<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:544489446;
mso-list-type:hybrid;
mso-list-template-ids:-1769831550 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Not much of a windows guy anymore, (MCSE Windows 2000), but this looks pretty easy, but I imagine it’s under the control of some other person/group.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="https://technet.microsoft.com/en-us/library/ff829847(v=ws.10).aspx">https://technet.microsoft.com/en-us/library/ff829847(v=ws.10).aspx</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-Nate<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Matthew Loraditch [mailto:MLoraditch@heliontechnologies.com] <br><b>Sent:</b> Sunday, October 23, 2016 9:16 AM<br><b>To:</b> NateCCIE <nateccie@gmail.com>; 'Ryan Huff' <ryanhuff@outlook.com><br><b>Cc:</b> cisco-voip@puck.nether.net<br><b>Subject:</b> RE: [cisco-voip] CCX 11.5 Upgrade Issues<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We use our AD CA for the certs and setting that up to do EC certs is not a tiny bit of work. Everything I’ve read basically indicated I have to rebuild the thing from scratch. The Cert Management page indicates I can actually turn them off in Enterprise Parameters… but that’s not exposed in UCCX.<o:p></o:p></p><p class=MsoNormal>I’ll probably be just using GPO to push the self signed certs to my agent’s PCs for now.<o:p></o:p></p><p class=MsoNormal><a name="_MailEndCompose"><o:p> </o:p></a></p><span style='mso-bookmark:_MailEndCompose'></span><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> NateCCIE [<a href="mailto:nateccie@gmail.com">mailto:nateccie@gmail.com</a>] <br><b>Sent:</b> Sunday, October 23, 2016 11:04 AM<br><b>To:</b> Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>>; 'Ryan Huff' <<a href="mailto:ryanhuff@outlook.com">ryanhuff@outlook.com</a>><br><b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><b>Subject:</b> RE: [cisco-voip] CCX 11.5 Upgrade Issues<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="http://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/200651-UCCX-Version-11-5-Prerelease-Field-Commu.html">http://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/200651-UCCX-Version-11-5-Prerelease-Field-Commu.html</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>All of the 11.5 stuff seems to have the ecdsa certs. Digicert issues them just fine on their wildcard cert.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Matthew Loraditch<br><b>Sent:</b> Saturday, October 22, 2016 11:00 PM<br><b>To:</b> Ryan Huff <<a href="mailto:ryanhuff@outlook.com">ryanhuff@outlook.com</a>><br><b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><b>Subject:</b> Re: [cisco-voip] CCX 11.5 Upgrade Issues<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks. After another reboot. I’ve got admin pages on the primary. Also some finesse service is running on yet another port (12015) and giving me elliptic curve certs… Need to figure out how to disable them.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>TAC and Football tomorrow!<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Ryan Huff [<a href="mailto:ryanhuff@outlook.com">mailto:ryanhuff@outlook.com</a>] <br><b>Sent:</b> Saturday, October 22, 2016 11:16 AM<br><b>To:</b> Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>><br><b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><b>Subject:</b> Re: [cisco-voip] CCX 11.5 Upgrade Issues<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>There is an ES for 11.5 FYI; not sure if any of your upgrade issues are covered in the ES ... but TAC may lead you down that path.<br><br>Sent from my iPhone<span style='font-size:12.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>On Oct 22, 2016, at 11:09 AM, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>> wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>So I did one of these last night, just a few issues..<o:p></o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>1)<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>None of the admin webpage services will start on the primary server. Tomcat logs don’t show anything I understand or look like obvious errors.<o:p></o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>2)<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Can’t login to CUIC or the new Identity services with any combination of usernames I’ve tried. Just plain usernames, the built in admin account, CCX\username, etc. <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>I’ve combed documentation for #2, but I’m either missing something or it doesn’t exist. I read the SSO guide for identity services, but it skips over the login to it this way section and the configuration guide doesn’t seem to mention it…<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>DB Replication is good for both databases CCX and the platform DBs. CCX is operating, agents can login and queues are working correctly.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>I’ll be calling TAC tomorrow, but if anyone has any insights or bug IDs that may save me time, I’d appreciate it.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>-Matthew<o:p></o:p></p></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>_______________________________________________<br>cisco-voip mailing list<br></span><a href="mailto:cisco-voip@puck.nether.net"><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>cisco-voip@puck.nether.net</span></a><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><br></span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip"><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>https://puck.nether.net/mailman/listinfo/cisco-voip</span></a><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p></div></blockquote></div></body></html>