<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hi Nathan, Mathew, all,</div>
<div><br>
</div>
<div>Just checking if you have have had any other issues or feedback to share for 11.5? </div>
<div>There are a few things that have caught our attention and might be a good place to share:</div>
<ul>
<li>CSCvb67761: Live Data Streaming Source Offline after 'maxThreads' exhausted on port 9443
<ul>
<li>This is due to the Agent State Log Report causing high CPU and affecting the socket.IO service, eventually leading to LD to shut down</li><li>If you are having issues of LD not working under load or user complaining of constant disconnects, disable this one report and it should be resolved. We are investigating the fix, but this is due to the fact that the initial data is being loaded from the
DB snapshot for this report and thus putting a lot of load on the system. </li><li>This is affecting a small % of customers, but the workaround is simple. </li><li>Disable <span style="background-color: rgb(0, 255, 0);"><b>
<pre style="display: inline !important;">viewId=5D411<wbr>E8A10000140000000230A4E5E6B </pre>
</b></span><b style="background-color: rgb(0, 255, 0);">filterId=AgentStateDet<wbr>ailStats agentID=loginId</b><b> from the Finesse layout</b></li></ul>
</li><li>CSCvb93630: UCCX: Calls recorded by Media Sense are not tagged by UCCX 11.5
<ul>
<li>This is a sev2 defect, so please be mindful of this</li><li>Fix will be released soon</li></ul>
</li><li>Handling ECDSA certificates: updated strategy and required COP files have been published to TAC. So if you are having trouble working with ECDSA certificates or looking to disable them (like the enterprise parameter mentioned below, which is for CUCM only)
- please get in touch with TAC. </li></ul>
<div>Apart from that, any other general feedback on upgrade experience or on Finesse etc. are most welcome, please share the same. </div>
<div><br>
</div>
<div>Thanks. </div>
<div><br>
</div>
<div>
<div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Regards,</font></font></div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Abhiram Kramadhati</font></font></div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Technical Solutions Manager, CCBU</font></font></div>
<div>CCIE Collaboration # 40065</div>
</div>
</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>> on behalf of Nathan Reeves <<a href="mailto:nathan.a.reeves@gmail.com">nathan.a.reeves@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, 26 October 2016 at 2:48 PM<br>
<span style="font-weight:bold">To: </span>Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>><br>
<span style="font-weight:bold">Cc: </span>"<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>" <<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [cisco-voip] CCX 11.5 Upgrade Issues<br>
</div>
<div><br>
</div>
<div>
<div>I saw something similar with a fresh install / upgrade (from 11.0 to 11.5 - didn't have a bootable 11.5 ISO) I attempted last week.
<div><br>
</div>
<div>Found that the upgrade via GUI wouldn't successfully complete. It would get to the section that mentions releasing the upgrade lock but never actually does so. I posted on the cisco forums and it was suggested to do the upgrade via cli. This did complete
successfully, but like you encountered, services wouldn't start on the first boot following upgrade. I completed a subsequent reboot and things came up as expected.
<div><br>
</div>
<div>Was in between moving employers so haven't managed to get back to the home lab to take any further look at logins unfort.</div>
<div><br>
</div>
<div>Nathan<br>
<br>
On Tuesday, October 25, 2016, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">11.0. It was not Finesse, that and CUIC were the only Tomcats that started and Finesse actually worked. Agents could login and take calls in my testing.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The regular Tomcat service and the dependent services that run /appadmin /cmplatform etc would not start. This was occurring before live agents even logged in.<u></u><u></u></span></p>
<p class="MsoNormal"><a name="m_2845326238607114184__MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></a></p>
<span></span>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><a href="javascript:_e(%7B%7D,'cvml','avholloway@gmail.com');" target="_blank">avholloway@gmail.com</a>
[mailto:<a href="javascript:_e(%7B%7D,'cvml','avholloway@gmail.com');" target="_blank">avholloway@gmail.com</a>]
<b>On Behalf Of </b>Anthony Holloway<br>
<b>Sent:</b> Monday, October 24, 2016 2:46 PM<br>
<b>To:</b> Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">What UCCX version were you coming from, and what are the Finesse browser versions in use?<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I wonder if 11.5 is a resource hog, or if you might be hitting the Finesse Live Data issue I had a few months back when moving to UCCX 11.0 and using IE9 in non-compatibilty mode, and IE11 in compatibility mode.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="https://communities.cisco.com/thread/65762?start=0&tstart=0" target="_blank">https://communities.cisco.com/<wbr>thread/65762?start=0&tstart=0</a><u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Mon, Oct 24, 2016 at 12:46 PM, Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">So after getting some sleep, I figured I’d publish this PSA. Don’t run CCX 11.5 on C200M2 BE6K. while it may be able to handle it from a numbers basis, It can’t handle it. 11.5 is a resource hog. Once I moved it to a BE7H I have and upped
it to the CPU and RAM of 400 user OVA it started working. The RAM/CPU increase had been discussed as a possible option. Although I now have an OVA mismatch because I only have one hard drive.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Essentially there are timeouts on the various components that run under tomcat and if Tomcat doesn’t come up in 10 minutes they never will come online.<u></u><u></u></p>
<p class="MsoNormal"><a name="m_2845326238607114184_m_5434165851849661100__MailEndCompose"> </a><u></u><u></u></p>
<p class="MsoNormal">I now have to experiment with the RAM/CPU and see if it will be ok on the better hardware with the normal settings or not and then upgrade my normal hosts hardware. Boy did I have no idea what rabbit hole I was going down. My supervisors
owe me some drinks…<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Matthew Loraditch <br>
<b>Sent:</b> Monday, October 24, 2016 12:21 AM<br>
<b>To:</b> Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>>; NateCCIE <<a href="javascript:_e(%7B%7D,'cvml','nateccie@gmail.com');" target="_blank">nateccie@gmail.com</a>>;
'Ryan Huff' <<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">ryanhuff@outlook.com</a>><u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> RE: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I’ve stumped the Sunday crew…. On the phone for 12 hours straight now. We are now escalating to the BU.
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> cisco-voip [<a href="javascript:_e(%7B%7D,'cvml','cisco-voip-bounces@puck.nether.net');" target="_blank">mailto:cisco-voip-bounces@<wbr>puck.nether.net</a>]
<b>On Behalf Of </b>Matthew Loraditch<br>
<b>Sent:</b> Sunday, October 23, 2016 12:54 PM<br>
<b>To:</b> NateCCIE <<a href="javascript:_e(%7B%7D,'cvml','nateccie@gmail.com');" target="_blank">nateccie@gmail.com</a>>; 'Ryan Huff' <<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">ryanhuff@outlook.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Yes that’s what I’ve found, but that’s basically telling me to build a whole new CA. Which is not hard in and of itself, it’s the implications of having multiple Cas and/or migrating all of the other certs. Trying to avoid overcomplicating
things when I have zero need for that kind of encryption.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> NateCCIE [<a href="javascript:_e(%7B%7D,'cvml','nateccie@gmail.com');" target="_blank">mailto:nateccie@gmail.com</a>]
<br>
<b>Sent:</b> Sunday, October 23, 2016 12:40 PM<br>
<b>To:</b> Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>>; 'Ryan Huff' <<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">ryanhuff@outlook.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> RE: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Not much of a windows guy anymore, (MCSE Windows 2000), but this looks pretty easy, but I imagine it’s under the control of some other person/group.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><a href="https://technet.microsoft.com/en-us/library/ff829847(v=ws.10).aspx" target="_blank">https://technet.microsoft.com/<wbr>en-us/library/ff829847(v=ws.<wbr>10).aspx</a><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">-Nate<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Matthew Loraditch [<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">mailto:MLoraditch@<wbr>heliontechnologies.com</a>]
<br>
<b>Sent:</b> Sunday, October 23, 2016 9:16 AM<br>
<b>To:</b> NateCCIE <<a href="javascript:_e(%7B%7D,'cvml','nateccie@gmail.com');" target="_blank">nateccie@gmail.com</a>>; 'Ryan Huff' <<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">ryanhuff@outlook.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> RE: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We use our AD CA for the certs and setting that up to do EC certs is not a tiny bit of work. Everything I’ve read basically indicated I have to rebuild the thing from scratch. The Cert Management page indicates I can actually turn them
off in Enterprise Parameters… but that’s not exposed in UCCX.<u></u><u></u></p>
<p class="MsoNormal">I’ll probably be just using GPO to push the self signed certs to my agent’s PCs for now.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> NateCCIE [<a href="javascript:_e(%7B%7D,'cvml','nateccie@gmail.com');" target="_blank">mailto:nateccie@gmail.com</a>]
<br>
<b>Sent:</b> Sunday, October 23, 2016 11:04 AM<br>
<b>To:</b> Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>>; 'Ryan Huff' <<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">ryanhuff@outlook.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> RE: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><a href="http://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/200651-UCCX-Version-11-5-Prerelease-Field-Commu.html" target="_blank">http://www.cisco.com/c/en/us/<wbr>support/docs/customer-<wbr>collaboration/unified-contact-<wbr>center-express/200651-UCCX-<wbr>Version-11-5-Prerelease-Field-<wbr>Commu.html</a><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">All of the 11.5 stuff seems to have the ecdsa certs. Digicert issues them just fine on their wildcard cert.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> cisco-voip [<a href="javascript:_e(%7B%7D,'cvml','cisco-voip-bounces@puck.nether.net');" target="_blank">mailto:cisco-voip-bounces@<wbr>puck.nether.net</a>]
<b>On Behalf Of </b>Matthew Loraditch<br>
<b>Sent:</b> Saturday, October 22, 2016 11:00 PM<br>
<b>To:</b> Ryan Huff <<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">ryanhuff@outlook.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Thanks. After another reboot. I’ve got admin pages on the primary. Also some finesse service is running on yet another port (12015) and giving me elliptic curve certs… Need to figure out how to disable them.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">TAC and Football tomorrow!<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Ryan Huff [<a href="javascript:_e(%7B%7D,'cvml','ryanhuff@outlook.com');" target="_blank">mailto:ryanhuff@outlook.com</a>]
<br>
<b>Sent:</b> Saturday, October 22, 2016 11:16 AM<br>
<b>To:</b> Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>><br>
<b>Cc:</b> <a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">
cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CCX 11.5 Upgrade Issues<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">There is an ES for 11.5 FYI; not sure if any of your upgrade issues are covered in the ES ... but TAC may lead you down that path.<br>
<br>
Sent from my iPhone<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
On Oct 22, 2016, at 11:09 AM, Matthew Loraditch <<a href="javascript:_e(%7B%7D,'cvml','MLoraditch@heliontechnologies.com');" target="_blank">MLoraditch@<wbr>heliontechnologies.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">So I did one of these last night, just a few issues..<u></u><u></u></p>
<p>1)<span style="font-size:7.0pt"> </span>None of the admin webpage services will start on the primary server. Tomcat logs don’t show anything I understand or look like obvious errors.<u></u><u></u></p>
<p>2)<span style="font-size:7.0pt"> </span>Can’t login to CUIC or the new Identity services with any combination of usernames I’ve tried. Just plain usernames, the built in admin account, CCX\username, etc.
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I’ve combed documentation for #2, but I’m either missing something or it doesn’t exist. I read the SSO guide for identity services, but it skips over the login to it this way section and the configuration guide doesn’t seem to mention it…<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">DB Replication is good for both databases CCX and the platform DBs. CCX is operating, agents can login and queues are working correctly.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I’ll be calling TAC tomorrow, but if anyone has any insights or bug IDs that may save me time, I’d appreciate it.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">-Matthew<u></u><u></u></p>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">______________________________<wbr>_________________<br>
cisco-voip mailing list<br>
<a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</div>
</blockquote>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
______________________________<wbr>_________________<br>
cisco-voip mailing list<br>
<a href="javascript:_e(%7B%7D,'cvml','cisco-voip@puck.nether.net');" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</span>
</body>
</html>