. Step 5 When you see the screen that displays “Congratulations, the installation is complete,” remove the disc from the DVD player, then click Reboot. Step 6 When the login prompt appears, follow the instructions in the “Configuring Server Parameters on the Multiservices Platform Series Server” section on page 2-10. Configuring Server Parameters on the Multiservices Platform Series Server If you are installing Cisco IPICS on the Multiservices Platform Series server, the Cisco IPICS operating system is already installed; however, you must configure server parameters, including hostname, IP address, gateway, netmask, and root password. The default IP address is: 192.168.1.2. If you need to reinstall the operating system for any reason, follow the instructions in the “Installing the IPICS Operating System on a Multiservices Platform Series Server” section on page 2-7. To configure server parameters on the Cisco IPICS server, follow these steps: Procedure Step 1 Log in to the server as root with the default password ipics, and go to the /usr/local/bin directory. Step 2 Execute the reconfigure command: [root]# reconfigure Step 3 Enter yes to the prompt that asks whether you want to reboot the server: **** Reconfigure Server **** Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-10 OL-29674-01 Chapter 2 Installing Cisco IPICS Configuring Server Parameters on the Multiservices Platform Series Server To reconfigure this server from the default to custom values, the server must reboot. If you continue, when the server boots up, you will be presented with the firstboot screen and be required to enter the server networking information, date and time, optionally the NTP server information, and also the root and GRUB passwords. Responding "yes" to the prompt below will reboot this server. Do you want to reboot your server now? (yes/no) : [no] yes Step 4 At the Welcome window, click Forward to display the Root Password window. Step 5 Enter and confirm a password for the root user. The root user has access to all the files in the Cisco IPICS server. Cisco IPICS requires that you use strong passwords that include the following elements: • Minimum of 8 characters • At least one upper case letter • At least one lower case letter • At least one number • At least one of the following special characters: @[]^_`!"#$%&'()*+,-./:;{<|=}>~? If you need to change the root password at a later date, you can log in to the Cisco IPICS server as the root user and change it by using the reset_pw command. For more information, refer to the “Using the Cisco IPICS CLI Tools and Service Commands” chapter in the Cisco IPICS Troubleshooting Guide. Step 6 Click Forward. Step 7 Enter and confirm a password for the GRUB (boot loader) menu. The boot loader password enables access to the boot loader menu, which allows a system administrator to boot the server into single-user mode. Single-user mode is required to recover a lost root password. This password must contain at least 6 characters. Step 8 Click Forward. Step 9 Enter a system user name and user full name, and enter and confirm a password. You must create a system user to perform administrative tasks on your server. This user password has the same requirements as the root password. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-11 Chapter 2 Installing Cisco IPICS Configuring Server Parameters on the Multiservices Platform Series Server Step 10 Click Forward to open the Network Setup window. Step 11 In the Interface Settings area, enter the fully-qualified hostname, IP address, subnet mask, and gateway information in the specified fields. Step 12 (Optional) In the DNS Information area in the Network Setup window, enter the IP address of your primary and secondary DNS server. Step 13 Click Forward to open the Timezone window. Step 14 Choose the correct time zone for your area from the choices in the selection list. If your system clock uses Universal Coordinated Time (UTC), make sure that you check the System Clock uses UTC check box. Cisco recommends that UTC be used, particularly in Cisco IPICS deployments that include high availability. Step 15 Click Forward to open the Date and Time window. Step 16 Choose one of the following options to set the system date and time: • If your network uses the Network Time Protocol (NTP), choose the Network Time Protocol tab and check the Enable Network Time Protocol check box. Enter the name or IP address of an NTP server in the Server field, and click Add. Repeat to add additional servers. To delete a server, choose the server, and click Delete. If you configure NTP on the server, your system administrator should provide instructions to IDC users to also configure the Windows Time Service on their IDC client machines to enable synchronization between the IDC and the server logs. For detailed information about configuring the Windows Time Service, go to the Microsoft support site and search for Article ID 307897. If you install a time-bound license for your system, use caution when enabling NTP. Adjustments to the system date can cause Cisco IPICS to invalidate your license. For more information, see the “Managing Time-Bound Licenses” section on page 2-30. Cisco recommends that NTP be used, particularly in Cisco IPICS deployments that include high availability. • Step 17 If your network does not use NTP, choose the Date & Time tab and enter the current date and time in the appropriate fields. Click Forward to open the Finish Setup window. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-12 OL-29674-01 Chapter 2 Installing Cisco IPICS Installing the Cisco IPICS Server Software Step 18 Click Forward. The system processes an internal check list as it boots up. After the system has booted up, Cisco IPICS displays the following text: Cisco IPICS hostname login: where hostname represents the host name that you specified in Step 11. You can now continue with the installation of the Cisco IPICS server software. To install the Cisco IPICS server software, see the “Installing the Cisco IPICS Server Software” section. Installing the Cisco IPICS Server Software After you have successfully installed the Cisco IPICS operating system, you can install the Cisco IPICS server software. The Cisco IPICS server installation program uses a text-based interface. This installation procedure allows you to choose from the following install options: • Install—This option installs the Cisco IPICS server software. • Upgrade—This option upgrades your server from a previous version of Cisco IPICS. For information about performing an upgrade of the Cisco IPICS server software, see Chapter 3, “Upgrading Cisco IPICS.” Be aware that the options that the installer displays may differ depending on the software version that is running on your system. You must log in as the Linux root user to perform the Cisco IPICS installation. If you attempt to run the installation from any other user ID, the installation returns an error and exits. To terminate the installation process at any time, press Ctrl+C. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-13 Chapter 2 Installing Cisco IPICS Installing the Cisco IPICS Server Software To install the Cisco IPICS server software, perform the following procedure: Procedure Step 1 From a client PC, take these actions to obtain the Cisco IPICS software: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930 &flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to ipics-4.6.1.bin. Follow the onscreen instructions to download the Cisco IPICS software to your local drive. Step 2 Access the Cisco IPICS server via an SSH client or the Console window and log in as the Linux root user. Use the password that you created for the root user in Step 5 in the “Configuring Server Parameters on the Multiservices Platform Series Server” section on page 2-10; then, press Enter. Step 3 Enter the free command and read the information that displays in the total column to check the total amount of installed memory. The Cisco IPICS installation requires a minimum of 4 GB of memory. The following example shows that there is a minimum of 4 GB of total memory in the server: [root]# free -m total Mem: 4041 -/+ buffers/cache: Swap: 3814 used 953 246 0 free 3088 3795 3814 shared 0 buffers 499 cached 207 If your server does not have sufficient memory, contact your Cisco representative to find out how you can purchase additional memory. See Cisco IPICS Compatibility Matrix for specific memory requirements. Step 4 Take these actions: a. Copy the Cisco IPICS installation file from your local drive to the server on which you want to install the software. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-14 OL-29674-01 Chapter 2 Installing Cisco IPICS Installing the Cisco IPICS Server Software b. Enter the following command to navigate to the folder to which you copied the Cisco IPICS installation file: [root]# cd /folder c. Modify the permissions on the Cisco IPICS installer file by entering the following command, where installerfilename.bin specifies the name of the installer file: [root]# chmod 755 installerfilename.bin Step 5 To start the installation, enter the following command, where installerfilename.bin specifies the name of the installer file: [root]# ./installerfilename.bin Cisco IPICS begins the installation process. After a short time, you see a Welcome message. Step 6 When you see the “Welcome to the Cisco IPICS Software Installation Program” message, type y, then press Enter. Text displays to inform you that you must read and accept the terms of the End User License Agreement (EULA) before you can proceed. Step 7 Take these actions: a. Press Enter to display the EULA. b. Press the Spacebar to scroll through and view the EULA, then type y and press Enter to continue with the installation. You must accept the terms of the EULA to proceed. The installation program prompts you to enter a password for the ipics user. The ipics user has the capability to perform all administration-related tasks via the Cisco IPICS Administration Console. Step 8 Enter a password for the ipics user in the password field and press Enter. Cisco IPICS requires that you use strong passwords that include the following elements: • Minimum of 8 characters • At least one upper case letter • At least one lower case letter • At least one number • At least one of the following special characters: Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-15 Chapter 2 Installing Cisco IPICS Installing the Cisco IPICS Server Software @[]^_`!"#$%&'()*+,-./:;{<|=}>~? Note Step 9 The installation program also creates a password for the informix Linux user by using a randomizing algorithm. The informix user has full administrative permission to the Informix database instance and belongs to the ipics and informix linux groups. The ipics linux group includes permission to Cisco IPICS application-related folders, files, and scripts. The informix linux group includes full permission to the Cisco IPICS database server folders, files, and scripts. The password for this user ID never expires. Reenter the password, then, press Enter. The installation program prompts you to enter a password for the Cisco IPICS ipicsadmin (administrative) Linux user. That ipicsadmin user belongs to the ipics linux group. In addition, the ipicsadmin user has permission to read and write data from and/or to the Informix database. When you see the prompt that the password has been accepted, press Enter to continue. Step 10 Enter a password for the ipicsadmin user in the password field to create the ipicsadmin user password, then press Enter. Cisco IPICS requires that you use strong passwords that include the following elements: • Minimum of 8 characters • At least one upper case letter • At least one lower case letter • At least one number • At least one of the following special characters: @[]^_`!"#$%&'()*+,-./:;{<|=}>~? Note The password for the ipicsadmin user never expires. Step 11 Reenter the password ipicsadmin user, then press Enter. Step 12 When you see the prompt that the password has been accepted, press Enter to continue. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-16 OL-29674-01 Chapter 2 Installing Cisco IPICS Restarting or Shutting Down the Server Step 13 To begin the installation process, type y then press Enter. The Cisco IPICS software begins the installation process. A progress bar indicates the percentage of the installation that has completed. Step 14 After the installation completes, a message informs you of the status and prompts you to reboot. Step 15 Type y and press Enter reboot your server. The server reboots and your Cisco IPICS server becomes available. Note If you enter no, complete the restart before you attempt to log in to Cisco IPICS. Cisco IPICS processes, such as the tomcat service and database server, do not start until you reboot the server. To reboot your server at a later time, follow the procedure in the “Restarting or Shutting Down the Server” section on page 2-17. Restarting or Shutting Down the Server To restart the server, perform the following procedure: Caution When you shut down or restart your server, all user communications terminate. In addition, Cisco IPICS logs out all users who are logged in to the Administration Console. Therefore, make sure that you only shut down or restart your server during a maintenance window or other period of system non-use. Procedure Step 1 Log in to the Cisco IPICS server with the root user ID by taking either of the following actions: • To log in to the server from the server console, follow these steps: Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-17 Chapter 2 Installing Cisco IPICS Restarting or Shutting Down the Server a. Log in to the Cisco IPICS server by entering root for the user name. b. When you are prompted, enter the root user password. • To log in to the server remotely, follow these steps: a. Access the Cisco IPICS server via an SSH client. b. Log in to the server by entering the IP address or host name of the server. c. Log in by using the root user ID by entering root for the user name. d. When you are prompted, enter the root user password. A terminal window displays. Step 2 To reboot the server, enter the following command: [root]# reboot The server reboots. To shut down the server, perform the following procedure. Note Cisco recommends that you gracefully shut down the server by performing the following procedure instead of pressing the power button to shut down the server. Procedure Step 1 Log in to the Cisco IPICS server with the root user ID. A terminal window displays. Step 2 To shut down the running processes in the server, enter the following command: [root]# shutdown -h time where time is the time, in seconds, that the shutdown script delays before it begins. Tip To immediately shut down the running processes, enter the following command: [root]# shutdown -h now Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-18 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS The server terminates its running processes. If you are directly connected to the server, the console displays messages as each process terminates. Preparing to Use Cisco IPICS After you complete the software installation, you must complete the following tasks before you can use Cisco IPICS: • Checking the Installation, page 2-19 • Managing Your Licenses and Certificates, page 2-20 • Viewing the License Summary Information, page 2-25 For more information about Cisco IPICS administration and configuration tasks, See Cisco IPICS Server Administration Guide. Checking the Installation After you complete the Cisco IPICS server software installation, you should be able to access the Cisco IPICS Administration Console by logging in via a supported browser. (There may be a delay of a few minutes before you can access the console.) You can access the Administration Console from any computer that has IP connectivity to the Cisco IPICS server and that meets the requirements that are described in Cisco IPICS Compatibility Matrix. To access the Cisco IPICS Administration Console and check the installation, perform the following procedure: Procedure Step 1 Open a supported Internet browser window on your PC. Step 2 In the Address field in the browser, enter the following address, where server is the IP address or the host name that you configured for the Cisco IPICS server: https://server Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-19 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Because your browser does not trust the Cisco IPICS server self-signed SSL certificate, a Security Alert window displays. You can suppress this window by using a third-party certificate or by adding the Cisco IPICS server self-signed certificate to the browser trust list. Step 3 Click Continue to this website to close the window and access the login screen. Step 4 Log in by using the ipics user ID and password. The ipics user ID is the application-level user ID that can perform all administration-related tasks by using the Administration Console. The Administration > License Management window displays with a message that informs you to upload a license file before you can use the system. To obtain your license file, see the “Obtaining Your License File” section on page 2-21. If you are not able to access Cisco IPICS from your browser, see the “You Cannot Connect to the Server By Using Your Browser” section on page 10-4. Managing Your Licenses and Certificates After you install Cisco IPICS, you can log in to the Administration Console, but you will not be able to use any features until you upload the license file. You use the Product Authorization Key (PAK) that was included in your Cisco IPICS product package to obtain a license file. The license that you purchased is based on the following licensable features: • The concurrent number of land mobile radio (LMR) ports • The concurrent number of multicast ports • The concurrent number of Cisco Unified IP Phone users • The concurrent number of dial users • The number of IDC Silver licence users • The number of IDC Platinum license users • The total number of ops views • The concurrent number of mobile endpoint users Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-20 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Note • The concurrent number of end-to-end vocoders (used for P25 channels) • The concurrent number of gateway vocoders (used for P25 channels) • Concurrent number of DFSI gateway fixed station ports • The concurrent number of UMS servers • The concurrent number of ISSI gateway servers • The concurrent number of DFSI gateway servers • The number of Cisco IPICS ops views • Cisco IPICS base server license • UMS high availability license • Policy engine base license • High availability license To enable the policy engine for use, you must obtain a separate license. The licenses that you purchased determine the total number of corresponding features that you can use. If you require additional licenses, contact your Cisco representative. This section includes the following topics: • Obtaining Your License File, page 2-21 • Uploading the Cisco IPICS License Files, page 2-23 Obtaining Your License File Your Cisco IPICS product package includes a Software License Claim Certificate that contains a PAK, which is uniquely created from your sales order. You use this key to obtain licenses for your Cisco IPICS installation. You can order initial or additional licenses any time after you begin the installation process. To use your PAK to obtain your Cisco IPICS licenses, perform the following procedure: Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-21 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Procedure Step 1 Locate your Software License Claim Certificate that was included in your Cisco IPICS product package. Look for the PAK at the bottom of this certificate. Note Step 2 If you ordered your Cisco IPICS server software directly from Cisco, your package may include only one PAK. However, if you purchased Cisco IPICS through a distributor or reseller, you should have several individual packages, each with its own PAK. In this case, you must process all of your PAKs individually. Cisco sends you a license file for each one. Retrieve the MAC address that you noted during the Cisco IPICS operating system installation. Note If you misplaced the MAC address, enter the following command to obtain it. The HWaddr field in the command output contains the MAC address for the eth0 interface: [root]# ifconfig eth0 Alternatively, you can start the Cisco IPICS Administration Console from a web browser. When the License Management page appears, the MAC address is displayed near the top of the page. Step 3 Order a license by accessing Cisco.com at the following URL (you must have a valid Cisco.com user ID and password to this URL): http://www.cisco.com/go/license After you process your license order, Cisco.com sends you an e-mail with the license file as an attachment. If you processed several separate PAKs, Cisco.com sends you several e-mail responses with a license file attached to each one. When you upload these files, Cisco IPICS adds the licenses from each file and monitors your system activity based on the aggregated license files. Step 4 Save the license file to your PC by performing the following steps: a. Open the e-mail that contains the license file attachment. b. Right-click the license file attachment in the e-mail. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-22 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS c. Click Save As. The Save Attachment window displays. d. Select the folder on your PC where you would like to download the license file. e. Ensure that the following values appear in the fields of the Save Attachment window: – The file name of the license appears with a .lic file type in the File name field. – All Files (*.*) appears in the Save as type field. f. Click Save. The e-mail program downloads the license file to your PC. Note Step 5 Cisco IPICS does not support the editing or modification of the license file name or file type. If you change the license file name or use an extension other than .lic, you may invalidate your license and cause the system to become inoperable. Upload the Cisco IPICS license. See the “Uploading the Cisco IPICS License Files” section on page 2-23 for instructions about uploading the Cisco IPICS license file. After you upload your license file, the license manager processes the new licenses and updates the total number of licenses. Step 6 If you require additional licenses, contact your distributor or reseller to purchase the licenses. Uploading the Cisco IPICS License Files After you receive your license files, you can upload them by accessing the Administration > License Management window in the Cisco IPICS Administration Console. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-23 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Note When you upload a license file, Cisco IPICS places the file in the /root/tomcat/current/webapps/license directory. To upload license files, perform the following procedure: Procedure Step 1 Open a supported browser window on your PC. Step 2 In the Address field in the browser, enter the following address, where server is the IP address or the host name that you configured for the Cisco IPICS server: https://server Because your browser does not trust the Cisco IPICS server self-signed SSL certificate, a Security Alert window displays. You can suppress this window by using a third-party certificate or by adding the Cisco IPICS server self-signed certificate to the browser's trust list. Step 3 Click Continue to this website to close the window and access the login screen. The Cisco IPICS Login window displays. Step 4 Log in to the Cisco IPICS server by using the ipics user ID and password. The system prompts you to upload the license file. Note The system does not prompt you to upload a license file if you have previously uploaded a license file. If you are not prompted to upload the license file, navigate to Administration > License Management from the Server tab in the Administration Console. The License Management window displays. Step 5 Click Browse, then navigate to the license file that you downloaded to your PC. Step 6 Select the license file and click Open. Step 7 Click Upload to upload the license file to the server. The license manager processes the new license. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-24 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Step 8 Click Apply. Cisco IPICS associates the license file with the server and restarts the license manager. The updated license information displays in the License Summary pane in the License Management window. After you click Apply, there may be a delay of a few minutes before you can access the Administration Console. Step 9 If you have more than one license file, repeat Step 5 through Step 8 until you have uploaded all license files. Cisco recommends that you click Apply after you upload each license file, so that you can more easily track the progress of the upload process. Note Cisco IPICS does not overwrite older license files with newer license files. You can purchase additional features by obtaining a new license; when you upload and apply the new license, Cisco IPICS adds the new license features to the existing license features. As a best practice, Cisco recommends that you remove old license file(s) whenever license changes occur (such as when you replace a time-bound license with a permanent license). For information about deleting time-bound licenses, see the “Deleting Older Time-Bound Licenses from the Server” section on page 2-31. Viewing the License Summary Information From the Administration > License Management > Summary tab in the Administration Console, you can access the License Summary pane to view the licensed features for your system. This pane also displays license information for the Cisco IPICS Base Server License and the Policy Engine Base License. To understand how Cisco IPICS features use the available licensed features, see the “Tracking Your License Usage” section on page 2-26. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-25 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Note The data that displays in the License browser window shows the usage at the time that the license window was last accessed. To view the most current license information, refresh your browser window. Make sure to refresh your browser window often and before you perform any server administration functions to ensure that you are working with the most current information. If you attempt to perform an administration update in a window that does not display the most current data, the update does not succeed, and Cisco IPICS displays an error. If you receive an error, refresh your browser window and retry the operation. This section includes the following topics: • Tracking Your License Usage, page 2-26 • Managing Time-Bound Licenses, page 2-30 Tracking Your License Usage Table 2-1 describes the criteria that Cisco IPICS uses to determine license usage for ports, IDCs, IP phones, the policy engine, and ops views. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-26 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Table 2-1 Cisco IPICS License Usage Criteria Field Description Concurrent LMR An enabled channel or radio uses an LMR port license. After Ports an administrator disables a channel or radio, the server releases the LMR license and makes it available for use. Associating a radio and channel selector combination with a channel does not affect license usage. Cisco IPICS bases license usage for channels on the unique combination of a multicast address and a location. If a channel uses two multicast addresses, the single channel uses two licenses. If an administrator removes one of the multicast addresses, the system releases one of the licenses so that the port now uses one license. Concurrent Multicast Ports An activated VTG uses a multicast port license. After an administrator deactivates a VTG, the server releases the multicast license and makes it available for use. Be aware that an inactive VTG uses a license when a policy triggers (activates) that VTG. Therefore, if the number of licenses has been exceeded, the policy is not able to activate the VTG. Make sure that the server has a sufficient number of licenses available for the configuration of policies. Concurrent Cisco Unified IP Phone Users An IP phone user uses a license each time that a user logs in to Cisco IPICS from an IP phone. If you use all IP phone licenses, additional IP phone users cannot dial into a channel or VTG. Concurrent Dial Users The policy engine uses a license each time the dial engine performs a dial-in or dial-out action. If you use all dial user licenses, the dial engine cannot perform additional dial-in or dial-out actions. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-27 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Table 2-1 Field Cisco IPICS License Usage Criteria (continued) Description Concurrent The number of concurrent users with silver licenses. An IDC Dispatch Console user uses a license each time that the user logs in to an IDC Silver Users session. If the same IDC user logs in to multiple IDC sessions from different IDC client machines, that user uses multiple licenses (one for each IDC session). Note If you use all of the available IDC licenses, Cisco IPICS interrupts IDC user access to the system. Make sure that you are aware of the current status of IDC licenses, and purchase and install additional licenses immediately if you use all of the available IDC licenses. Concurrent The number of concurrent users with platinum licenses. An Dispatch Console IDC user uses a license each time that the user logs in to an Platinum Users IDC session. If the same IDC user logs in to multiple IDC sessions from different IDC client machines, that user uses multiple licenses (one for each IDC session). Note If you use all of the available IDC licenses, Cisco IPICS interrupts IDC user access to the system. Make sure that you are aware of the current status of IDC licenses, and purchase and install additional licenses immediately if you use all of the available IDC licenses. Concurrent The number of concurrent users with who are accessing IDC Mobile Endpoint from mobile endpoints. Users Note If you use all of the available IDC licenses, Cisco IPICS interrupts IDC user access to the system. Make sure that you are aware of the current status of IDC licenses, and purchase and install additional licenses immediately if you use all of the available IDC licenses. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-28 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Table 2-1 Cisco IPICS License Usage Criteria (continued) Field Description Concurrent EndtoEnd P25 Vocoders The number of end-to-end P25 channels that can be active at any time on the IDC. An IDC user uses a license each time a P25 channel is powered up in end-to-end mode. Note Concurrent Gateway P25 Vocoders The IDC supports a maximum of 4 concurrent connections to end-to-end P25 channels per user session. If a user is logged in from 2 IDC consoles at the same time, only one IDC can join P25 channels in end-to-end mode. The number of P25 channels that can be concurrently enabled at any time on the Cisco IPICS server. The Cisco IPICS server uses a license each time a P25 channel is enabled on that server. Concurrent DFSI The number of fixed stations that can be configured on the Gateway Fixed Cisco IPICS server. Station Ports Concurrent UMS The number of UMSs that can be configured and enabled in Servers the Administration Console. Concurrent ISSI Gateway Servers The number of ISSI Gateways that can be configured on the Cisco IPICS server. Concurrent DFSI The number of DFSI Gateways that can be configured on the Gateway Servers Cisco IPICS server. Cisco IPICS Ops If you have purchased a license that includes additional ops View view functionality, each ops view that you create uses one license. Cisco IPICS Base License usage does not apply to this field. This field displays Server License whether you have a base license for Cisco IPICS. Cisco UMS High License usage does not apply to this field. This field Availability indicates whether you have a base license for UMS high License availability. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-29 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Table 2-1 Cisco IPICS License Usage Criteria (continued) Field Description Policy Engine Base License License usage does not apply to this field. This field indicates whether you have a base license for the policy engine. High Availability License usage does not apply to this field. This field License indicates whether you have a base license for high availability. Managing Time-Bound Licenses Cisco IPICS also includes support for time-bound licenses. Time-bound licenses, such as evaluation or demonstration licenses, differ from purchased (non-time-bound) licenses in that they include a preconfigured license expiration date. When a time-bound license is about to expire (about 30 days before expiration), Cisco IPICS displays a warning message to alert you of the upcoming expiration. Note If you install a more recent time-bound license on your server, you may see this warning message if additional unexpired time-bound licenses are installed and you have not dismissed this warning. To suppress this warning message, delete the older, unexpired licenses that are installed on your server. For more information, see the “Deleting Older Time-Bound Licenses from the Server” section on page 2-31. • When a license feature expires, the relevant functionality of that license becomes disabled. • After your license expires, it remains valid for a maximum of 24 hours after the expiration date. (The server checks for expired licenses every 24 hours.) • After you install the Cisco IPICS server software, Cisco IPICS invalidates time-bound licenses when you change the system date to a date that is before the license start date. Invalid licenses cause the Cisco IPICS system to become inoperable. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-30 OL-29674-01 Chapter 2 Installing Cisco IPICS Preparing to Use Cisco IPICS Note You must restart the license manager, or reboot the server, for system date changes to become effective. To restart the license manager and revalidate the license(s), perform the following procedure: Procedure Step 1 Open a terminal window and log in using the root user ID. Step 2 Restart the license manager by entering the following command: [root]# service ipics_lm restart Step 3 To revalidate the license(s), navigate to Administration > License Management; then, click Apply to restart the license server. Deleting Older Time-Bound Licenses from the Server If you receive license expiration warning messages, and you have more than one unexpired time-bound license installed, you must delete the older time-bound licenses to suppress this warning message. To delete time-bound licenses, perform the following procedure: Procedure Step 1 Open a terminal window and log in by using the root user ID. Step 2 Navigate to the directory where Cisco IPICS stores the license files by entering the following command: [root]# cd /opt/cisco/ipics/tomcat/current/webapps/license Step 3 View the license files by entering the following command: [root]# ls -l *.lic The license files display with the time and date that the license was last modified. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-31 Chapter 2 Installing Cisco IPICS Managing Server Certificates Step 4 Make a note of the licenses that you no longer need. The time and date that displays with the file information might assist you with determining which files you need to delete. Step 5 Delete the unnecessary license files by entering the following command, where licensefilename.lic is the name of the license file that you want to delete: [root]# rm licensefilename.lic Caution Make sure that you do not delete the cisco.opt file. This file is required for the correct operation of Cisco IPICS. Step 6 Repeat Step 5 for each license file that you need to delete. Step 7 Restart the server by entering the following command: [root]# service ipics restart Step 8 Log in to the Administration Console by using the ipics user ID and navigate to the Administration > License Management window. Step 9 To apply the license deletions to the system configuration, click Apply. Step 10 If a message displays that indicates that a license is about to expire, click Dismiss Warnings. Managing Server Certificates This section describes how to perform the following server certificate tasks: • Backing Up Server Certificates and Stores, page 2-33 • Customizing and Generating a Self-Signed Server Certificate, page 2-34 • Installing Third Party Certificates on the Cisco IPICS Server, page 2-36 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-32 OL-29674-01 Chapter 2 Installing Cisco IPICS Managing Server Certificates To perform the tasks in this section, make sure that the following tools are available: • A Secure Shell (SSH) client, such as – SSH Tectia Client – Putty SSH – Cygwin ssh • A Secure Copy (SCP) and/or Secure File Transfer Protocol (SFTP) client, such as – Putty pscp – Putty sftp – Cygwin scp – Cygwin sftp – WinSCP Backing Up Server Certificates and Stores Before generating and installing a server certificate, back up existing certificate files by performing the following steps: Procedure Step 1 Access the Cisco IPICS server via an SSH client and log in as the Linux root user. Step 2 Change to the security directory and create a backup directory: [root]# cd /opt/cisco/ipics/security/ [root]# mkdir backup Step 3 Create a backup copy of the server.truststore.jks file, which includes all of the trusted certificates for the server. [root@ipics-server]# cp -a server.truststore.jks backup/ Step 4 Create a backup copy of the server.keystore.p12 file, which contains the server private key: [root@ipics-server]# cp -a server.keystore.p12 backup/ Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-33 Chapter 2 Installing Cisco IPICS Managing Server Certificates Step 5 Create backup copies of the certificate files: [root@ipics-server]# cp -a *.pem backup/ Step 6 Create a backup copy of security properties files: [root@ipics-server]# cp -a security.properties backup/ Customizing and Generating a Self-Signed Server Certificate Because Cisco IPICS services are disrupted during generation and customization of a self-signed server certificate, Cisco recommends that you perform the following procedure during a maintenance window. Before doing so, back up any existing certificate files as described in the “Backing Up Server Certificates and Stores” section on page 2-33. To generate and customize a self-signed server certificate, perform the following steps: Step 1 Access the Cisco IPICS server via an SSH client and log in as the Linux root user. Step 2 Change to the security directory: [root]# cd /opt/cisco/ipics/security/ Step 3 If you plan to use a third party security certificate, customize the security properties for your company by editing the security.properties file and changing the parameters listed in Table 2-2. Note the following: • The information that you enter may vary according to the CA that you use. For example, for the name of your state or province [x500StateName], VeriSign requires that you spell out the complete name rather than using the abbreviated form. • The system requires that you use the same value for the private key password and the keystore password. If you enter different passwords, the Tomcat server cannot successfully restart. (When these passwords are the same, the system does not prompt you again for the key password.) Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-34 OL-29674-01 Chapter 2 Installing Cisco IPICS Managing Server Certificates • If you change the passwords in the security.properties file, also update the password in the Tomcat server.xml file in /opt/cisco/ipics/tomcat/current/conf. Table 2-2 Step 4 Customizing Security Properties Entry Description certValidity=1095 The number of days the certificate is valid. keySize=2048 Key size, in bits. Sometimes referred to as encryption strength. keystorePassword=changeit Password for the key store (default is changeit). privateKeyPassword=changeit Password for the private key. truststorePassword=changeit Password for the trust store. x500OrginizationName=Cisco Systems, Inc. Your company name. x500OrginizationalUnit=PSBU You company division. x500LocalityName=San Jose Your city. x500StateName=California Your state or province. x500Country=US Your country (2 letter ISO code) x500Email=admin@ipics.cisco.com Your e-mail address. Stop all IPICS services: [root@ipics-server]# service ipics stop-all Step 5 Remove the existing certificate [root@ipics-server]# sudo -H -u ipicsadmin ./security-manager unsetup Step 6 Generate a new set of self-signed certificates using the properties that you defined in Step 3. [root@ipics-server]# sudo -H -u ipicsadmin ./security-manager setup Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-35 Chapter 2 Installing Cisco IPICS Managing Server Certificates This command creates the following certificates: ca.cert.pem server.cert.pem server.csr.pem Step 7 Local self-signed CA certificate) Server certificate, signed by the local CA Certificate signing request (CSR) Start all IPICS services: [root@ipics-server]# service ipics start-all Because the security-manger script shown in Step 6 does not restart all of the essential high availability processes, you must start all IPICS services to ensure system stability. Installing Third Party Certificates on the Cisco IPICS Server The Cisco IPICS server ships with a self-signed certificate. However, you may replace this certificate with a customer-specific, third party certificate that has been issued by a CA. A CA, as a trusted third party, issues and manages digital certificates that provide enhanced security by verifying the credentials of the user, organization, server, or other entity as specified in the certificate. VeriSign, Thawte, and Entrust are examples of CAs. The following topics include information about requesting a third party certificate and installing the certificate on the Cisco IPICS server: • Requesting a Third Party Certificate, page 2-37 • Installing a Third Party Certificate, page 2-38 • Converting DER Formatted Certificates to PEM Format, page 2-40 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-36 OL-29674-01 Chapter 2 Installing Cisco IPICS Managing Server Certificates Requesting a Third Party Certificate Because Cisco IPICS services are disrupted, Cisco recommends that you perform the following procedure during a maintenance window. Before doing so, back up any existing certificate files as described in the “Backing Up Server Certificates and Stores” section on page 2-33. To request a third party certificate, perform the following steps: Procedure Step 1 Follow Step 1 - Step 6 in the “Installing Third Party Certificates on the Cisco IPICS Server” section on page 2-36. Do not start the IPICS services, as described in step Step 7. Step 2 Stop all IPICS services (in the event that any are running): [root]# service ipics stop-all Depending on the Certificate Authority that you use, you may need to copy and paste the contents of the server.csr.pem file into your browser, or you may need to upload the CSR file to request the certificate. Step 3 To the paste text into a browser: a. List the file contents: [root]# cat server.csr.pem b. Step 4 Paste CSR text into the CA web page. If the CA does not accept the certificate request, make the requested modifications and then repeat this procedure. When you receive the certificate from the CA, follow the procedure in “Installing a Third Party Certificate” section on page 2-38 to install the certificate. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-37 Chapter 2 Installing Cisco IPICS Managing Server Certificates Installing a Third Party Certificate Because Cisco IPICS services are disrupted when installing a third party certificate, Cisco recommends that you perform the following procedure during a maintenance window. Before doing so, back up any existing certificate files as described in the “Backing Up Server Certificates and Stores” section on page 2-33. To install a third party certificate on the server, perform the following procedure: Procedure Step 1 Depending on the format in which you receive the certificate, take one of the following actions: • If you receive the certificate file directly from the CA, rename the file to signed_server.cert.pem. • If you receive the certificate enclosed in an e-mail, create a new file named signed_server.cert.pem (this file must contain only the certificate contents of the e-mail). CAs may use different procedures to send root CA certificates. Some CAs embed the root CA certificate into the certificate that they provide to you; other CAs provide the root CA certificate separately. (The root CA certificate allows you to establish a chain of trust from the CA to the third party certificate on your server.) Step 2 Step 3 Depending on the format in which the CA provides the root CA certificate, take one of the following optional actions: • If you download the root CA certificate file directly from the CA website, rename the file to root_ca.cert.pem. • If the CA provides the root CA certificate enclosed in a web page, create a new file named root_ca.cert.pem (the file must contain only the root CA certificate contents of the web page). (If applicable) Some CAs also provide an intermediate CA certificate. If so, then take one of the following actions: • If you download the intermediate CA certificate file directly from the Certificate Authority website, rename the file to intermediate_ca.cert.pem. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-38 OL-29674-01 Chapter 2 Installing Cisco IPICS Managing Server Certificates • If the CA provides the intermediate CA certificate enclosed in a web page, create a new file named intermediate_ca.cert.pem (the file must contain only the intermediate CA certificate contents of the web page). If the CA provides more than one intermediate CA certificate, give each additional certificate a unique name, such as intermediateroot_ca1.cert.pem, intermediateroot_ca2.cert.pem, and so on. Step 4 Verify that the certificates are in text (PEM) format by opening the certificate files using a text editor, and making sure that this text appears inside the certificate files: -----BEGIN CERTIFICATE----- If this text does not appear, follow the steps in “Converting DER Formatted Certificates to PEM Format” section on page 2-40 before continuing. In addition, follow these guidelines for each certificate file: • Use a basic text editor, such as Notepad or vi, to edit the certificate file. Do not use Microsoft Word because it may save the file with extra characters in it. • The file must end with -----END CERTIFICATE----- followed by a blank line. • There should only be one -----BEGIN CERTIFICATE----- line and one -----END CERTIFICATE----- line per certificate file (until you concatenate the files as described later in this procedure). • If your certificate file contains more than one certificate, use the chopcert command to convert it into the necessary individual certificate files: [root@ipics-server]# cd /opt/cisco/ipics/security/ [root@ipics-server]# ./chopcert certchain.pem • Step 5 Some CAs offer wildcard certificates that work for any machine in a domain. These certificates can be used with Cisco IPICS. Upload all of the certificate files from the local workstation to the IPICS server: C:\ scp *.pem root@<ipics-server-ip-addr>:/root/ Note Step 6 The contents of the /root directory on the IPICS server are unchanged and are therefore not affected by future upgrades to the system. Access the Cisco IPICS server via an SSH client and log in as the Linux root user. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-39 Chapter 2 Installing Cisco IPICS Modifying Network Settings Step 7 Change to the security directory: [root@ipics-server]# cd /opt/cisco/ipics/security/ Step 8 Copy the certificate files to the security directory and set the correct file permissions: [root@ipics-server]# cp /root/*.pem /opt/cisco/ipics/security/ Step 9 Take either of these actions: • If your CA provided three certificate files, enter this command: [root@ipics-server]# ./install3rdpartycerts -3 • If your CA provided three certificate files, enter this command: [root@ipics-server]# ./install3rdpartycerts -4 Converting DER Formatted Certificates to PEM Format To convert DER formatted certificates to PEM format, perform the following steps: Procedure Step 1 Access the Cisco IPICS server via an SSH client and log in as the Linux root user. Step 2 Use openssl to convert a certificate from PEM to DER format: [root@ipics-server]# openssl x509 \ -in cert.der -inform DER \ -out cert.pem -outform PEM Modifying Network Settings You can modify network settings for the IPICS server from the command line on the IPICS server. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-40 OL-29674-01 Chapter 2 Installing Cisco IPICS Modifying Network Settings To modify network settings, follow these steps: Procedure Step 1 Access the Cisco IPICS server via an SSH client and log in as the Linux root user. Step 2 Access the network configuration utility: [root]# network_config Step 3 Enter the number of the option you want to change, and follow the on-screen instructions. Step 4 When you are finished making changes, use the alphabetic commands to apply the configuration to the IPICS server or save the configuration to a file. You can also use the numeric commands to import a previously saved configuration, or reset the current server configuration to the last saved version. Step 5 Enter q to close the configuration utility. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 2-41 Chapter 2 Installing Cisco IPICS Modifying Network Settings Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 2-42 OL-29674-01 CH A P T E R 3 Upgrading Cisco IPICS If your Cisco IPICS server is running release 4.5(1) or 4.5(2), you can upgrade your server to release 4.6(1). Tip To verify which versions of Cisco IPICS are compatible for upgrade, see Cisco IPICS Compatibility Matrix at http://www.cisco.com/en/US/products/ ps6718/products_device_support_tables_list.html. This chapter contains information about upgrading your software to Cisco IPICS release 4.6(1) and other actions that you must take to fully complete this upgrade process and includes the following sections: • Before You Begin, page 3-1 • Performing a Cisco IPICS Server Software Upgrade, page 3-2 • Using the Cisco Incident Dispatch Console with Cisco IPICS 4.6, page 3-9 Before You Begin Be aware of the following guidelines, and perform one or more of the following suggested actions, before you upgrade your server software: • Cisco recommends that you back up the database to a remote host. If you encounter problems during the upgrade, you can reinstall your current version of the Cisco IPICS software and restore your database from the remote backup to return your system to its previous state. For information about Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 3-1 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade backing up and restoring the Cisco IPICS database, refer to the “Performing Cisco IPICS Backup and Restore Operations” chapter in Cisco IPICS Server Administration Guide. • You can set up a new version of the latest supported IDC so that the IDC download process is staged. Staging the IDC download alleviates the burden of long IDC downloads to all users at one time. For more information about this feature, refer to the “Installing a New IDC Version Before You Upgrade Your Cisco IPICS Server” section in the “Performing Cisco IPICS System Administrator Tasks” chapter in Cisco IPICS Server Administration Guide. • Cisco IPICS retains existing attributes for channels, VTGs, and users during an upgrade. However, the default setting for the Allow Latch attribute is set to disabled (unchecked) when you create new channels or VTGs in this release. For more information about the Allow Latch attribute, refer to the “Performing Cisco IPICS System Administrator Tasks” chapter in Cisco IPICS Server Administration Guide. • If you are want to add the DFSI gateway functionality, which is new in release 4.6, you must obtain a license for this feature. • Before you perform an upgrade, disable the ISSIG (in the Cisco IPICS Administration Console, chose the Configuration drawer in the Server tab, choose Radios , choose the desired ISSIG, and then click Disable). Performing a Cisco IPICS Server Software Upgrade The following sections provide instructions for upgrading your Cisco IPICS software to release 4.6(1): • Upgrading from Cisco IPICS Release 4.5(1) or 4.5(2) to Cisco IPICS Release 4.6(1) in a Deployment without High Availability, page 3-3 • Upgrading from Cisco IPICS Release 4.5(1) or 4.5(2) to Cisco IPICS Release 4.6(1) in a Deployment with High Availability, page 3-5 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 3-2 OL-29674-01 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade Upgrading from Cisco IPICS Release 4.5(1) or 4.5(2) to Cisco IPICS Release 4.6(1) in a Deployment without High Availability To upgrade from Cisco IPICS release 4.5(1) or 4.5(2) to Cisco IPICS release 4.6(1) in a deployment without high availability, perform the following procedure: Procedure Step 1 From a client PC, take these actions to obtain the Cisco IPICS software: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930 &flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to ipics-4.6.1.bin. Follow the onscreen instructions to download the Cisco IPICS software to your local drive. Step 2 Access the Cisco IPICS server via an SSH client or the Console window and log in as the Linux root user. Step 3 Take these actions: a. Copy the Cisco IPICS installation file from your local drive to the server on which you want to install the software. b. Enter the following command to navigate to the folder to which you copied the Cisco IPICS installation file: [root]# cd /folder c. Modify the permissions on the Cisco IPICS installer file by entering the following command, where installerfilename.bin specifies the name of the installer file: [root]# chmod 755 installerfilename.bin Step 4 To start the upgrade, enter the following command, where installerfilename.bin specifies the name of the installer file: [root]# ./installerfilename.bin Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 3-3 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade Cisco IPICS begins the installation process. After a short time, you see a Welcome message. Step 5 When you see the “Welcome to the Cisco IPICS Software Installation Program,” take either of the actions: Step 6 When you see the “Welcome to the Cisco IPICS Software Installation Program” message, take either of these actions: Caution Step 7 • Press 1 and Enter to install Cisco IPICS 4.6. This process installs Cisco IPICS 4.6 and completely removes the older version of Cisco IPICS and its databases from the system. • Press 2 and Enter to upgrade to Cisco IPICS 4.6. This process installs Cisco IPICS 4.6 and retains the earlier Cisco IPICS databases. If you choose option 1, you loose all of your existing IPICS data and configuration information. When you see the prompt to continue, type y and press Enter. Text displays to inform you that you must read and accept the terms of the End User License Agreement (EULA) before you can proceed. Step 8 Take these actions: a. Press Enter to display the EULA. b. Press the Spacebar to scroll through and view the EULA, then type y and press Enter to continue with the installation. You must accept the terms of the EULA to proceed. Step 9 Take these actions: a. When you are prompted to begin the installation process, type y then press Enter. b. If you are prompted to enter the root password for the UMS server, enter this password and press Enter. This system prompts for this password for each UMS server that is configured in your deployment. The Cisco IPICS software begins the upgrade process. A progress bar indicates the percentage of the installation that has completed. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 3-4 OL-29674-01 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade Step 10 After the installation completes, a message informs you of the status and prompts you to reboot. Step 11 Type y and press Enter reboot your server. Step 12 Log in to the Cisco IPICS Administration Console and take these actions to generate the new IDC installer: Step 13 a. From the IDC Management drawer, click IDC Installer. b. From the IDC Version to Use For The IDC Installer, choose 4.6(1). c. Click Save. d. From the IDC Management drawer, click IDC Versions. e. If the status of any IDC version is Recommended, to Not Specified. f. Check the check box for the row that contains 4.6 in the Version field. g. From the drop-down list next to the Change State button, choose Recommended. h. Click the Change State button. If you are using the UMS or the ISSIG, upgrade to the 4.6(1) version of these components as described in the following sections: • Installing or Upgrading the UMS Software, page 4-5 • Installing or Upgrading the ISSIG Software, page 5-5 If you want to use the DFSIG, install this component as described in the Chapter 6, “Installing the DFSIG.” Upgrading from Cisco IPICS Release 4.5(1) or 4.5(2) to Cisco IPICS Release 4.6(1) in a Deployment with High Availability To upgrade from Cisco IPICS release 4.5(1) or 4.5(2) to Cisco IPICS release 4.6(1) in a deployment with high availability, perform the following procedure. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 3-5 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade Procedure Step 1 Take these actions to transfer the Cisco IPICS active state to the standby Cisco IPICS server: a. Log in to the Cisco IPICS Administration Console. b. Navigate to the Configuration > High Availability window. c. Click the HA Configuration tab. d. Click the Failover Now button. The standby server becomes the new active server and the active server becomes the standby server. Users can continue to use the new active server while you upgrade the standby server. Step 2 From a client PC, take these actions to obtain the Cisco IPICS software: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930 &flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to ipics-4.6.1.bin. Follow the onscreen instructions to download the Cisco IPICS software to your local drive. Step 3 Access the primary Cisco IPICS server (which is now in standby mode) via an SSH client or the Console window and log in as the Linux root user. Step 4 Take these actions: a. Copy the Cisco IPICS installation file from your local drive to the server on which you want to install the software. b. Enter the following command to navigate to the folder to which you copied the Cisco IPICS installation file: [root]# cd /folder c. Modify the permissions on the Cisco IPICS installer file by entering the following command, where installerfilename.bin specifies the name of the installer file: [root]# chmod 755 installerfilename.bin Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 3-6 OL-29674-01 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade Step 5 To start the upgrade, enter the following command, where installerfilename.bin specifies the name of the installer file: [root]# ./installerfilename.bin Step 6 In the “Welcome to the Cisco IPICS Software Installation Program” screen, type y and press Enter to continue the upgrade. Step 7 When you see the installation options, press 2 and press Enter. Caution Step 8 • (Recommended) Press 2 and Enter to upgrade to Cisco IPICS 4.6. This process installs Cisco IPICS 4.6 and retains the earlier Cisco IPICS databases and the high availability configuration. • (Not recommended) Press 1 and Enter to install Cisco IPICS 4.6. This process installs Cisco IPICS 4.6 and completely removes the older version of Cisco IPICS and its databases from the system, and delete the high availability configuration. If you choose option 1, you loose all of your existing IPICS data and configuration information. When you see the prompt to continue, type y and press Enter. Text displays to inform you that you must read and accept the terms of the End User License Agreement (EULA) before you can proceed. Step 9 Take these actions: a. Press Enter to display the EULA. b. Press the Spacebar to scroll through and view the EULA, then type y and press Enter to continue with the installation. You must accept the terms of the EULA to proceed. Step 10 Take these actions: a. When you are prompted to begin the installation process, type y then press Enter. b. If you are prompted to enter the root password for the UMS server, enter this password and press Enter. This system prompts for this password for each UMS server that is configured in your deployment. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 3-7 Chapter 3 Upgrading Cisco IPICS Performing a Cisco IPICS Server Software Upgrade The Cisco IPICS software begins the upgrade process. A progress bar indicates the percentage of the upgrade that has completed. Step 11 After the installation completes, a message informs you of the status and prompts you to reboot. Step 12 Type y and press Enter reboot your server. Step 13 (Optional) Instruct any users who are logged in to the Cisco IPICS Administration Console, an Incident Dispatch Console, or a Cisco IPICS Mobile Client to log out and then log in to the primary Cisco IPICS server, which is now upgraded to release 4.6(1). This step is required if you want these users to have continuous access while you complete this upgrade procedure. Step 14 Access the secondary Cisco IPICS server (which is not yet upgraded to release 4.6(1)) via an SSH client or the Console window, log in as the Linux root user and repeat Step 4 through Step 12 in this procedure. Step 15 If your deployment includes UMS components or an ISSIG, upgrade these components now. For instructions, see Chapter 4, “Installing or Upgrading the UMS” and Chapter 5, “Installing or Upgrading the ISSIG.” Step 16 Access the primary Cisco IPICS server via an SSH client or the Console window, log in as the Linux root user and take these actions to recreate the high availability pairing between the now upgraded servers: a. Enter these commands: [root]# cd /opt/cisco/ipics/database/bin [root]# ./post_ipics_upgrade_45_46_enable_HA b. In the information screen that appears, review the information that appears an make sure that it is correct, then type y and press Enter. The high availability pairing process begins. The system displays status information during this process. Step 17 Log in to the Cisco IPICS Administration Console and take these actions to generate the new IDC installer: a. From the IDC Management drawer, click IDC Installer. b. From the IDC Version to Use For The IDC Installer, choose 4.6(1). c. Click Save. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 3-8 OL-29674-01 Chapter 3 Upgrading Cisco IPICS Using the Cisco Incident Dispatch Console with Cisco IPICS 4.6 Step 18 d. From the IDC Management drawer, click IDC Versions. e. If the status of any IDC version is Recommended, to Not Specified. f. Check the check box for the row that contains 4.6 in the Version field. g. From the drop-down list next to the Change State button, choose Recommended. h. Click the Change State button. If you want to use the DFSIG, install this component as described in the Chapter 6, “Installing the DFSIG.” Using the Cisco Incident Dispatch Console with Cisco IPICS 4.6 After you upgrade to Cisco IPICS 4.6(1), Cisco recommends that you instruct Cisco IPICS Dispatch Console users to install the current version of the Cisco IPICS Dispatch Console on their client PCs. For instructions, see the “Cisco IPICS Dispatch Console Installation, Configuration, and Maintenance” chapter in Cisco IPICS Dispatch Console User Guide. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 3-9 Chapter 3 Upgrading Cisco IPICS Using the Cisco Incident Dispatch Console with Cisco IPICS 4.6 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 3-10 OL-29674-01 CH A P T E R 4 Installing or Upgrading the UMS The Universal Media Services (UMS) is a media services platform for Cisco IPICS and its endpoints. The UMS can function with, or instead of, an RMS, and provides a variety of media hosting, streaming, mixing, transcoding, talker ID, and processing functions. The UMS installs and operates on a dedicated Cisco Multiservices Platform Series server or in a supported virtual machine (VM). The appropriate operating system is preinstalled on this server at the factory. For a list of supported servers, see Cisco IPICS Compatibility Matrix. The UMS installation process consists of two general procedures: First you configure the Multiservices Platform Series server for your environment, then you install the UMS software. This chapter includes these topics: • Configuring the Multiservices Platform Series Server for Your Environment, page 4-1 • Installing or Upgrading the UMS Software, page 4-5 Configuring the Multiservices Platform Series Server for Your Environment Before you install the UMS software on a Cisco Multiservices Platform Series server, you must configure various network and system settings on the server for your environment. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 4-1 Chapter 4 Installing or Upgrading the UMS Configuring the Multiservices Platform Series Server for Your Environment To configure the Cisco Multiservices Platform Series server, perform the following steps. Note This procedure is not required if you are upgrading the UMS software on a Cisco Multiservices Platform Series server that has already been configured for the UMS. Procedure Step 1 Power on the Multiservices Platform server and log in to the server with the user name root and the password ipics. Step 2 Execute the reconfigure command: [root]# reconfigure Step 3 When you are prompted whether you want to reboot the server, press Y then press Enter. The server begins the reboot process. After a few minutes, the Welcome window appears. Step 4 At the Welcome window, click Forward to display the Root Password window. Step 5 In the Root Password window, take these actions: a. In the Confirm fields, enter a new password for the root user. The root user has access to all the files in the Cisco IPICS server. Cisco IPICS requires that you use strong passwords that meets these guidelines: – Minimum of 8 characters in length – At least one upper case letter – At least one upper case letter – At least one number – At least one of the following special characters: @[]^_`!"#$%&'()*+,-./:;{<|=}>~? Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 4-2 OL-29674-01 Chapter 4 Installing or Upgrading the UMS Configuring the Multiservices Platform Series Server for Your Environment Note b. Step 6 If you need to change the root password later, you can log in to the Cisco IPICS server as the root user and change it by using the reset_pw command. For more information, refer to the “Using the Cisco IPICS CLI Tools and Service Commands” chapter in the Cisco IPICS Troubleshooting Guide. Click Forward. In the GRUB Password window, take these actions: a. In the Confirm fields, a password for the GRUB (boot loader) menu. The boot loader password enables access to the boot loader menu, which allows a system administrator to boot the server into single-user mode. Single-user mode is required to recover a lost root password. This password must contain at least 6 characters. b. Step 7 Click Forward. In the System User window, take these actions to create a system user, which is the user who performs administrative tasks on the server: a. In the User Name field, enter a unique user name for the system user. b. (Optional) In the Full Name field, enter the first name and last name of the system user, or a brief description of this user. c. In the Password and Confirm fields, enter a password for the system user. This password has the same requirements as the root password that you entered in Step 5. d. Step 8 Click Forward. In the Network Setup window, take these actions: a. In the Host Name filed, enter the fully-qualified hostname for this server. b. In the IP address field, enter the IP address for this server. c. In the Subnet Mask, field, enter the subnet mask for this server. d. In the Gateway field, enter the IP address of the default gateway that this server uses. e. In the Primary DNS field, enter the IP address of the primary DNS for this server. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 4-3 Chapter 4 Installing or Upgrading the UMS Configuring the Multiservices Platform Series Server for Your Environment Step 9 f. (Optional) In the Secondary DNS field, enter the IP address of the secondary DNS for this server. g. (Optional) In the Tertiary DNS field, enter the IP address of the Tertiary DNS for this server. h. Click Forward. In the Timezone window, take these actions: a. Choose the correct time zone for your area. You can choose the time zone from the map or from the list. Step 10 b. If your system clock uses Universal Coordinated Time (UTC), make sure that you check the System Clock uses UTC check box. Cisco recommends that UTC be used, particularly in Cisco IPICS deployments that include high availability. c. Click Forward. In the Date and Time window take either of these actions, then click Forward: • If your network uses the Network Time Protocol (NTP), choose the Network Time Protocol tab and check the Enable Network Time Protocol check box. Enter the name or IP address of an NTP server in the Server field, and click Add. Repeat to add additional servers. To delete a server, choose the server, and click Delete. If you configure NTP on the server, your system administrator should provide instructions to the IDC users to also configure the Windows Time Service on their IDC client machines to enable synchronization between the IDC and the server logs. For detailed information about configuring the Windows Time Service, go the Microsoft support site and search for Article ID 307897. If you install a time-bound license for your system, use caution when enabling NTP. Adjustments to the system date can cause Cisco IPICS to invalidate your license. Cisco recommends that NTP be used, particularly in Cisco IPICS deployments that include high availability. • If your network does not use NTP, choose the Date & Time tab and enter the current date and time in the appropriate fields. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 4-4 OL-29674-01 Chapter 4 Installing or Upgrading the UMS Installing or Upgrading the UMS Software Step 11 In the Finish Setup window, click Finish. The system bootup process continues and the system processes an internal check. When the bootup process completes, the log in prompt appears. Installing or Upgrading the UMS Software After you configure the Cisco Multiservice Platform server for your environment, you are ready to install or upgrade the UMS software on the server. To install or upgrade the UMS software, follow these steps: Procedure Step 1 From a client PC, take these actions to obtain the UMS installation file: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930 &flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to ums-4.6.1.bin. Follow the onscreen instructions to download the Cisco IPICS software to your local drive. Step 2 Copy the UMS installation file from your local drive to the Multiservice Platform server. Step 3 Log in to the Multiservice Platform as the root user. Step 4 Modify the permissions on the UMS installation file by entering the following commands: [root]# cd location [root]# chmod 755 installerfilename.bin where: Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 4-5 Chapter 4 Installing or Upgrading the UMS Installing or Upgrading the UMS Software Step 5 • location is the full path and directory to which you copied the UMS installation file • installerfilename is the name of the UMS installation file that you put on the server Enter the following command to start the UMS installer, where installerfilename is the name of the UMS installation file that you put on the server.: [root]# ./installerfilename.bin If you are performing a fresh install of the UMS, the Welcome to the Cisco UMS Software Installation Program screen appears. If you are upgrading the UMS software on this server, continue to Step 6. If you are performing a fresh install of the UMS, skip to Step 7. Step 6 Caution Step 7 If you are upgrading the UMS software, take either of these actions: • Press 1 and Enter to install the UMS software. This process installs the UMS software and completely removes the older version of the software and its configuration information. • Press 2 and Enter to upgrade to the UMS software. This process installs the UMS and retains the earlier UMS configuration information. If you choose option 1, you loose all of your existing UMS configuration information. When you are prompted to continue, type y then press Enter. Text displays to inform you that you must read and accept the terms of the End User License Agreement (EULA) before you can proceed. Step 8 Take these actions: a. Press Enter to display the EULA. b. Press the Spacebar to scroll through and view the EULA, then type y and press Enter to continue with the installation. You must accept the terms of the EULA to proceed. Step 9 When you are prompted to continue, type y then press Enter. Step 10 When you are prompted for a Cisco IPICS administrator password, enter a administrative password to be used for services on this server, then press Enter. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 4-6 OL-29674-01 Chapter 4 Installing or Upgrading the UMS Installing or Upgrading the UMS Software The password must follow these guidelines: • Must contain at least 8 characters • Cannot contain any variation of cisco or ocsic (for example, abCiSCo12 is not valid) • Cannot contain three or more same consecutive characters (for example, a password that contains AAA or 888 is not valid) • Must contain at least one uppercase letter, one lowercase letter, one number, and one special character (special characters include !, @, and #) Step 11 Reenter the Cisco IPICS administrator password when you are prompted to do so, then press Enter. Step 12 When you see the “Password accepted” message, press Enter. Step 13 When you are prompted to continue, type y then press Enter. The UMS software installs on the server. Step 14 When you are prompted whether you want to reboot the server, type y then press Enter. The server reboots and the installation is complete. To configure the UMS, see Cisco IPICS Administration Guide. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 4-7 Chapter 4 Installing or Upgrading the UMS Installing or Upgrading the UMS Software Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 4-8 OL-29674-01 CH A P T E R 5 Installing or Upgrading the ISSIG Cisco IPICS supports voice interoperability between radio frequency subsystems that support the Inter-RF Subsystem Interface (ISSI). To enable this support, you install and configure the Cisco IPICS ISSI Gateway (ISSIG). The ISSIG installs and operates on a dedicated Cisco Multiservices Platform Series server. The appropriate operating system is installed on this server at the factory. For a list of supported servers, see Cisco IPICS Compatibility Matrix. The ISSIG installation process consists of two general procedures: First you configure the Multiservices Platform Series server for your environment, then you install and configure the ISSIG software on the Multiservices Platform Series server. After the ISSIG is installed, you provision it from the Cisco IPICS Administration Console. This chapter includes these topics: • ISSIG Overview, page 5-2 • Configuring the Multiservices Platform Series Server for Your Environment, page 5-2 • Installing or Upgrading the ISSIG Software, page 5-5 • Provisioning the ISSIG on the Cisco IPICS Server, page 5-9 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 5-1 Chapter 5 Installing or Upgrading the ISSIG ISSIG Overview ISSIG Overview The ISSIG is an optional software package for Cisco IPICS. It runs on a Cisco Multiservices Platform Series server and provides the connectivity between Cisco IPICS and the ISSI-compatible Inter-RF Subsystems with which you will interoperate. The ISSIG includes the following components: • P25 Gateway—Handles the transcoding between the G.711 codec of a multicast stream and the Improved Multi-Band Exitation (IMBE) codec • RFSS Gateway—Handles the ISSI between the ISSI Gateway and a remote radio frequency subsystem (RFSS) The ISSIG provides these interoperability modes: • Proxy mode—Enables any Cisco IPICS endpoint to interoperate with a P25 device and provides transcoding between G.711 and the IMBE codecs. • Native mode—Enables the IDC to communicate directly to a P25 endpoint. Transcoding is not performed. Allows optional end-to-end encryption for this communication. Configuring the Multiservices Platform Series Server for Your Environment Before you install the ISSIG software on a Cisco Multiservices Platform Series server, you must configure various network and system settings on the server for your environment. To configure the Cisco Multiservices Platform server, perform the following steps. Note This procedure is not required if you are upgrading the ISSIG software on a Cisco Multiservices Platform Series server that has already been configured for the ISSIG. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 5-2 OL-29674-01 Chapter 5 Installing or Upgrading the ISSIG Configuring the Multiservices Platform Series Server for Your Environment Procedure Step 1 Power on the Multiservices Platform server and log in to the server with the user name root and the password ipics. Step 2 Execute the reconfigure command: [root]# reconfigure Step 3 When you are prompted whether you want to reboot the server, press Y then press Enter. The server begins the reboot process. After a few minutes, the Welcome window appears. Step 4 At the Welcome window, click Forward to display the Root Password window. Step 5 In the Root Password window, take these actions: a. In the Confirm fields, enter a password for the root user. The root user has access to all the files in the server. Cisco IPICS requires that you use strong passwords that meets these guidelines: – Minimum of 8 characters in length – At least one upper case letter – At least one upper case letter – At least one number – At least one of the following special characters: @[]^_`!"#$%&'()*+,-./:;{<|=}>~? Note b. Step 6 If you need to change the root password at a later date, you can log in to the Cisco IPICS server as the root user and change it by using the reset_pw command. For more information, refer to the “Using the Cisco IPICS CLI Tools and Service Commands” chapter in Cisco IPICS Troubleshooting Guide. Click Forward. In the GRUB Password window, take these actions: a. In the Confirm fields, a password for the GRUB (boot loader) menu. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 5-3 Chapter 5 Installing or Upgrading the ISSIG Configuring the Multiservices Platform Series Server for Your Environment The boot loader password enables access to the boot loader menu, which allows a system administrator to boot the server into single-user mode. Single-user mode is required to recover a lost root password. This password must contain at least 6 characters. b. Step 7 Click Forward. In the System User window, take these actions to create a system user, which is the user who performs administrative tasks on the server: a. In the User Name field, enter a unique user name for the system user. b. (Optional) In the Full Name field, enter the first name and last name of the system user, or a brief description of this user. c. In the Password and Confirm fields, enter a password for the system user. This password has the same requirements as the root password that you entered in Step 5. d. Step 8 Step 9 Click Forward. In the Network Setup window, take these actions: a. In the Host Name filed, enter the fully-qualified hostname for this server. b. In the IP address field, enter the IP address for this server. c. In the Subnet Mask, field, enter the subnet mask for this server. d. In the Gateway field, enter the IP address of the default gateway that this server uses. e. In the Primary DNS field, enter the IP address of the primary DNS for this server. f. (Optional) In the Secondary DNS field, enter the IP address of the secondary DNS for this server. g. (Optional) In the Tertiary DNS field, enter the IP address of the Tertiary DNS for this server. h. Click Forward. In the Timezone window, take these actions: a. Choose the correct time zone for your area. You can choose the time zone from the map or from the list. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 5-4 OL-29674-01 Chapter 5 Installing or Upgrading the ISSIG Installing or Upgrading the ISSIG Software Step 10 b. If your system clock uses Universal Coordinated Time (UTC), make sure that you check the System Clock uses UTC check box. Cisco recommends that UTC be used, particularly in Cisco IPICS deployments that include high availability. c. Click Forward. In the Date and Time window take either of these actions, then click Forward: • If your network uses the Network Time Protocol (NTP), choose the Network Time Protocol tab and check the Enable Network Time Protocol check box. Enter the name or IP address of an NTP server in the Server field, and click Add. Repeat to add additional servers. To delete a server, choose the server, and click Delete. If you configure NTP on the server, your system administrator should provide instructions to the IDC users to also configure the Windows Time Service on their IDC client machines to enable synchronization between the IDC and the server logs. For detailed information about configuring the Windows Time Service, go the Microsoft support site and search for Article ID 307897. If you install a time-bound license for your system, use caution when enabling NTP. Adjustments to the system date can cause Cisco IPICS to invalidate your license. Cisco recommends that NTP be used, particularly in Cisco IPICS deployments that include high availability. • Step 11 If your network does not use NTP, choose the Date & Time tab and enter the current date and time in the appropriate fields. In the Finish Setup window, click Finish. The system bootup process continues and the system processes an internal check. When the bootup process completes, the log in prompt appears. Installing or Upgrading the ISSIG Software After you configure the Cisco Multiservice Platform server for your environment, you are ready to install the ISSIG software on the server. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 5-5 Chapter 5 Installing or Upgrading the ISSIG Installing or Upgrading the ISSIG Software To install the ISSIG software, perform the following steps. Procedure Step 1 From a client PC, take these actions to obtain the ISSIG installation file: a. Go to this URL (you must have a valid Cisco.com user ID and password before you can access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930& flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download Now next to issig-4.6.1.bin. Follow the onscreen instructions to download the ISSIG installation file for your version of Cisco IPICS to your local drive. Step 2 Copy the ISSIG installation file from your local drive to the Multiservice Platform server. Step 3 Log in to the Multiservice Platform as the root user. Step 4 Modify the permissions on the ISSIG installation file by entering the following commands: [root]# cd location [root]# chmod 755 installerfilename.bin where: Step 5 • location is the full path and directory to which you copied the ISSIG installation file • installerfilename is the name of the ISSIG installation file that you put on the server Enter the following command to start the ISSIG installer, where installerfilename is the name of the ISSIG installation file that you put on the server: [root]# ./installerfilename.bin If you are performing a fresh install of the ISSIG, the Welcome to the Cisco ISSIG Software Installation Program appears. If you are upgrading the ISSIG software on this server, continue to Step 6. If you are performing a fresh install of the ISSIG, skip to Step 7. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 5-6 OL-29674-01 Chapter 5 Installing or Upgrading the ISSIG Installing or Upgrading the ISSIG Software Step 6 Caution Step 7 If you are upgrading the ISSIG software, take either of these actions: • Press 1 and Enter to install the ISSIG software. This process installs the ISSIG software and completely removes the older version of the software and its configuration information. • Press 2 and Enter to upgrade to the ISSIG software. This process installs the ISSIG and retains the earlier ISSIG configuration information. If you choose option 1, you loose all of your existing ISSIG configuration information. When you are prompted to continue, press Y then press Enter. Text displays to inform you that you must read and accept the terms of the End User License Agreement (EULA) before you can proceed. Step 8 Take these actions: a. Press Enter to display the EULA. b. Press the Spacebar to scroll through and view the EULA, then type y and press Enter to continue with the installation. You must accept the terms of the EULA to proceed. Step 9 When you are prompted to continue, type y then press Enter. Step 10 When you are prompted for an ISSIG Administration Console user name, enter a user name that you will use is you need to access the ISSIG Administration Console, then press Enter. The user name can include letters and numbers only. It cannot be blank. Step 11 When you are prompted for an ISSIG Administration Console password, enter a password that you will use to access the ISSIG Administration Console, then press Enter. The password must follow these guidelines: • Must contain at least 6 characters • Cannot contain any variation of cisco or ocsic (for example, abCiSCo12 is not valid) • Cannot contain three or more same consecutive characters (for example, a password that contains AAA or 888 is not valid) Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 5-7 Chapter 5 Installing or Upgrading the ISSIG Installing or Upgrading the ISSIG Software • Must contain at least one uppercase letter, one lowercase letter, one number, and one special character (special characters include !, @, and #) Step 12 Reenter the ISSIG administration console password when you are prompted to do so, then press Enter. Step 13 When you see the “Password accepted” message, press Enter. Step 14 When you are prompted to begin the installation, type y then press Enter. The ISSIG software installs. A progress bar indicates how the installation is proceeding. Step 15 When you are prompted whether you want to reboot the server, type y then press Enter. The server reboots. Step 16 When you see the log in prompt, log in as the Linux root user and press Enter. If you are using this procedure to upgrade the ISSIG software, the upgrade procedure is complete. Do not perform the following two steps. Step 17 Take these actions to run the network configuration script and configure eth1: a. Enter this command: [root]# network_config Step 18 b. At the Enter option prompt, press 3 then press Enter. c. Enter an IP address for eth1, then press Enter. d. Press A to apply the configuration that you entered an exit the configuration script. e. When you are prompted whether you want to apply the configuration now, press Y then press Enter. Take these actions to run the ISSIG configuration script and configure required options: a. Enter this command: [root]# issig_config b. Choose the following options from the ISSI Gateway Configuration menu and configure each option as appropriate for your deployment: – IPICS/P25 Gateway Site ID—6 hex value of the proxy unit ID for multicast communications. Valid values are 000001 through FFFFFC. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 5-8 OL-29674-01 Chapter 5 Installing or Upgrading the ISSIG Provisioning the ISSIG on the Cisco IPICS Server – RFSS ID— 2 hex value that identifies the RF subsystem in a P25 network. Valid entries are 01 through FE. – System ID— 3 hex value that identifies the home system. Valid values are 001 through FFF. – WACN ID—Wide Area Communication Network Identifier. A 5 hex value that sets the home network identity, which is hard-coded into the radio SU by a data interface. This option identifies the home network in which the radio can work. Valid entries are 00001 through FFFFE. c. Press A to apply the configuration that you entered an exit the configuration script. d. When you are prompted whether you want to apply the configuration now, press Y then press Enter. e. When you are prompted to start the server, press Y then press Enter. Provisioning the ISSIG on the Cisco IPICS Server This section provides an overview of provisioning the ISSIG. You perform this procedure after you install the ISSIG. For more detailed information about ISSIG provisioning steps and options, see Cisco IPICS Administration Guide. Before You Begin Configure the Network Location Register (NLR) as described in Cisco Network Location Register User Guide. This document is available at: http://www.cisco.com/en/US/docs/interoperability_systems/c_ipics/451/issi/nlr_ user_guide/network_location_register_ug.html Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 5-9 Chapter 5 Installing or Upgrading the ISSIG Provisioning the ISSIG on the Cisco IPICS Server To provision the ISSIG, follow these steps: Procedure Step 1 From the Cisco IPICS Administration Console, take these actions to upload an ISSIG descriptor file: a. From the Configuration drawer, click Descriptors. b. Click Add. c. From the Descriptor Type drop-down list, choose ISSI Gateway. d. In the File to Upload field, enter the name of the ISSIG descriptor file that you want to upload. You can use the Browse button to open the Choose File window, then navigate to the file that you want, highlight it, and click Open. e. Note Step 2 Click Save. If you need to modify a descriptor file, see the “Updating Radio and Tone Descriptors” section in Cisco IPICS Server Administration Guide. From the Cisco IPICS Administration Console, take these actions to add an ISSIG: a. From the Configuration drawer, click Radios. b. Click Add and choose Add ISSI Gateway. c. Configure options the General tab for the new ISSI gateway as appropriate for your deployment, then click Save. For information about these options, see the “Adding a Radio” section in Cisco IPICS Server Administration Guide. d. Click the IDC tab and configure options as appropriate for your deployment, then click Save. For information about these options, see the “Adding a Radio” section in Cisco IPICS Server Administration Guide. e. Click the Selectors tab and choose the selectors that you want to be enabled for this ISSIG. The list of selectors that are available are defined in the radio descriptor. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 5-10 OL-29674-01 Chapter 5 Installing or Upgrading the ISSIG Provisioning the ISSIG on the Cisco IPICS Server f. Click the Controls tab and choose the controls that you want available for this ISSI gateway's users. g. Click the Services tab and choose the services that you want to be available for the users of this ISSIG. h. Click Associations and associate users to the ISSIG as appropriate for your deployment For information about making these associations, see the “Associating a User to a Radio From the Radios Window” in Cisco IPICS Server Administration Guide. Step 3 From the Cisco IPICS Administration Console, take these actions to add a PTT channel for the ISSIG: a. From the Configuration drawer, click Channels. b. Click Add. c. Configure options the General tab for the channel as appropriate for your deployment, then click Save. In the Media Connections Assignments area, make sure to choose ISSIG from the Type drop-down list and configure appropriate settings. For information about these options, see the “Viewing and Editing Channel Details” section in Cisco IPICS Server Administration Guide. d. Click the IDC tab and configure options as appropriate for your deployment, then click Save. For information about these options, see the “Viewing and Editing Channel Details” section in Cisco IPICS Server Administration Guide. Step 4 From the Cisco IPICS Administration Console, take these actions to configure options for users who will communicate through the ISSIG in native mode: a. From the User Management drawer, click Users. b. Click Add. c. Configure and save options the tabs in this window as appropriate for your deployment. In the Communications tab, make sure to choose the ISSI descriptor name for your ISSIG from the Add drop-down list in the Radio Preferences area and configure settings as appropriate. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 5-11 Chapter 5 Installing or Upgrading the ISSIG Provisioning the ISSIG on the Cisco IPICS Server For information about these options, see the “Adding a User” section in Cisco IPICS Server Administration Guide. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 5-12 OL-29674-01 CH A P T E R 6 Installing the DFSIG Cisco IPICS supports voice interoperability between radio frequency subsystems that support conventional P25 radio systems. To enable this support, you install and configure the Cisco Digital Fixed Station Interface Gateway (DFSIG). The DFSIG installs and operates on a dedicated Cisco Multiservices Platform Series server. The appropriate operating system is installed on this server at the factory. For a list of supported servers, see Cisco IPICS Compatibility Matrix. The DFSIG installation process consists of two general procedures: First you configure the Multiservices Platform Series server for your environment, then you install and configure the DFSIG software on the Multiservices Platform Series server. This chapter includes these topics: • DFSIG Overview, page 6-1 • Configuring the Multiservices Platform Series Server for Your Environment, page 6-2 • Installing the DFSIG Software, page 6-5 DFSIG Overview The DFSIG is an optional software package for Cisco IPICS. It runs on a Cisco Multiservices Platform Series server and provides the connectivity between Cisco IPICS and the conventional P25 radio systems with which you will interoperate. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 6-1 Chapter 6 Installing the DFSIG Configuring the Multiservices Platform Series Server for Your Environment The DFSIG includes the following components: • P25 Gateway—Handles the transcoding between the G.711 codec of a multicast stream and the Improved Multi-Band Exitation (IMBE) codec • Console Arbitrator (CAR)—Handles the implementation of the DFSI standard and interoperability with DFSI-capable fixed stations The DFSIG provides these interoperability modes: • Channel selection • Repeater mode selection (direct/talkaround or repeater) • Squelch • Supplementary services—STRETCH • Encryption • Console priority • Emergency calls Configuring the Multiservices Platform Series Server for Your Environment Before you install the DFSIG software on a Cisco Multiservices Platform Series server, you must configure various network and system settings on the server for your environment. To configure the Cisco Multiservices Platform server, perform the following steps. Procedure Step 1 Power on the Multiservices Platform server and log in to the server with the user name root and the password ipics. Step 2 Execute the reconfigure command: [root]# reconfigure Step 3 When you are prompted whether you want to reboot the server, press Y then press Enter. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 6-2 OL-29674-01 Chapter 6 Installing the DFSIG Configuring the Multiservices Platform Series Server for Your Environment The server begins the reboot process. After a few minutes, the Welcome window appears. Step 4 At the Welcome window, click Forward to display the Root Password window. Step 5 In the Root Password window, take these actions: a. In the Confirm fields, enter a password for the root user. The root user has access to all the files in the server. Cisco IPICS requires that you use strong passwords that meets these guidelines: – Minimum of 8 characters in length – At least one upper case letter – At least one upper case letter – At least one number – At least one of the following special characters: @[]^_`!"#$%&'()*+,-./:;{<|=}>~? Note b. Step 6 If you need to change the root password at a later date, you can log in to the Cisco IPICS server as the root user and change it by using the reset_pw command. For more information, refer to the “Using the Cisco IPICS CLI Tools and Service Commands” chapter in Cisco IPICS Troubleshooting Guide. Click Forward. In the GRUB Password window, take these actions: a. In the Confirm fields, a password for the GRUB (boot loader) menu. The boot loader password enables access to the boot loader menu, which allows a system administrator to boot the server into single-user mode. Single-user mode is required to recover a lost root password. This password must contain at least 6 characters. b. Step 7 Click Forward. In the System User window, take these actions to create a system user, which is the user who performs administrative tasks on the server: a. In the User Name field, enter a unique user name for the system user. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 6-3 Chapter 6 Installing the DFSIG Configuring the Multiservices Platform Series Server for Your Environment b. (Optional) In the Full Name field, enter the first name and last name of the system user, or a brief description of this user. c. In the Password and Confirm fields, enter a password for the system user. This password has the same requirements as the root password that you entered in Step 5. d. Step 8 Step 9 Click Forward. In the Network Setup window, take these actions: a. In the Host Name filed, enter the fully-qualified hostname for this server. b. In the IP address field, enter the IP address for this server. c. In the Subnet Mask, field, enter the subnet mask for this server. d. In the Gateway field, enter the IP address of the default gateway that this server uses. e. In the Primary DNS field, enter the IP address of the primary DNS for this server. f. (Optional) In the Secondary DNS field, enter the IP address of the secondary DNS for this server. g. (Optional) In the Tertiary DNS field, enter the IP address of the Tertiary DNS for this server. h. Click Forward. In the Timezone window, take these actions: a. Choose the correct time zone for your area. You can choose the time zone from the map or from the list. b. If your system clock uses Universal Coordinated Time (UTC), make sure that you check the System Clock uses UTC check box. Cisco recommends that UTC be used, particularly in Cisco IPICS deployments that include high availability. c. Click Forward. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 6-4 OL-29674-01 Chapter 6 Installing the DFSIG Installing the DFSIG Software Step 10 In the Date and Time window take either of these actions, then click Forward: • If your network uses the Network Time Protocol (NTP), choose the Network Time Protocol tab and check the Enable Network Time Protocol check box. Enter the name or IP address of an NTP server in the Server field, and click Add. Repeat to add additional servers. To delete a server, choose the server, and click Delete. If you configure NTP on the server, your system administrator should provide instructions to the IDC users to also configure the Windows Time Service on their IDC client machines to enable synchronization between the IDC and the server logs. For detailed information about configuring the Windows Time Service, go the Microsoft support site and search for Article ID 307897. If you install a time-bound license for your system, use caution when enabling NTP. Adjustments to the system date can cause Cisco IPICS to invalidate your license. Cisco recommends that NTP be used, particularly in Cisco IPICS deployments that include high availability. • Step 11 If your network does not use NTP, choose the Date & Time tab and enter the current date and time in the appropriate fields. In the Finish Setup window, click Finish. The system bootup process continues and the system processes an internal check. When the bootup process completes, the log in prompt appears. Installing the DFSIG Software After you configure the Cisco Multiservice Platform server for your environment, you are ready to install the DFSIG software on the server. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 6-5 Chapter 6 Installing the DFSIG Installing the DFSIG Software To install the DFSIG software, perform the following steps. Procedure Step 1 From a client PC, take these actions to obtain the DFSIG installation file: a. Go to this URL (you must have a valid Cisco.com user ID and password before you can access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930& flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download Now next to dfsig-4.6.1.bin. Follow the onscreen instructions to download the DFSIG installation file for your version of Cisco IPICS to your local drive. Step 2 Copy the DFSIG installation file from your local drive to the Multiservice Platform server. Step 3 Log in to the Multiservice Platform as the root user. Step 4 Modify the permissions on the DFSIG installation file by entering the following commands: [root]# cd location [root]# chmod 755 installerfilename.bin where: Step 5 • location is the full path and directory to which you copied the DFSIG installation file • installerfilename is the name of the DFSIG installation file that you put on the server Enter the following command to start the DFSIG installer, where installerfilename is the name of the DFSIG installation file that you put on the server: [root]# ./installerfilename.bin The Welcome to the Cisco DFSIG Software Installation Program appears. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 6-6 OL-29674-01 Chapter 6 Installing the DFSIG Installing the DFSIG Software Step 6 When you are prompted to continue, type y then press Enter. Text displays to inform you that you must read and accept the terms of the End User License Agreement (EULA) before you can proceed. Step 7 Take these actions: a. Press Enter to display the EULA. b. Press the Spacebar to scroll through and view the EULA, then type y and press Enter to continue with the installation. You must accept the terms of the EULA to proceed. Step 8 When you are prompted to continue, type y then press Enter. Step 9 When you are prompted for an DFSIG Administration Console user name, enter a user name that you will use is you need to access the DFSIG Administration Console, then press Enter. The user name can include letters and numbers only. It cannot be blank. Step 10 When you are prompted for an DFSIG Administration Console password, enter a password that you will use to access the DFSIG Administration Console, then press Enter. The password must follow these guidelines: • Must contain at least 6 characters • Cannot contain any variation of cisco or ocsic (for example, abCiSCo12 is not valid) • Cannot contain three or more same consecutive characters (for example, a password that contains AAA or 888 is not valid) • Must contain at least one uppercase letter, one lowercase letter, one number, and one special character (special characters include !, @, and #) Step 11 Reenter the DFSIG administration console password when you are prompted to do so, then press Enter. Step 12 When you see the “Password accepted” message, press Enter. Step 13 When you are prompted to begin the installation, type y then press Enter. The DFSIG software installs. A progress bar indicates how the installation is proceeding. Step 14 When you are prompted whether you want to reboot the server, type y then press Enter. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 6-7 Chapter 6 Installing the DFSIG Installing the DFSIG Software The server reboots. Step 15 When you see the log in prompt, log in as the Linux root user and press Enter. Step 16 Take these actions to run the network configuration script and configure eth1: a. Enter this command: [root]# network_config b. At the Enter option prompt, press 3 then press Enter. c. Enter an IP address for eth1, then press Enter. d. Press A to apply the configuration that you entered an exit the configuration script. e. When you are prompted whether you want to apply the configuration now, press Y then press Enter. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 6-8 OL-29674-01 CH A P T E R 7 Installing Language Packs for Cisco IPICS This chapter describes the procedures that you need to follow to install language packs on the Cisco IPICS server. After you install the language packs, you can localize prompts and scripts in the CIsco IPICS dial engine, and IDC users can localize the windows, menus, and prompts for their IDCs. To install language packs, follow these steps: Step 1 For each language pack that you will install, take these actions to add the corresponding language to the Cisco IPICS dial engine: a. From the Dial Engine drawer, choose the Policy Engine tab and navigate to the Prompt Management > Languages window. b. In the Language window, click the Add button. c. Enter language name for the language pack that you will install: – ar_SA—Arabic, Saudi Arabia – es_CO—Spanish, Columbia – fr_CA—French, Canada – ja_JP—Japanese, Japan – pt_BR—Portuguese, Brazil – ru_RU—Russian, Russia – zh_TW—Traditional Chinese, Taiwan Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 7-1 Chapter 7 d. Installing Language Packs for Cisco IPICS Click Save. After you have add languages to the dial engine that correspond to each language pack that you will install, continue with this procedure to download and install the language packs on the Cisco IPICS server. Step 2 From a client PC, take these actions to obtain the language packs that you want to install: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid=280723930 &flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to the language packs that you want to install. Language packs are named as follows: ipics-lang-language_code-4.6.1.bin where language_code is: • ar_SA—Arabic, Saudi Arabia • es_CO—Spanish, Columbia • fr_CA—French, Canada • ja_JP—Japanese, Japan • pt_BR—Portuguese, Brazil • ru_RU—Russian, Russia • zh_TW—Traditional Chinese, Taiwan d. Follow the onscreen instructions to download the Cisco IPICS software to your local drive. Step 3 Access the Cisco IPICS server via an SSH client or the Console window and log in as the Linux root user. Step 4 Take these actions: a. Copy the Cisco IPICS language pack files from your local drive to a folder on the server on which you want to install the software. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 7-2 OL-29674-01 Chapter 7 Installing Language Packs for Cisco IPICS b. Enter the following command to navigate to the folder to which you copied the language pack files: [root]# cd /folder c. Modify the permissions on the each language pack file by entering the following command, where language_pack specifies the name of the language pack file (make sure to include the .bin file extension as part of this file name): [root]# chmod 755 language_pack Step 5 To start the installation, enter the following command, where language_pack specifies the name of one of the language pack file: [root]# ./language_pack.bin The language pack installation process begins. After a short time, you see a Welcome message. Step 6 When you see the “Welcome to the Cisco IPICS language pack installer” message, type y, then press Enter. The installation process begins. A progress bar indicates the percentage of the installation that has completed. After the installation completes, a message informs you of the status and prompts you to reboot. Repeat Step 5 and Step 6 for each additional language pack. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 7-3 Chapter 7 Installing Language Packs for Cisco IPICS Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 7-4 OL-29674-01 CH A P T E R 8 Uninstalling or Rolling Back the Cisco IPICS Server Software This chapter provides information about the procedures for uninstalling or following back the Cisco IPICS server software. You can perform the uninstallation procedure in one of the following ways: Note • From the Cisco IPICS server by using a terminal console • From a remote PC on the network by using SSH software • The Cisco IPICS uninstallation procedure removes all of the components and directories that were created during the Cisco IPICS installation. If you intend to reinstall Cisco IPICS at a later time, Cisco recommends that you back up your database and log files before you begin the uninstallation process. • For information about backing up files, see the “Performing Cisco IPICS Backup and Restore Operations” chapter in Cisco IPICS Server Administration Guide. • Be aware that when you uninstall and reinstall the Cisco IPICS software, communications are temporarily disrupted. Upon reinstallation, Cisco IPICS disconnects VTGs and SIP-based IDC clients that were using RMS resources so that the voice ports become available for use. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 8-1 Chapter 8 Uninstalling the Cisco IPICS Software from the Server Uninstalling or Rolling Back the Cisco IPICS Server Software This chapter includes the following sections: • Uninstalling the Cisco IPICS Software from the Server, page 8-2 • Uninstalling the Cisco IPICS Server Software Remotely, page 8-4 • Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1), page 8-5 Uninstalling the Cisco IPICS Software from the Server To uninstall the Cisco IPICS software directly from the Cisco IPICS server, perform the following procedure: Procedure Step 1 Access the Cisco IPICS server by using a terminal console. Cisco IPICS displays the following text, hostname specifies the host name of the Cisco IPICS server: Cisco IPICS hostname login: Step 2 Enter root in the hostname login: field; then, press Enter. Cisco IPICS prompts you for the password for the root user. Step 3 Enter the password for the root user; then, press Enter. Step 4 To navigate to the directory where the uninstaller file is located and start the uninstallation process, take one of these actions: • If you are uninstalling the Cisco IPICS server software, enter these commands: [root]# cd /root/_uninstall_IPICS [root]# bash uninstall-ipics Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 8-2 OL-29674-01 Chapter 8 Uninstalling or Rolling Back the Cisco IPICS Server Software Uninstalling the Cisco IPICS Software from the Server • If you are uninstalling the UMS software, enter these commands: [root]# cd /root/_uninstall_UMS [root]# bash uninstall-ums • If you are uninstalling the ISSIG software, enter these commands: [root]# cd /root/_uninstall_ISSIG [root]# bash uninstall-issig • If you are uninstalling the DFSIG software, enter these commands: [root]# cd /root/_uninstall_DFSIG [root]# bash uninstall-dfsig The uninstallation program prompts you to confirm the uninstallation process. Step 5 To confirm the uninstallation process, type y and press Enter. The uninstallation process begins. Note Be aware that the Cisco IPICS uninstallation process permanently removes the Cisco IPICS software and deletes any Cisco IPICS database and configuration data that you have stored in the server. If you need to save your data, Cisco recommends that you first back up your data to a remote host before you uninstall the software. For more information about backing up your data, refer to the “Performing Cisco IPICS Backup and Restore Operations” chapter in Cisco IPICS Server Administration Guide. After you have preserved a copy of your data, you can restart the uninstallation process. The uninstaller begins to uninstall the Cisco IPICS components. After the uninstaller removes the files, a message prompts you to reboot the server. Step 6 To reboot the system, type y and press Enter. After the system reboots, the Cisco IPICS server software is removed. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 8-3 Chapter 8 Uninstalling the Cisco IPICS Server Software Remotely Step 7 Uninstalling or Rolling Back the Cisco IPICS Server Software Repeat this procedure for each Cisco IPICS component that is installed at your deployment. Uninstalling the Cisco IPICS Server Software Remotely To uninstall the Cisco IPICS server software from a PC on the network, perform the following procedure: Procedure Step 1 Access the Cisco IPICS server via an SSH client and log in as the Linux root user. Step 2 To navigate to the directory where the uninstaller file is located, enter one of the the following commands: • If you are uninstalling the Cisco IPICS server software, enter: [root]# cd /root/_uninstall_IPICS • If you are uninstalling the UMS software, enter: [root]# cd /root/_uninstall_UMS • If you are uninstalling the ISSIG software, enter: [root]# cd /root/_uninstall_ISSIG • If you are uninstalling the DFSIG software, enter: [root]# cd /root/_uninstall_DFSIG Step 3 To begin the uninstallation process, enter one of the following commands: • If you are uninstalling the Cisco IPICS server software, enter: [root]# bash uninstall-ipics • If you are uninstalling the UMS software, enter: [root]# bash uninstall-ums • If you are uninstalling the ISSIG software, enter: [root]# bash uninstall-issig Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 8-4 OL-29674-01 Chapter 8 Uninstalling or Rolling Back the Cisco IPICS Server Software Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1) • If you are uninstalling the DFSIG software, enter: [root]# bash uninstall-dfsig The uninstallation program prompts you to confirm the uninstallation process. Step 4 To continue the uninstallation program, type y and press Enter. Cisco IPICS begins the uninstallation process. Caution Be aware that the Cisco IPICS uninstallation process permanently removes the Cisco IPICS software and deletes any Cisco IPICS configuration data that you have stored in the server. If you need to save your data, Cisco recommends that you first back up your data to a remote host before you uninstall the software. For more information about backing up your data, refer to the “Performing Cisco IPICS Backup and Restore Operations” chapter in Cisco IPICS Server Administration Guide. After you have preserved a copy of your data, you can restart the uninstallation process. The uninstaller begins to uninstall the Cisco IPICS components. After the uninstaller removes the files, a message prompts you to reboot the server. Step 5 type y and press Enter to reboot the system. After the system reboots, the Cisco IPICS server software is removed. Step 6 Repeat this procedure for each Cisco IPICS component that is installed at your deployment. Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1) This section explains how to roll back the Cisco IPICS Server software from release 4.6(1) to release 4.5. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 8-5 Chapter 8 Uninstalling or Rolling Back the Cisco IPICS Server Software Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1) To roll back the UMS software from release 4.6(1) to release 4.5(1), follow these steps: Procedure Step 1 Uninstall the UMS software as described in the “Uninstalling the Cisco IPICS Software from the Server” section on page 8-2 or “Uninstalling the Cisco IPICS Server Software Remotely” section on page 8-4. Step 2 Install the 4.5(1) version of the UMS software as described in Cisco IPICS Installation and Upgrade Guide, Release 4.5(1) and 4.5(2). To roll back the ISSIG software from release 4.6(1) to release 4.5(1), follow these steps: Procedure Step 1 Make a note of the current IPICS/P25 Gateway Site ID, RFSS ID, System ID, and WACN ID values that are configured for the ISSIG. You will need this information when you install the previous version of the ISSIG software. Step 18 in the “Installing or Upgrading the ISSIG Software” section on page 5-5 describes these items in detail. Step 2 Uninstall the ISSIG software as described in the “Uninstalling the Cisco IPICS Software from the Server” section on page 8-2 or “Uninstalling the Cisco IPICS Server Software Remotely” section on page 8-4. Step 3 Install the 4.5(1) version of the ISSIG software as described in Cisco IPICS Installation and Upgrade Guide, Release 4.5(1) and 4.5(2). To roll back the Cisco IPICS Server software from release 4.6(1) to release 4.5(1) or 4.5(2), perform the following procedure. Before You Begin Make sure that you have a current backup of your Cisco IPICS data. To roll back the UMS software from release 4.6(1) to release 4.5(1), follow these steps: Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 8-6 OL-29674-01 Chapter 8 Uninstalling or Rolling Back the Cisco IPICS Server Software Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1) Procedure Step 1 Uninstall the Cisco IPICS Server software as described in the “Uninstalling the Cisco IPICS Software from the Server” section on page 8-2 or “Uninstalling the Cisco IPICS Server Software Remotely” section on page 8-4. Step 2 Install the 4.5(1) or 4.5(2) version of the Cisco IPICS Server software as described in Cisco IPICS Installation and Upgrade Guide, Release 4.5(1) and 4.5(2). Step 3 (Optional) If you want to rollback the Cisco IPICS database to the state that it was in at the time that you upgraded to release 4.5(2), restore the database using the backup that was made when you upgraded. Step 4 Log in to the Cisco IPICS Administration Console on the primary Cisco IPICS server and take these actions to generate the new IDC installer: a. From the IDC Management drawer, click IDC Installer. b. From the IDC Version to Use For The IDC Installer, choose 4.5(1) or 4.5(2). c. Click Save. d. From the IDC Management drawer, click IDC Versions. e. Check the check box for the row that contains 4.5(1) or 4.5(2) in the Version field. f. From the drop-down list next to the Change State button, choose Recommended. g. Click the Change State button. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 8-7 Chapter 8 Uninstalling or Rolling Back the Cisco IPICS Server Software Rolling Back the Cisco IPICS Software from Release 4.6(1) to 4.5(1) Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 8-8 OL-29674-01 CH A P T E R 9 Using a Virtual Machine with Cisco IPICS This chapter describes how to configure a virtual machine (VM) for Cisco IPICS. You can install and operate the Cisco IPICS application, the UMS, the ISSIG, and the DFSIG on a VM. Each component must run in its own VM. This chapter includes these topics: • Installing VMWare ESX or ESXi on a Device, page 9-1 • Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM by Deploying the OVF Template, page 9-3 • Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually, page 9-4 Installing VMWare ESX or ESXi on a Device The following section describe how to install VMware ESX or ESXi on the device on which you will run the VM. Perform the steps that are described in the section for your device. • Installing VMware ESX or ESXi on a Cisco UCS B-Series Server, page 9-2 • Installing VMware ESX or ESXi on a Cisco UCS C-Series Server, page 9-2 • Installing VMware ESX or ESXi on a Cisco UCS E-Series Server, page 9-2 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 9-1 Chapter 9 Using a Virtual Machine with Cisco IPICS Installing VMWare ESX or ESXi on a Device Installing VMware ESX or ESXi on a Cisco UCS B-Series Server To install VMware ESX or ESXi on a Cisco UCS B-Series server, see Cisco UCS B-Series Blade Servers VMware Installation Guide. This document is available at: http://www.cisco.com/en/US/docs/unified_computing/ucs/os-install-guides/ vmware/b_B-Series_VMware_Install.html Installing VMware ESX or ESXi on a Cisco UCS C-Series Server To install VMware ESX or ESXi on a Cisco UCS C-Series server, see Cisco UCS C-Series Servers VMware Installation Guide. This document is available at: http://www.cisco.com/en/US/docs/unified_computing/ucs/os-install-guides/ vmware/b_C-Series_VMware_Install.html Installing VMware ESX or ESXi on a Cisco UCS E-Series Server To install VMware ESX or ESXi on a Cisco UCS E-Series server, see Getting Started Guide for Cisco UCS E-Series Servers. This document is available at: http://www.cisco.com/en/US/docs/unified_computing/ucs/e/1.0/gs/guide/ b_Getting_Started_Guide_chapter_010.html Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 9-2 OL-29674-01 Chapter 9 Using a Virtual Machine with Cisco IPICS Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM by Deploying the OVF Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM by Deploying the OVF Template This section describes how to deploy the OVF template, which installs the Cisco IPICS operating system and configures the VM. If you need to perform these procedures manually, use the procedure that the “Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM by Deploying the OVF Template” section on page 9-3 describes instead of using the following procedure. The OVF template is approximately 1.6 GB. Be aware that this file can take some time to download. Procedure Step 1 From a client PC, take these actions to obtain the OVF template: a. Go to this URL (you must have a valid Cisco.com user ID and password to access this URL): http://www.cisco.com/cisco/software/navigator.html?mdfid= 280723930&flowid=7120 b. Click the Cisco IPICS Release 4.6 link. c. Click Download next to the appropriate file for your installation: – ipics-4.5.1-2cpu.ova—Use this file if you are running the VM on a device that has two CPUs – ipics-4.5.1-4cpu.ova—Use this file if you are running the VM on a device that has four CPUs d. Follow the onscreen instructions to download the file to your local drive. Step 2 From a client PC, use the VMware vSphere client application to log in to VMware ESX or ESXi on the device that is to host the VM. Step 3 From the list of hosts in the left panel of the vSphere client window, click the host on which you want to deploy the OVF template. Step 4 Choose File > Deploy OVF Template... . The Deploy OVF Template Wizard starts. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 9-3 Chapter 9 Using a Virtual Machine with Cisco IPICS Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually Step 5 In the Deploy OVF Template Wizard, take these actions: a. In the Deploy OVF Template window, navigate to and select the OVF template that you downloaded in Step 1, and then click Next. b. In the OVF Template Details window, click Next. c. In the Name and Location window, enter a name for the VM in the Name field, and then click Next. d. In the Datastore window, click the datastore in which to store the VM files, and then click Next. e. In the Disk Format window, click the Thin provisioned format radio button, and then click Next. f. In the Ready to Complete window, click Finish. Step 6 When the Deployment Completed Successfully window appears, click Close in that window. Step 7 From the list of hosts in the left panel of the vSphere client window, click the name of the new VM that you configured in Step 5c. Step 8 Power on the new VM. Step 9 When the Welcome window appears, perform the procedure that the “Configuring Server Parameters on the Multiservices Platform Series Server” section on page 2-10 describes, beginning with Step 4. You can now install the Cisco IPICS application, the UMS, the ISSIG, or the DFSIG on the VM. Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually The following sections explain how to Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually. You can use the procedures that these sections describe instead of using the procedure that the “Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM by Deploying the OVF Template” section on page 9-3 describes if deploying the OVF template is not suitable for your situation. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 9-4 OL-29674-01 Chapter 9 Using a Virtual Machine with Cisco IPICS Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually • Obtaining the ISO Image for the Cisco IPICS Operating System, page 9-5 • Configuring the Virtual Machine, page 9-6 Obtaining the ISO Image for the Cisco IPICS Operating System As part of the VM configuration process, you install the Cisco IPICS operating system on the VM. Perform the following steps to obtain this operating system and upload it to the the device on which you will install the VM. Before you perform this procedure, make sure that you perform the procedure that the “Installing VMWare ESX or ESXi on a Device” section on page 9-1 describes. Procedure Step 1 Take these actions to download the Cisco IPICS operating system ISO image to a client PC that you can access from the device: a. On the client PC go to this URL: http://www.cisco.com/cisco/software/release.html?mdfid=282977238& flowid=7120&softwareid=282704403&release=4.0.1&rellifecycle=& relind=AVAILABLE&reltype=all Step 2 b. Click the 4.5.1 link under All Releases > 4. c. Click the Download button for ipics-server-4.5_b8-dvd.iso. d. Follow the onscreen instructions to download the ISO image to the client PC. Take these actions to upload the Cisco IPICS operating system ISO image from the client PC to the device: a. Use the VMware vShpere client application to log in to VMware ESX or ESXi on the device. b. Click the host on which you will install the VM from the inventory list at the left of the VMware vShpere client application window. c. Click the Summary tab. d. In the Resources area in the Summary tab, right-click the datastore to which you want to upload the ISO image and choose Browse Datastore.... Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 9-5 Chapter 9 Using a Virtual Machine with Cisco IPICS Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually e. From the Datastore Browser window, navigate to the folder to which you want to upload the ISO image, then click the Upload files to this datastore icon . f. Choose Upload File.... g. In the Upload Items window, navigate to the location on the Client PC where you saved the Cisco IPICS operating system ISO image file and click Open. h. If the Upload/Download window appears, click Yes. Configuring the Virtual Machine This section describes how to configure a VM on a device. Before you perform the following procedure, make sure that you perform the procedure that the “Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually” section on page 9-4 describes. Procedure Step 1 Use the VMware vSphere client application to log in to VMware ESX or ESXi on the device. Step 2 Choose Inventory > Host > New Virtual Machine.... Step 3 In the Create New Virtual Machine - Configuration window, take these actions: Step 4 Step 5 a. Make sure that the Typical radio button is selected. b. Click Next. In the Create New Virtual Machine - Name and Location window, take these actions: a. In the Name field, enter a name for the VM. b. Click Next. In the Create New Virtual Machine - Datastore window, take these actions: a. Choose the datastore in which to save the VM. b. Click Next. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 9-6 OL-29674-01 Chapter 9 Using a Virtual Machine with Cisco IPICS Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually Step 6 In the Create New Virtual Machine - Guest Operating System window, take these actions: a. Click the Linux radio button. b. From the Version drop-down list, choose Red Hat Enterprise Linux 5 (32-bit). c. Click Next. Step 7 If you are using ESXi 5.0, click Next in the Network window to accept the default values. Step 8 In the Create New Virtual Machine - Create a Disk window, take these actions: a. In the Virtual disk size field, enter the disk size for the VM. Enter a value of at least 26 GB for the virtual disk size. Step 9 Step 10 b. Check the Allocate and commit space on demand (Thin Provisioning) check box. c. Click Next. In the Create New Virtual Machine - Ready to Complete window, take these actions: a. Check the Edit the virtual machine settings before completion check box. b. Click Continue. In the Virtual Machine Properties window, take these actions: a. In the Memory Size field, enter the amount of memory for the VM. Enter a value of at least 4 GB for memory. b. If you will install the Cisco IPICS ISSI Gateway on this VM, take these actions to install a second NIC adapter, which is required for the ISSI Gateway: 1. In the Hardware list, click New NIC (adding). 2. Click Add.... The Add Hardware window appears. 3. In the Add Hardware window, click Ethernet Adapter and then click Next. 4. In the Network type window, click Next to accept the default value. 5. In the Ready to Complete window, click Finish. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 9-7 Chapter 9 Using a Virtual Machine with Cisco IPICS Obtaining the ISO Image for the Cisco IPICS Operating System and Configuring the VM Manually Step 11 c. Click Finish. d. In the Virtual Machine Properties window, click Finish. Take these actions to install the Cisco IPICS operating system as a guest operating system on the VM: a. Click the VM on which to install the operating system from the inventory list at the left of the VMware vShpere client application window, then choose Inventory > Virtual Machine > Edit Settings…. b. In the Virtual Machine Properties window, choose the Hardware tab. c. In the Hardware tab, click CD/DVD Drive 1 in the Hardware list. d. In the Device Type area, click the Datastore ISO File check box and click Browse. e. In the Browse window, navigate to the location on the device where you uploaded the Cisco IPICS operating system ISO image, click the name of the ISO image, and then click OK. f. In the Device Status area, check the Connect at power on check box. g. Click OK. h. Click the Console tab. i. Choose Inventory > Virtual Machine > Power > Power On. The VM machine powers on and boots from the operating system ISO image. j. When you see the prompt that asks if you want to continue installing the operating system, type y and press Enter. k. When you see the screen that displays “Congratulations, the installation is complete,” click Reboot. l. When the Welcome window appears, perform the procedure that the “Configuring Server Parameters on the Multiservices Platform Series Server” section on page 2-10 describes, beginning with Step 4. You can now install the Cisco IPICS application, the UMS, the ISSI Gateway, or the DFSIG on the VM. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 9-8 OL-29674-01 CH A P T E R 10 Troubleshooting Cisco IPICS Installation Issues The issues this chapter describes may occur during, or as a result of, installing the Cisco IPICS operating system or the Cisco IPICS server software. This chapter includes the following sections: • No Network Connectivity After Connecting the Ethernet Cable to Interface 1 on the Server, page 10-2 • The Cisco IPICS Operating System Detects Unsupported Hardware, page 10-2 • The Server Cannot Allocate Partitions, page 10-3 • Troubleshooting “Bad Interpreter: Permission Denied” Errors, page 10-3 • Troubleshooting “Permission Denied” Errors, page 10-4 • You Cannot Connect to the Server By Using Your Browser, page 10-4 • Cisco IPICS Displays an Authorization Error, page 10-9 • Cisco IPICS Displays “Server Initializing” for More than 1 Hour, page 10-11 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 10-1 Chapter 10 Troubleshooting Cisco IPICS Installation Issues No Network Connectivity After Connecting the Ethernet Cable to Interface 1 on the Server No Network Connectivity After Connecting the Ethernet Cable to Interface 1 on the Server Problem After you install the Cisco IPICS operating system software, you cannot connect your server to the network. The Ethernet cable is connected to Ethernet interface 1 on the server. The connection uses DHCP. Solution If your interfaces are labeled 1 and 2, the server might map the eth0 port to interface 2. Connect the Ethernet cable to interface 2 on your server and try to reestablish connectivity, or consult your server documentation to determine the mapping scheme for the eth0 port. Note If your interfaces are labeled NIC 1 and NIC 2, connect the Ethernet cable to the NIC 1 interface. The Cisco IPICS Operating System Detects Unsupported Hardware Problem When you install the Cisco IPICS operating system software, a message informs you that the hardware platform is not supported. Solution The installation program includes hardware detection logic that checks for supported parameters on the server. If any of the parameters do not match with the information that is contained in the installation program, an unsupported hardware message displays. For instance, if you install the Cisco IPICS operating system on a supported server model that does not have the required amount of memory installed, the installation program detects an unsupported parameter. In this case, the server model is actually supported, but because there is insufficient memory to support Cisco IPICS, the message displays. Make sure that you check Cisco IPICS Compatibility Matrix at the following URL for the most current versions of compatible hardware components, including memory requirements, and software versions for use with Cisco IPICS: http://www.cisco.com/en/US/products/ps6718/products_device_support_tables_ list.html Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 10-2 OL-29674-01 Chapter 10 Troubleshooting Cisco IPICS Installation Issues The Server Cannot Allocate Partitions The Server Cannot Allocate Partitions Problem When you attempt to install the Cisco IPICS operating system software, the server displays the following error message: Could not allocate requested partitions: Partitioning Failed: Could not allocate partitions Press OK to reboot system. Solution You may encounter this error if the server does not have sufficient hard disk space. Make sure that no hard disks have been removed from your server; your server must have 160 GB of hard disk space to function properly with the Cisco IPICS operating system. For more information, see Cisco IPICS Compatibility Matrix. Troubleshooting “Bad Interpreter: Permission Denied” Errors Problem You attempt to install the Cisco IPICS server software and the installer displays a bad interpreter error, as shown following example: [root]# ./install-ipics-version.bin -bash: ./install-ipics-version.bin: /bin/bash: bad interpreter: Permission denied where version represents the version of the Cisco IPICS installer file that you are attempting to run. Solution The shell interpreter script for the Cisco IPICS operating system misinterprets the ./ command. To fix this problem, replace ./ with the bash command, as shown in the following example: [root]# bash install-ipics-version.bin where version represents the version of the Cisco IPICS installer file that you are attempting to run. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 10-3 Chapter 10 Troubleshooting Cisco IPICS Installation Issues Troubleshooting “Permission Denied” Errors Troubleshooting “Permission Denied” Errors Problem When you start the Cisco IPICS server software installation, the installer displays a permission denied error message that is similar to the following example: [root]# ./install-ipics-version.bin -bash: bash install-ipics-version.bin: Permission denied where version represents the version of the Cisco IPICS installer file that you are attempting to run. Solution The secure copy or SFTP program saved the installer file as a read-only file and the system cannot run the file. Modify the file to so that the system can run it, as shown in the following example: [root] # chmod 550 install-ipics-version.bin where version represents the version of the Cisco IPICS installer file that you are attempting to run. Note Entering this command allows the root user ID to read and run the installer file. You Cannot Connect to the Server By Using Your Browser Problem After you install Cisco IPICS, you enter the IP address or the host name for the Cisco IPICS server into a supported browser but you cannot contact the server. Solution If you cannot connect to the Cisco IPICS server through a browser, one of the following situations may have occurred: • You entered the incorrect IP address or DNS name for the Cisco IPICS server • The tomcat service is not running • The database server is not running • A security setting on your computer has caused a required JavaScript add-on to become disabled Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 10-4 OL-29674-01 Chapter 10 Troubleshooting Cisco IPICS Installation Issues You Cannot Connect to the Server By Using Your Browser To diagnose the problem, perform the following procedure: Procedure Step 1 Step 2 Make sure that the URL that you entered is correct by performing the following actions: • Ensure that you are using the secure HTTP URL, https:// in the URL address field. • Check that you entered in to the browser the correct IP address for the Cisco IPICS server. • If you entered the DNS name for the server, ensure that the DNS name is correct and that your network is able to resolve the DNS name. If you conclude that your network is not resolving the server DNS name correctly, enter the IP address in the URL address field. If you still cannot access the Administration Console, Log in to the Cisco IPICS server with the root user ID by performing one of the following actions: • Use a terminal console to log in to the server by following these steps: a. Connect to the server by using a terminal console. a. Log in to the server by entering root for the user name. b. When you are prompted, enter the root user password. • Log in to the server remotely by following these steps: a. Open a terminal window by using SSH Secure Shell Client software or similar software. b. Log in to the server by entering the IP address or host name of the server. c. Log in by using the root user ID by entering root for the user name. d. When you are prompted, enter the root user password. Note You might not be able to connect to the server remotely if your server is experiencing network connectivity problems; in this case, connect to the server by using a terminal console. A terminal window displays. Step 3 Ensure that the tomcat service is running by entering the following command: Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 10-5 Chapter 10 Troubleshooting Cisco IPICS Installation Issues You Cannot Connect to the Server By Using Your Browser [root]# service ipics_tomcat status Step 4 Perform one of the following actions, depending on the output that you receive: • If the tomcat service is running, you receive output that is similar to the following example: [root]# service ipics_tomcat status Tomcat process (pid: 24025) is running on the system If you receive output that indicates that the tomcat service is running, continue to Step 8. • If the tomcat service is not running, you receive output that is similar to the following example: [root]# service ipics_tomcat status PID_SEARCH_RESULT= Tomcat is not running on the system. If you receive output that indicates that the tomcat service is not running, restart the tomcat service and the policy engine by entering the following command: [root]# service ipics restart Note Step 5 Be aware that Cisco IPICS cancels any active dial-in or dial-out calls when you enter the service ipics restart command. If the tomcat service does not run after you restart it manually, perform the following actions: a. Check whether Cisco IPICS already installed the crontab file by entering the following command: [root]# crontab -l -u ipicsadmin Note The crontab file runs a process that checks if the tomcat service and database are running, and starts them if they are not running. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 10-6 OL-29674-01 Chapter 10 Troubleshooting Cisco IPICS Installation Issues You Cannot Connect to the Server By Using Your Browser b. If the crontab command returns a message that is similar to the following message, the tomcatcron file already exists. Continue to Step 8. [root]# crontab -l -u ipicsadmin #-------------------------------------------------------------# # Module: ipicsadmin.cron - Cisco IPICS cron file for user 'ipicsadmin' # # Usage: crontab < ipicsadmin.cron # # Environment Variables: # #--------------------------------------------------------------SHELL=/bin/sh MAILTO=root HOME=/opt/cisco/ipics/tomcat * * * * * /opt/cisco/ipics/bin/check_tomcat >> /opt/cisco/ipics/tomcat/current/logs/ipicsadmin_cron.log 2>&1 c. If the crontab command returned a message such as no crontab for ipicsadmin, install the crontab file by entering the following command: [root]# crontab /opt/cisco/ipics/cron/ipicsadmin.cron Cisco IPICS installs the crontab file. Almost immediately, Cisco IPICS starts the tomcat service. You can then log in to the Administration Console by using your browser. Step 6 To check the status of the database, enter the following command: [root]# onstat - If the database is online and running, the command returns output that is similar to the following example. IBM Informix Dynamic Server Version 10.00.UC1 00:16:14 -- 124036 Kbytes -- On-Line -- Up If the database is not running, the command returns output that is similar to the following example. shared memory not initialized for INFORMIXSERVER 'IPICSDBServer' If the command output indicates that the database is not running, continue to Step 7. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 10-7 Chapter 10 Troubleshooting Cisco IPICS Installation Issues You Cannot Connect to the Server By Using Your Browser Step 7 If the database is not running, manually start the database server by entering the following command: [root]# service ipics_db start Step 8 To verify that the static IP address, subnet mask, and default gateway are properly configured, check your IP connectivity by entering the following command: ping default-gateway-IP-address where default-gateway-IP-address represents the default gateway address for your network. Step 9 If the ping command is not successful, unplug the network cable from interface 1 on the server and connect it to interface 2. Note Generally, for servers that label their Ethernet interfaces as NIC 1 and NIC 2, you connect the Ethernet cable to the NIC 1 interface; this interface is usually the eth0 interface. For servers that label their Ethernet interfaces as 1 and 2, it is possible that the eth0 interface is mapped to interface 2. Consult your server product documentation to confirm the interface mapping. Step 10 Retry Step 8 to verify server network connectivity. Step 11 If the ping command is successful, log in to another server on the network and attempt to ping the Cisco IPICS server. If the ping command is not successful, troubleshoot the network connectivity with your network administrator. Step 12 Check the security settings for the computer from which you are attempting to access the Administration Console. Note For enhanced security, Cisco recommends that you review and follow the recommendations that are included in the Windows XP Security Guide. To find this document, refer to the Microsoft support site and search for “Windows XP Security Guide.” When you follow the recommendations that are included in the Windows XP Security Guide and deny all add-ons, except those that are specifically allowed in the add-on list, you may encounter a problem where you cannot access the Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 10-8 OL-29674-01 Chapter 10 Troubleshooting Cisco IPICS Installation Issues Cisco IPICS Displays an Authorization Error Cisco IPICS server Administration Console. This issue occurs when you use Internet Explorer from a PC that runs Microsoft Windows XP SP2 and have not enabled the JavaScript GUID in the add-on list. To resolve this issue and ensure proper operation from Internet Explorer, you must explicitly enable the following JavaScript GUID add-on on your IDC client machine: GUID: {F414C260-6AC0-11CF-B6D1-00AA00BBBB58} - JavaScript For detailed information about how to enable this add-on, refer to the Microsoft support site and search for Article ID 555235. Step 13 Retry accessing the server by entering in the Address field in the browser an HTTPS URL that contains either the IP address or the DNS name of your Cisco IPICS server in either of the following formats, where ipaddress is the IP address of the server and dnsname is the host name that you configured for the server: https://ipaddress or https://dnsname Because your browser does not trust the Cisco IPICS server self-signed SSL certificate, a Security Alert window displays. You can suppress this window by using a third-party certificate or by adding the Cisco IPICS server self-signed certificate to the browser's trust list. If you still cannot access the server, contact your Cisco technical support representative for assistance. Cisco IPICS Displays an Authorization Error Problem After installing Cisco IPICS, you log in to the Administration Console and receive an authorization error. Solution An authorization error may occur in one of the following circumstances: • You may have entered an incorrect user name or password • The database server may not have started. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 10-9 Chapter 10 Troubleshooting Cisco IPICS Installation Issues Cisco IPICS Displays an Authorization Error To resolve this problem, perform the following procedure: Procedure Step 1 Before you check the status of the database server, verify that you entered the correct user name and password, and that the Caps Lock setting is not on. If you confirm that you entered the correct login information for the Cisco IPICS Administration Console and still receive an authorization error, you must check the status of the database. Continue to Step 3. Step 2 Access the Cisco IPICS server by using a terminal console. Cisco IPICS displays the following text: Cisco IPICS hostname login: where hostname is the host name of the Cisco IPICS server. Step 3 Enter root in the hostname login: field and press Enter. Cisco IPICS prompts you for the password for the root user. Step 4 Enter the password for the root user and press Enter. Step 5 To check the status of the database, enter the following command: [root] #onstat - If the database is online and running, the command returns a response that is similar to the following example: IBM Informix Dynamic Server Version 10.00.UC1 00:16:14 -- 124036 Kbytes -- On-Line -- Up If the database is not running, the command returns a response that is similar to the following example: shared memory not initialized for INFORMIXSERVER 'IPICSDBServer' Step 6 If the database is not running, manually start the database by entering the following command: [root] #service ipics_db start Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 10-10 OL-29674-01 Chapter 10 Troubleshooting Cisco IPICS Installation Issues Cisco IPICS Displays “Server Initializing” for More than 1 Hour Cisco IPICS Displays “Server Initializing” for More than 1 Hour Problem After installing, restarting, or rebooting Cisco IPICS, you cannot log in to the Administration Console and you see the message, which persists for more than 1 hour: Cisco IPICS is now initializing. You will not be able to access the server until this operation has been completed Solution If you are configuring high availability (HA), be aware it usually takes 20 to 30 minutes for the primary Cisco IPICS server to replicate its data to the secondary Cisco IPICS server. If the primary server has been deployed for a long time before configuring HA, then this initial data synchronization can take longer. The Cisco IPICS server allows you to log in only after this initial synchronization completes. Another possibility is the Node Manager process may have stopped responding. In this case, the IPICS server stays in the ““initializing” or “standby” mode while waiting for the Node Manager to instruct it to go into active state. In this situation, running top from the command line shows the server is idle for more than 10 minutes. To resolve this problem, perform the following procedure: Procedure: Step 1 Use SSH to log in to the Cisco IPICS server as root. Step 2 Enter this command: [root]# service ipics_nm restart Step 3 Wait for about 2 minutes, then try to log in to the IPICS Administration Console. Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 10-11 Chapter 10 Cisco IPICS Displays “Server Initializing” for More than 1 Hour Troubleshooting Cisco IPICS Installation Issues Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) 10-12 OL-29674-01 INDEX Cisco IPICS installer A running from the server location 3-2 address, obtaining for Cisco IPICS 2-2 Cisco IPICS license administration console, troubleshooting access problems 10-4 See license Cisco IPICS operating system message indicating incompatible or unsupported hardware during installation 10-2 B browser, troubleshooting access to the server from 10-4 upgrading 3-1 Cisco IPICS server software installing 2-13 rolling back 8-1 C uninstalling 8-1 upgrading 3-1 cable, connecting to server 2-3 commands caution, described 1-ix changing system date and time 2-30 chmod 10-4 changing system date and time, problems with time-bound licenses 2-30 onstat 10-10 service ipics_db 10-10 checking Cisco IPICS installation 2-19 components, Cisco IPICS installed 1-3 checklist, preinstallation 2-3 connecting Ethernet cable to server 2-3 chmod command 10-4 conventions, document 1-ix Cisco.com, accessing to obtain license file 2-22 Cisco IPICS Dispatch Console (IDC) 1-1 Cisco IPICS installation, checking 2-19 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 IN-1 Index IP address D obtaining for Cisco IPICS 2-2 database server verifying Cisco IPICS 10-8 checking 10-9 IPICS Dispatch Console (IDC) 1-1 manually starting 10-8 ISSIG starting manually 10-10 configuring server for 5-2, 6-2 DFSIG installing 5-5, 6-5 overview 6-1 overview 5-2 documentation conventions 1-ix provisioning 5-9 E L Ethernet cable, connecting to server 2-3 language Ethernet network connectivity problems 10-2 Cisco IPICS 7-1 IDC 7-1 language pack, installing 7-1 I license incompatible hardware error message during operating system installation 10-2 locating MAC address 2-22 installation, troubleshooting 10-1 troubleshooting installation 2-30 installing troubleshooting time-bound 2-30 managing 2-20 Cisco IPICS server software 2-13 uploading file to server 2-23 UMS 4-5 interface mapping for interfaces labeled 1 and 2 10-2 M Internet browser, troubleshooting access to the server from 10-4 MAC address, obtaining 2-22 Inter-RF Subsystem Interface Gateway mapping, for interfaces labeled 1 and 2 10-2 See ISSIG multicast addresses, obtaining for Cisco IPICS 2-2 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) IN-2 OL-29674-01 Index N S network cable, connecting to server 2-3 server network connectivity problems 10-2 database note, described 1-ix checking 10-9 manually starting 10-8, 10-10 shutting down manually 2-18 O service ipics_db command 10-10 onstat command 10-10 T P time-bound license Package installation window, for Cisco IPICS operating system 1-2 partitions, troubleshooting after failing to allocate 10-3 information 2-30 troubleshooting 2-30 tomcat service ping command, using to verify Cisco IPICS IP address 10-8 checking status 10-4 restarting 10-6 troubleshooting Preface 1-vii authorization error on login 10-9 cannot reach server from browser 10-4 R Cisco IPICS software installation 10-3, 10-4 database not running 10-9 Restart Computer window, Cisco IPICS installer 1-2 Ethernet network connectivity problems 10-2 rolling back hard drive partition errors 10-3 Cisco IPICS server software 8-1 incompatible hardware error message 10-2 root logging in as, GNOME login window 8-2, incorrect username or password 10-9 10-10 installation issues 10-1 logging in as before Cisco IPICS installation 2-13 license installation 2-30 login problems from browser 10-4 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) OL-29674-01 IN-3 Index time-bound licenses 2-30 VMware ESXi, installing 9-1 tomcat service not running 10-4 VTG, interrupting during uninstallation 8-1 unsupported hardware error message 10-2 U UCS B-Series server, installing VMware ESX or ESXi on 9-2 UCS C-Series server, installing VMware ESX or ESXi on 9-2 UCS E-Series server, installing VMware ESX or ESXi on 9-2 UMS configuring server for 4-1 overview 4-1 uninstalling, Cisco IPICS server software 8-1 Universal Media Services See UMS unsupported hardware error message during operating system installation 10-2 upgrading Cisco IPICS operating system software 3-1 Cisco IPICS server software 3-1 uploading Cisco IPICS license file 2-23 V verifying Cisco IPICS installation 2-19 virtual machine (VM), using Cisco IPICS on 9-1 VMware ESX, installing 9-1 Cisco IPICS Installation and Upgrade Guide, Release 4.6(1) IN-4 OL-29674-01