WEBVTT

00:00:00.000 --> 00:00:03.430 align:middle line:90%


00:00:03.430 --> 00:00:06.860 align:middle line:90%
[AUDIO LOGO]

00:00:06.860 --> 00:00:09.810 align:middle line:90%


00:00:09.810 --> 00:00:11.872 align:middle line:90%
Hello, and welcome to INE.

00:00:11.872 --> 00:00:13.830 align:middle line:84%
Today in this video, we
will look at Section 6,

00:00:13.830 --> 00:00:16.890 align:middle line:90%
CMS, basically Task 6.8.

00:00:16.890 --> 00:00:18.360 align:middle line:84%
Now you understand
it says we need

00:00:18.360 --> 00:00:21.630 align:middle line:84%
to configure the system when two
IP phones are in a one to one

00:00:21.630 --> 00:00:26.100 align:middle line:84%
call, either user conference
an additional participant

00:00:26.100 --> 00:00:29.430 align:middle line:84%
using the conference button on
the IP phone, which will create

00:00:29.430 --> 00:00:34.230 align:middle line:84%
a bridge on CMS server that all
participants are redirected to.

00:00:34.230 --> 00:00:37.080 align:middle line:84%
Use self-signed certificates
for all CMS components,

00:00:37.080 --> 00:00:41.670 align:middle line:84%
except for webadmin, which
will use assigned CA cert.

00:00:41.670 --> 00:00:46.980 align:middle line:84%
Use coedge.ine.com as a
SAN to proxy CMS webbridge

00:00:46.980 --> 00:00:51.750 align:middle line:84%
or expressway to verify and make
a call from Jabber on Jabber 1

00:00:51.750 --> 00:00:56.610 align:middle line:84%
PC to PSTN line 1, and
add HQ One into the call.

00:00:56.610 --> 00:01:00.630 align:middle line:84%
HQ One must login to Jabber
from the Candidate PC.

00:01:00.630 --> 00:01:05.280 align:middle line:84%
Now at this point of time from
the earlier videos and earlier

00:01:05.280 --> 00:01:09.270 align:middle line:84%
task, our Expressway and CMS
have already been configured.

00:01:09.270 --> 00:01:12.550 align:middle line:84%
So our turn services
are turned on.

00:01:12.550 --> 00:01:18.600 align:middle line:84%
So users on the outside should
be able to log in using Jabber.

00:01:18.600 --> 00:01:22.300 align:middle line:84%
However, conference is not going
to work at this point of time.

00:01:22.300 --> 00:01:23.320 align:middle line:90%
So let's do one thing.

00:01:23.320 --> 00:01:27.870 align:middle line:84%
Let's first go to
Jabber on Jabber 1 PC

00:01:27.870 --> 00:01:29.700 align:middle line:84%
and make a call to
PSTN just to check

00:01:29.700 --> 00:01:31.080 align:middle line:90%
if you're able to do that.

00:01:31.080 --> 00:01:34.960 align:middle line:84%
And then we will start
off with the task.

00:01:34.960 --> 00:01:41.850 align:middle line:84%
So first thing what I'm going
to do is I will go to Jabber PC,

00:01:41.850 --> 00:01:49.140 align:middle line:84%
and let's close this, and
let's log in to CallManager.

00:01:49.140 --> 00:01:59.270 align:middle line:90%


00:01:59.270 --> 00:02:03.620 align:middle line:84%
And from my Jabber machine,
this Jabber machine

00:02:03.620 --> 00:02:07.610 align:middle line:84%
is logged in-- pre-configured
to log in with Tony Stark whose

00:02:07.610 --> 00:02:09.560 align:middle line:90%
extension is 2003

00:02:09.560 --> 00:02:11.450 align:middle line:84%
So as for the
question, it states

00:02:11.450 --> 00:02:15.710 align:middle line:84%
that we need to make a call
to PSTN line 1, which is 1408.

00:02:15.710 --> 00:02:28.110 align:middle line:84%
In fact, I think it's 95151111,
which is the line 1 of PSTN.

00:02:28.110 --> 00:02:34.250 align:middle line:84%
Let's make that call and go
to Jabber 3, which is PSTN,

00:02:34.250 --> 00:02:37.260 align:middle line:90%
and see if we received the call.

00:02:37.260 --> 00:02:40.280 align:middle line:84%
So I am receiving the
call from Tony Stark.

00:02:40.280 --> 00:02:42.000 align:middle line:84%
And I am able to
receive the call.

00:02:42.000 --> 00:02:44.397 align:middle line:84%
However, my conference
bridge is not

00:02:44.397 --> 00:02:46.730 align:middle line:84%
going to work because we
haven't really configured that.

00:02:46.730 --> 00:02:50.440 align:middle line:84%
And Turn Services was turned
on in the earlier video.

00:02:50.440 --> 00:02:55.790 align:middle line:84%
So users from the outside should
be able to go to CMS also.

00:02:55.790 --> 00:02:59.070 align:middle line:84%
However, conference
is not going to work.

00:02:59.070 --> 00:03:00.810 align:middle line:84%
So let me disconnect
this call now.

00:03:00.810 --> 00:03:02.570 align:middle line:84%
And the first thing
what I'm going to do

00:03:02.570 --> 00:03:07.550 align:middle line:84%
is I will connect to CMS and
generate a CSR because we need

00:03:07.550 --> 00:03:09.860 align:middle line:90%
to get our certificate signed.

00:03:09.860 --> 00:03:12.770 align:middle line:84%
Now as for the question,
all components of CMS

00:03:12.770 --> 00:03:15.890 align:middle line:84%
is going to use the self-signed
cert, except for webadmin.

00:03:15.890 --> 00:03:16.760 align:middle line:90%
Why webadmin?

00:03:16.760 --> 00:03:18.650 align:middle line:84%
Because the
conference bridge area

00:03:18.650 --> 00:03:21.440 align:middle line:84%
uses webadmin,
which uses port 443.

00:03:21.440 --> 00:03:23.780 align:middle line:90%
And that needs to be signed.

00:03:23.780 --> 00:03:31.540 align:middle line:84%
So let's go to CMS
and login via CLI.

00:03:31.540 --> 00:03:37.390 align:middle line:84%
Administrator,
password C1sc0123!.

00:03:37.390 --> 00:03:40.930 align:middle line:84%
And the next thing that I'm
going to do is generate a CSR.

00:03:40.930 --> 00:03:46.270 align:middle line:84%
So to generate a CSR, I would
give the command pki csr

00:03:46.270 --> 00:03:49.300 align:middle line:84%
and give any name,
let's say cmsine.

00:03:49.300 --> 00:03:51.160 align:middle line:84%
You can give any
name that you want,

00:03:51.160 --> 00:03:57.880 align:middle line:84%
where common name is going
to be hq-cms.ine.com.

00:03:57.880 --> 00:04:08.590 align:middle line:84%
And subject alternate name is
going to be coedge.ine.com.

00:04:08.590 --> 00:04:11.830 align:middle line:84%
So if you see here, there are
two names in my certificate.

00:04:11.830 --> 00:04:13.990 align:middle line:84%
One is going to be
my FQDN of the CMS,

00:04:13.990 --> 00:04:16.300 align:middle line:90%
which is hq-cms.ine.com.

00:04:16.300 --> 00:04:18.070 align:middle line:84%
And the reason I'm
also giving subject

00:04:18.070 --> 00:04:20.769 align:middle line:84%
alternate name as
coedge.ine.com is

00:04:20.769 --> 00:04:25.930 align:middle line:84%
because my proxy
on Expressway C is

00:04:25.930 --> 00:04:28.090 align:middle line:84%
referring to
coedge.ine.com, which is

00:04:28.090 --> 00:04:30.730 align:middle line:90%
going to be redirected to CMS.

00:04:30.730 --> 00:04:35.770 align:middle line:84%
And CMS is going to be
using coedge.ine.com.

00:04:35.770 --> 00:04:37.990 align:middle line:90%
So let's go and hit Enter.

00:04:37.990 --> 00:04:40.240 align:middle line:90%
So this generates a CSR for me.

00:04:40.240 --> 00:04:45.820 align:middle line:84%
Now I need to take this CSR and
get it signed by a CS server.

00:04:45.820 --> 00:04:51.160 align:middle line:84%
To do that from my
Jabber 1 PC, I'm

00:04:51.160 --> 00:04:59.620 align:middle line:84%
going to go to command line,
and I will ssh to my CMS

00:04:59.620 --> 00:05:02.080 align:middle line:84%
and download the
CSR on my desktop,

00:05:02.080 --> 00:05:03.940 align:middle line:84%
and then take the
contents of that

00:05:03.940 --> 00:05:07.990 align:middle line:84%
and send it to the CS
server to get it signed.

00:05:07.990 --> 00:05:09.760 align:middle line:90%
So let's do Yes.

00:05:09.760 --> 00:05:12.080 align:middle line:84%
The first thing that I would
do is change my directory.

00:05:12.080 --> 00:05:18.820 align:middle line:84%
So let's do cd c:
forward backslash users

00:05:18.820 --> 00:05:27.680 align:middle line:84%
backslash administrator
backslash desktop, desktop.

00:05:27.680 --> 00:05:30.610 align:middle line:90%
I think it should be that.

00:05:30.610 --> 00:05:32.072 align:middle line:90%
cd c:/.

00:05:32.072 --> 00:05:35.938 align:middle line:90%


00:05:35.938 --> 00:05:37.870 align:middle line:90%
Let's do pwd.

00:05:37.870 --> 00:05:38.950 align:middle line:90%
Let's do ls.

00:05:38.950 --> 00:05:40.750 align:middle line:90%
Let's do dir.

00:05:40.750 --> 00:05:42.440 align:middle line:90%
So I have users.

00:05:42.440 --> 00:05:43.562 align:middle line:90%
So cd Users.

00:05:43.562 --> 00:05:48.290 align:middle line:90%


00:05:48.290 --> 00:05:50.110 align:middle line:90%
Let's do dir.

00:05:50.110 --> 00:05:53.000 align:middle line:84%
So we have Admin,
not administrator.

00:05:53.000 --> 00:05:55.900 align:middle line:90%
So let's do cd Admin.

00:05:55.900 --> 00:05:57.490 align:middle line:90%
And dir.

00:05:57.490 --> 00:05:59.990 align:middle line:84%
And I think we
have Desktop here.

00:05:59.990 --> 00:06:03.010 align:middle line:90%
So let's do cd Desktop.

00:06:03.010 --> 00:06:05.170 align:middle line:90%
So now I am in this folder.

00:06:05.170 --> 00:06:10.780 align:middle line:84%
And here is where I will do
SFTP to my CMS and download

00:06:10.780 --> 00:06:12.560 align:middle line:90%
that CSR that we created.

00:06:12.560 --> 00:06:15.490 align:middle line:84%
So we can give
the command psftp.

00:06:15.490 --> 00:06:20.290 align:middle line:84%
So PSFTP is a built-in
feature in Windows,

00:06:20.290 --> 00:06:23.840 align:middle line:84%
which can be used to do a
secure connection to CMS.

00:06:23.840 --> 00:06:28.510 align:middle line:84%
So psftp
administrator@hq-cms.ine.com.

00:06:28.510 --> 00:06:36.266 align:middle line:90%


00:06:36.266 --> 00:06:38.072 align:middle line:90%
Let's connect.

00:06:38.072 --> 00:06:40.340 align:middle line:84%
It should ask me
for the security.

00:06:40.340 --> 00:06:42.590 align:middle line:90%
Let's say Yes.

00:06:42.590 --> 00:06:46.880 align:middle line:90%
And the password was c1sc0123!.

00:06:46.880 --> 00:06:49.640 align:middle line:90%
And now I am connected to CMS.

00:06:49.640 --> 00:06:53.600 align:middle line:84%
The next thing that I'm going
to do is download that CSR.

00:06:53.600 --> 00:06:56.300 align:middle line:84%
And that is going to be
done with the command

00:06:56.300 --> 00:06:59.780 align:middle line:84%
get, the name that
we gave for our CSR.

00:06:59.780 --> 00:07:02.700 align:middle line:84%
I believe we gave
the name cmsine.csr.

00:07:02.700 --> 00:07:07.070 align:middle line:90%


00:07:07.070 --> 00:07:09.720 align:middle line:84%
So this downloads the
CSR onto my Desktop.

00:07:09.720 --> 00:07:11.380 align:middle line:90%
So if I actually go back to--

00:07:11.380 --> 00:07:14.130 align:middle line:90%


00:07:14.130 --> 00:07:16.190 align:middle line:90%
let's close this.

00:07:16.190 --> 00:07:18.200 align:middle line:90%
Let's minimize this.

00:07:18.200 --> 00:07:25.110 align:middle line:84%
On my desktop, I should see the
file, which was created here,

00:07:25.110 --> 00:07:27.230 align:middle line:90%
which was downloaded from CMS.

00:07:27.230 --> 00:07:29.760 align:middle line:90%
Let's open this up.

00:07:29.760 --> 00:07:30.980 align:middle line:90%
And this is my CSR.

00:07:30.980 --> 00:07:31.805 align:middle line:90%
Let's copy that.

00:07:31.805 --> 00:07:34.770 align:middle line:90%


00:07:34.770 --> 00:07:38.880 align:middle line:90%
And go back to my browser.

00:07:38.880 --> 00:07:45.750 align:middle line:84%
And let's open up my CA
server, which is Internal CA.

00:07:45.750 --> 00:07:52.962 align:middle line:90%


00:07:52.962 --> 00:07:54.320 align:middle line:90%
Two things we would need.

00:07:54.320 --> 00:07:58.085 align:middle line:84%
One is the root CA certificate,
and one is our signed cert.

00:07:58.085 --> 00:08:03.960 align:middle line:90%


00:08:03.960 --> 00:08:07.260 align:middle line:84%
So first thing, let's download
the root CA certificate.

00:08:07.260 --> 00:08:13.280 align:middle line:90%


00:08:13.280 --> 00:08:15.860 align:middle line:84%
So click on this
Download CA Certificate

00:08:15.860 --> 00:08:21.210 align:middle line:90%
and then choose Base 64.

00:08:21.210 --> 00:08:23.430 align:middle line:84%
And then said Download
CA Certificate.

00:08:23.430 --> 00:08:26.590 align:middle line:84%
So this should get
downloaded here.

00:08:26.590 --> 00:08:27.900 align:middle line:90%
Let's open this in a folder.

00:08:27.900 --> 00:08:32.380 align:middle line:90%


00:08:32.380 --> 00:08:35.360 align:middle line:90%
So this is my cert.

00:08:35.360 --> 00:08:38.840 align:middle line:84%
Let's rename this
to rootcacert--

00:08:38.840 --> 00:08:45.620 align:middle line:90%


00:08:45.620 --> 00:08:46.430 align:middle line:90%
rootcacert.

00:08:46.430 --> 00:08:49.240 align:middle line:90%


00:08:49.240 --> 00:08:49.780 align:middle line:90%
That's it.

00:08:49.780 --> 00:08:52.060 align:middle line:84%
And then let's get our
certificate signed.

00:08:52.060 --> 00:08:53.320 align:middle line:90%
So let's go back to Home.

00:08:53.320 --> 00:09:06.350 align:middle line:90%


00:09:06.350 --> 00:09:10.010 align:middle line:90%
Request certificate.

00:09:10.010 --> 00:09:12.170 align:middle line:90%
Go to Advanced.

00:09:12.170 --> 00:09:16.440 align:middle line:90%
Paste that CSR value.

00:09:16.440 --> 00:09:19.350 align:middle line:84%
Choose
ClientServerAuthentication

00:09:19.350 --> 00:09:20.190 align:middle line:90%
and submit.

00:09:20.190 --> 00:09:30.680 align:middle line:90%


00:09:30.680 --> 00:09:36.480 align:middle line:84%
Then go to Base 64 and download
the signed certificate.

00:09:36.480 --> 00:09:37.530 align:middle line:90%
Let's open this file.

00:09:37.530 --> 00:09:42.240 align:middle line:90%


00:09:42.240 --> 00:09:44.190 align:middle line:90%
And let's rename this as cmsine.

00:09:44.190 --> 00:09:56.410 align:middle line:90%


00:09:56.410 --> 00:09:59.600 align:middle line:84%
OK, let's now go back to our
command prompt and upload

00:09:59.600 --> 00:10:02.360 align:middle line:84%
these two certificates
to our CMS.

00:10:02.360 --> 00:10:06.200 align:middle line:84%
Now, to upload, exactly,
we would do the same thing.

00:10:06.200 --> 00:10:11.360 align:middle line:84%
All you do is say put because
we are in the same folder, which

00:10:11.360 --> 00:10:12.860 align:middle line:90%
is my Desktop.

00:10:12.860 --> 00:10:15.350 align:middle line:84%
Ensure that those two
folders, those two files

00:10:15.350 --> 00:10:17.190 align:middle line:90%
are in the Desktop.

00:10:17.190 --> 00:10:21.320 align:middle line:90%
So if I go back to--

00:10:21.320 --> 00:10:24.690 align:middle line:90%
let's go back to Downloads.

00:10:24.690 --> 00:10:27.640 align:middle line:90%


00:10:27.640 --> 00:10:29.320 align:middle line:90%
I believe it's in Downloads.

00:10:29.320 --> 00:10:35.740 align:middle line:84%
So let's take these two
files, copy them to Desktop.

00:10:35.740 --> 00:10:40.170 align:middle line:90%


00:10:40.170 --> 00:10:44.850 align:middle line:84%
And then go back to
your command prompt.

00:10:44.850 --> 00:10:46.440 align:middle line:90%
And say put cmsine.cer.

00:10:46.440 --> 00:10:54.197 align:middle line:90%


00:10:54.197 --> 00:10:55.030 align:middle line:90%
I think it's cmsine.

00:10:55.030 --> 00:11:00.270 align:middle line:90%


00:11:00.270 --> 00:11:09.100 align:middle line:90%
Let's put-- rootcacert.cer.

00:11:09.100 --> 00:11:17.970 align:middle line:90%


00:11:17.970 --> 00:11:19.293 align:middle line:90%
So it's not really allowing me.

00:11:19.293 --> 00:11:20.460 align:middle line:90%
Oh, in fact-- you know what?

00:11:20.460 --> 00:11:26.100 align:middle line:84%
My PSFTP has disconnected,
so I'll have to reconnect.

00:11:26.100 --> 00:11:29.250 align:middle line:90%
c1sc0123!.

00:11:29.250 --> 00:11:35.010 align:middle line:90%
Let's do put cmsine.cer.

00:11:35.010 --> 00:11:36.120 align:middle line:90%
So that's copied.

00:11:36.120 --> 00:11:38.460 align:middle line:90%
And let's put rootcacert.cer.

00:11:38.460 --> 00:11:42.390 align:middle line:90%


00:11:42.390 --> 00:11:44.580 align:middle line:84%
So both the files have
been copied to CMS.

00:11:44.580 --> 00:11:48.030 align:middle line:84%
Let's go back to CMS
now, the command prompt.

00:11:48.030 --> 00:11:49.005 align:middle line:90%
Login again.

00:11:49.005 --> 00:11:53.740 align:middle line:90%


00:11:53.740 --> 00:11:55.300 align:middle line:90%
And now, I have those--

00:11:55.300 --> 00:11:56.880 align:middle line:84%
I have the root CA
certificate also,

00:11:56.880 --> 00:11:58.530 align:middle line:90%
and I have the signed cert also.

00:11:58.530 --> 00:12:01.680 align:middle line:84%
The only thing we have
to do now is verify

00:12:01.680 --> 00:12:04.500 align:middle line:90%
if the certificates are OK.

00:12:04.500 --> 00:12:06.300 align:middle line:84%
They've been verified
by the CA server.

00:12:06.300 --> 00:12:10.180 align:middle line:84%
That can be done with
the command pki match

00:12:10.180 --> 00:12:13.680 align:middle line:90%
cmsine.key and cmsine.cer.

00:12:13.680 --> 00:12:16.585 align:middle line:90%


00:12:16.585 --> 00:12:17.960 align:middle line:84%
So you would see
that-- you would

00:12:17.960 --> 00:12:20.640 align:middle line:84%
see that it's saying, Matching
certificate and private key.

00:12:20.640 --> 00:12:26.900 align:middle line:84%
You can also give the command
pki verify cmsine.cer, the cert

00:12:26.900 --> 00:12:30.410 align:middle line:84%
that we copied, with the
root CA certificate, which

00:12:30.410 --> 00:12:34.820 align:middle line:90%
was rootcacert.cer.

00:12:34.820 --> 00:12:36.983 align:middle line:90%
It should say Success.

00:12:36.983 --> 00:12:38.900 align:middle line:84%
This basically tells you
that your certificate

00:12:38.900 --> 00:12:42.050 align:middle line:84%
was successfully
signed by the root CA.

00:12:42.050 --> 00:12:44.540 align:middle line:84%
Next thing is to
tell the Webadmin

00:12:44.540 --> 00:12:47.160 align:middle line:90%
to use this signed cert.

00:12:47.160 --> 00:12:52.320 align:middle line:84%
So first, we will do is go
to Webadmin and say, disable.

00:12:52.320 --> 00:12:54.140 align:middle line:90%
So disable your Webadmin.

00:12:54.140 --> 00:12:59.810 align:middle line:84%
Next thing that we would
do is a webadmin certs

00:12:59.810 --> 00:13:10.140 align:middle line:84%
cmsine.key and cmsine.cer,
and the root CA certificate

00:13:10.140 --> 00:13:13.860 align:middle line:90%
which is rootcacert.cer.

00:13:13.860 --> 00:13:17.520 align:middle line:90%
Next, enable your Webadmin.

00:13:17.520 --> 00:13:20.670 align:middle line:90%
So Webadmin enable.

00:13:20.670 --> 00:13:21.850 align:middle line:90%
That's it.

00:13:21.850 --> 00:13:22.660 align:middle line:90%
We're done.

00:13:22.660 --> 00:13:27.690 align:middle line:84%
So the only thing left now is
to create a conference bridge

00:13:27.690 --> 00:13:31.620 align:middle line:84%
on a call manager so that
we can invoke the conference

00:13:31.620 --> 00:13:33.510 align:middle line:90%
bridge on CMS.

00:13:33.510 --> 00:13:35.910 align:middle line:84%
So for doing that,
all you have to do

00:13:35.910 --> 00:13:39.150 align:middle line:90%
is go to your CallManager.

00:13:39.150 --> 00:13:42.060 align:middle line:90%
So let's go to Jabber 1.

00:13:42.060 --> 00:13:44.760 align:middle line:90%
Go back to browser.

00:13:44.760 --> 00:13:56.790 align:middle line:84%
Let's log in to CallManager I
think we already have it here.

00:13:56.790 --> 00:14:03.350 align:middle line:84%
So here, we would go to Media
Resources, Conference Bridge.

00:14:03.350 --> 00:14:04.970 align:middle line:90%
Click on Add New.

00:14:04.970 --> 00:14:07.760 align:middle line:84%
So right now, we don't really
have any conference bridge.

00:14:07.760 --> 00:14:08.885 align:middle line:90%
Let's click on Add New.

00:14:08.885 --> 00:14:20.420 align:middle line:90%


00:14:20.420 --> 00:14:26.170 align:middle line:84%
Let's select Cisco
Meeting Server

00:14:26.170 --> 00:14:29.480 align:middle line:90%
as the Conference Bridge Type.

00:14:29.480 --> 00:14:31.175 align:middle line:90%
The name would be cfb_cms.

00:14:31.175 --> 00:14:34.810 align:middle line:90%


00:14:34.810 --> 00:14:36.520 align:middle line:84%
Description could
really be anything.

00:14:36.520 --> 00:14:39.980 align:middle line:84%
If you want, you can also give
a Conference Bridge Prefix.

00:14:39.980 --> 00:14:42.670 align:middle line:84%
So let's say if you wanted to
invoke the Conference Bridge,

00:14:42.670 --> 00:14:48.245 align:middle line:84%
you can give something
like 1024 or some number,

00:14:48.245 --> 00:14:50.620 align:middle line:84%
some digits you can dial to
invoke the conference bridge.

00:14:50.620 --> 00:14:52.390 align:middle line:84%
I'm not going to give that
because the question does not

00:14:52.390 --> 00:14:53.080 align:middle line:90%
say that.

00:14:53.080 --> 00:14:57.970 align:middle line:84%
I'm going to point this to the
CMS SIP trunk that we have.

00:14:57.970 --> 00:15:02.610 align:middle line:84%
And the port number
for Webadmin was 445

00:15:02.610 --> 00:15:03.780 align:middle line:90%
because we had changed that.

00:15:03.780 --> 00:15:06.510 align:middle line:90%
The WebRTC is using 443.

00:15:06.510 --> 00:15:10.410 align:middle line:90%
The Webadmin is using 445.

00:15:10.410 --> 00:15:13.630 align:middle line:90%
And that should be enough.

00:15:13.630 --> 00:15:18.360 align:middle line:84%
Let's confirm the
password c1sc0123!.

00:15:18.360 --> 00:15:22.370 align:middle line:90%
Same thing, yes, c1sc0123!

00:15:22.370 --> 00:15:24.315 align:middle line:90%
And let's save this.

00:15:24.315 --> 00:15:34.900 align:middle line:90%


00:15:34.900 --> 00:15:40.340 align:middle line:84%
Now, once I do this,
let's Apply and Reset.

00:15:40.340 --> 00:15:44.120 align:middle line:84%
My Conference Bridge
should come up.

00:15:44.120 --> 00:15:46.310 align:middle line:84%
One thing that you need
to know about ad hoc

00:15:46.310 --> 00:15:48.560 align:middle line:90%
is that it's the Webadmin.

00:15:48.560 --> 00:15:50.360 align:middle line:90%
Ad hoc uses the Webadmin.

00:15:50.360 --> 00:15:53.180 align:middle line:84%
Webadmin is to access
the GUI of CMS.

00:15:53.180 --> 00:15:55.080 align:middle line:84%
At the same time, it
is used for ad hoc.

00:15:55.080 --> 00:15:57.860 align:middle line:84%
So because we changed
the Webadmin port to 445

00:15:57.860 --> 00:16:00.950 align:middle line:84%
in the earlier task, we have
to give the port 445 here.

00:16:00.950 --> 00:16:03.620 align:middle line:84%
And the Webadmin has
to be a signed cert.

00:16:03.620 --> 00:16:06.230 align:middle line:84%
All of the components of
CMS can be self signed,

00:16:06.230 --> 00:16:09.560 align:middle line:84%
but Webadmin needs
to be a signed cert.

00:16:09.560 --> 00:16:11.360 align:middle line:84%
All right, so let's
reset this now.

00:16:11.360 --> 00:16:17.520 align:middle line:90%


00:16:17.520 --> 00:16:18.330 align:middle line:90%
And that's it.

00:16:18.330 --> 00:16:21.000 align:middle line:84%
Let's go back and
check if the Conference

00:16:21.000 --> 00:16:22.860 align:middle line:90%
Bridge is showing registered.

00:16:22.860 --> 00:16:47.840 align:middle line:90%


00:16:47.840 --> 00:16:49.700 align:middle line:84%
Now, obviously, the
Conference Bridge

00:16:49.700 --> 00:16:52.280 align:middle line:84%
is not going to
show as registered

00:16:52.280 --> 00:16:57.710 align:middle line:84%
because there's one
thing that we need to do,

00:16:57.710 --> 00:17:03.560 align:middle line:84%
is a CallManager needs
to trust the CA server.

00:17:03.560 --> 00:17:05.480 align:middle line:84%
Right now, the CMS is
trusting the CA server

00:17:05.480 --> 00:17:07.220 align:middle line:84%
because he's got a
signed cert from him.

00:17:07.220 --> 00:17:10.790 align:middle line:84%
But the CallManager is not
really trusting the CA server,

00:17:10.790 --> 00:17:15.920 align:middle line:84%
so we need to go and ensure
that the CallManager also

00:17:15.920 --> 00:17:18.230 align:middle line:90%
trusts the CA server.

00:17:18.230 --> 00:17:19.399 align:middle line:90%
So if you see right now--

00:17:19.399 --> 00:17:22.740 align:middle line:90%


00:17:22.740 --> 00:17:24.220 align:middle line:90%
I don't see it coming up.

00:17:24.220 --> 00:17:26.460 align:middle line:84%
So let's go back to
OS Administration

00:17:26.460 --> 00:17:28.380 align:middle line:90%
on my CallManager.

00:17:28.380 --> 00:17:40.170 align:middle line:90%


00:17:40.170 --> 00:17:41.115 align:middle line:90%
Let's log in.

00:17:41.115 --> 00:18:11.390 align:middle line:90%


00:18:11.390 --> 00:18:13.280 align:middle line:84%
I don't really need
the CallManager

00:18:13.280 --> 00:18:15.140 align:middle line:90%
to get a signed cert.

00:18:15.140 --> 00:18:19.350 align:middle line:84%
As long as he trusts the
root CA, it should be enough.

00:18:19.350 --> 00:18:23.390 align:middle line:84%
If you want, you can also get
the CallManager a signed cert.

00:18:23.390 --> 00:18:27.050 align:middle line:84%
But if the question does
not really say that,

00:18:27.050 --> 00:18:30.150 align:middle line:90%
you don't need to do that.

00:18:30.150 --> 00:18:32.550 align:middle line:84%
The whole point of the
lab exam is to save time.

00:18:32.550 --> 00:18:36.080 align:middle line:84%
So do the minimum things
which meets the question

00:18:36.080 --> 00:18:38.860 align:middle line:90%
requirements.

00:18:38.860 --> 00:18:40.060 align:middle line:90%
Let's quickly log in.

00:18:40.060 --> 00:18:56.370 align:middle line:90%


00:18:56.370 --> 00:18:57.690 align:middle line:90%
It's taking a bit of time.

00:18:57.690 --> 00:19:07.520 align:middle line:90%


00:19:07.520 --> 00:19:08.020 align:middle line:90%
All right.

00:19:08.020 --> 00:19:11.230 align:middle line:84%
So let's go to
Certificate Management.

00:19:11.230 --> 00:19:17.710 align:middle line:90%


00:19:17.710 --> 00:19:21.150 align:middle line:90%
And let's do a find.

00:19:21.150 --> 00:19:24.210 align:middle line:84%
I don't think we have the
root CA preconfigured,

00:19:24.210 --> 00:19:24.975 align:middle line:90%
so let's check.

00:19:24.975 --> 00:19:31.300 align:middle line:90%


00:19:31.300 --> 00:19:35.560 align:middle line:84%
If I look at the
CallManager trust--

00:19:35.560 --> 00:19:42.146 align:middle line:84%
in the CallManager trust, I
don't have my internal root CA.

00:19:42.146 --> 00:19:48.590 align:middle line:90%


00:19:48.590 --> 00:19:49.590 align:middle line:90%
Yeah, I don't have that.

00:19:49.590 --> 00:19:50.757 align:middle line:90%
So let's go and upload that.

00:19:50.757 --> 00:19:55.040 align:middle line:90%


00:19:55.040 --> 00:19:56.390 align:middle line:90%
So this would be in--

00:19:56.390 --> 00:20:13.270 align:middle line:90%


00:20:13.270 --> 00:20:18.740 align:middle line:84%
CallManager trust,
let's browse from--

00:20:18.740 --> 00:20:20.200 align:middle line:84%
so this was a root
CA certificate.

00:20:20.200 --> 00:20:21.640 align:middle line:90%
Let's put that.

00:20:21.640 --> 00:20:22.510 align:middle line:90%
And Upload.

00:20:22.510 --> 00:20:36.300 align:middle line:90%


00:20:36.300 --> 00:20:39.570 align:middle line:84%
Certificate uploaded,
let's close that.

00:20:39.570 --> 00:20:42.003 align:middle line:84%
We now have the
root CA certificate,

00:20:42.003 --> 00:20:43.170 align:middle line:90%
which the CallManager trust.

00:20:43.170 --> 00:20:45.570 align:middle line:84%
And because the CallManager
trust the root CA

00:20:45.570 --> 00:20:48.810 align:middle line:84%
and the CMS has a signed
cert from the root CA,

00:20:48.810 --> 00:20:51.180 align:middle line:84%
the CallManager is
going to trust the CMS.

00:20:51.180 --> 00:20:53.950 align:middle line:84%
And my Conference Bridge
should get registered.

00:20:53.950 --> 00:20:59.873 align:middle line:84%
So let's go back to
CM Administration.

00:20:59.873 --> 00:21:01.790 align:middle line:84%
Now, you would need to
do this to a subscriber

00:21:01.790 --> 00:21:03.110 align:middle line:90%
also if you have a subscriber.

00:21:03.110 --> 00:21:05.060 align:middle line:84%
But in my lab, I don't
have a subscriber.

00:21:05.060 --> 00:21:07.050 align:middle line:84%
But in the lab exam,
at your lab exam,

00:21:07.050 --> 00:21:08.640 align:middle line:84%
you would have a
subscriber also.

00:21:08.640 --> 00:21:12.390 align:middle line:84%
So go and do that
for that as well.

00:21:12.390 --> 00:21:15.410 align:middle line:84%
Let's go back to Media
Resources, Conference Bridge.

00:21:15.410 --> 00:21:34.650 align:middle line:90%


00:21:34.650 --> 00:21:40.260 align:middle line:84%
Let's do a find and check if the
Conference Bridge has come up.

00:21:40.260 --> 00:21:42.225 align:middle line:84%
Let's just reset our
Conference Bridge.

00:21:42.225 --> 00:22:12.190 align:middle line:90%


00:22:12.190 --> 00:22:13.550 align:middle line:90%
Give it a few seconds.

00:22:13.550 --> 00:22:15.070 align:middle line:90%
It should come up.

00:22:15.070 --> 00:22:17.860 align:middle line:84%
And usually, it takes
about 30 to 40 seconds

00:22:17.860 --> 00:22:19.100 align:middle line:90%
once you reset it.

00:22:19.100 --> 00:22:20.260 align:middle line:90%
So it should come up.

00:22:20.260 --> 00:22:23.120 align:middle line:90%
Let's give it some time.

00:22:23.120 --> 00:22:26.005 align:middle line:84%
So let's refresh the screen
again and just check.

00:22:26.005 --> 00:22:32.290 align:middle line:90%


00:22:32.290 --> 00:22:35.700 align:middle line:84%
So it looks like
it's registered now.

00:22:35.700 --> 00:22:37.360 align:middle line:90%
Going back to CMS--

00:22:37.360 --> 00:22:42.300 align:middle line:84%
so the only thing that we
did was we created a CSR.

00:22:42.300 --> 00:22:45.420 align:middle line:84%
We got that signed
by the CA server.

00:22:45.420 --> 00:22:46.830 align:middle line:90%
Then we went to Webadmin.

00:22:46.830 --> 00:22:48.240 align:middle line:90%
We disabled the Webadmin.

00:22:48.240 --> 00:22:52.140 align:middle line:84%
And then we provided the new
signed cert, including the root

00:22:52.140 --> 00:22:53.520 align:middle line:90%
CA certificate.

00:22:53.520 --> 00:22:55.170 align:middle line:84%
And then we enabled
the Webadmin.

00:22:55.170 --> 00:22:56.740 align:middle line:90%
We should get three Success.

00:22:56.740 --> 00:22:59.580 align:middle line:84%
And once you do that,
you go back to Jabber 1

00:22:59.580 --> 00:23:01.350 align:middle line:90%
and create a Conference Bridge.

00:23:01.350 --> 00:23:05.970 align:middle line:84%
It should get registered with
the CA server with your CMS.

00:23:05.970 --> 00:23:08.790 align:middle line:84%
And the only reason
it would not register

00:23:08.790 --> 00:23:12.660 align:middle line:84%
is if the CallManager does
not trust the root CA,

00:23:12.660 --> 00:23:20.070 align:middle line:84%
or you have incorrectly
configured your certs when you

00:23:20.070 --> 00:23:21.960 align:middle line:90%
are adding it to your Webadmin.

00:23:21.960 --> 00:23:24.840 align:middle line:84%
Or maybe your root
CA certificate

00:23:24.840 --> 00:23:27.600 align:middle line:84%
was not uploaded
correctly, or you did not

00:23:27.600 --> 00:23:30.250 align:middle line:90%
sign the certs correctly.

00:23:30.250 --> 00:23:31.855 align:middle line:90%
Now, all we have to do is test.

00:23:31.855 --> 00:23:33.480 align:middle line:84%
So the first thing
what I'm going to do

00:23:33.480 --> 00:23:37.440 align:middle line:84%
is from Jabber 1,
which is Tony Stark.

00:23:37.440 --> 00:23:46.550 align:middle line:90%
I will call PSTN 95151111.

00:23:46.550 --> 00:23:53.480 align:middle line:84%
Let's go to the PSTN machine
and answer this call.

00:23:53.480 --> 00:23:58.230 align:middle line:84%
Now, I would go to my Candidate
PC, which is on the outside.

00:23:58.230 --> 00:24:04.510 align:middle line:84%
And let's log into
Jabber using HQ One.

00:24:04.510 --> 00:24:07.710 align:middle line:90%
So here, I would go to Jabber.

00:24:07.710 --> 00:24:09.370 align:middle line:90%
Let's sign in using--

00:24:09.370 --> 00:24:12.430 align:middle line:84%
I believe it's preconfigured
to sign in using HQ One.

00:24:12.430 --> 00:24:21.140 align:middle line:90%


00:24:21.140 --> 00:24:23.630 align:middle line:84%
Now, you may have
signing-in issues

00:24:23.630 --> 00:24:25.790 align:middle line:90%
if your NTP is not correct.

00:24:25.790 --> 00:24:28.430 align:middle line:84%
Because we are traversing
the Expressway,

00:24:28.430 --> 00:24:31.050 align:middle line:90%
you require NTP to be in sync.

00:24:31.050 --> 00:24:34.755 align:middle line:84%
So your machine's time should
match your Expressway's time.

00:24:34.755 --> 00:24:36.755 align:middle line:84%
So if it's not, then it's
going to be a problem.

00:24:36.755 --> 00:24:39.890 align:middle line:90%


00:24:39.890 --> 00:24:41.305 align:middle line:90%
Let's wait for it to sign in.

00:24:41.305 --> 00:24:53.160 align:middle line:90%


00:24:53.160 --> 00:24:55.470 align:middle line:84%
Let's do a Control-Shift-D
just to check what's

00:24:55.470 --> 00:24:56.690 align:middle line:90%
happening behind the scenes.

00:24:56.690 --> 00:24:59.680 align:middle line:90%


00:24:59.680 --> 00:25:03.790 align:middle line:84%
It looks like it was success,
so we should be able to sign in.

00:25:03.790 --> 00:25:24.560 align:middle line:90%


00:25:24.560 --> 00:25:25.790 align:middle line:90%
Let's go check.

00:25:25.790 --> 00:25:28.775 align:middle line:84%
Candidate PC's still
trying to sign in.

00:25:28.775 --> 00:25:43.460 align:middle line:90%


00:25:43.460 --> 00:25:47.030 align:middle line:84%
Let's just exit out
and log in again.

00:25:47.030 --> 00:25:49.650 align:middle line:90%


00:25:49.650 --> 00:25:51.530 align:middle line:90%
So let's test this out.

00:25:51.530 --> 00:25:55.550 align:middle line:84%
What we're going to do is
go to Jabber 1 PC, where

00:25:55.550 --> 00:25:58.280 align:middle line:90%
I'm logged in with Tony Stark.

00:25:58.280 --> 00:26:00.680 align:middle line:84%
And the first thing
what I would do

00:26:00.680 --> 00:26:03.050 align:middle line:84%
is call the
Candidate PC which is

00:26:03.050 --> 00:26:07.760 align:middle line:90%
2001, which is on the outside.

00:26:07.760 --> 00:26:11.930 align:middle line:90%
Candidate PC is HQ One.

00:26:11.930 --> 00:26:14.360 align:middle line:90%
So call this number.

00:26:14.360 --> 00:26:16.730 align:middle line:84%
And just ensure that you
would disable the video.

00:26:16.730 --> 00:26:20.750 align:middle line:84%
Because of bandwidth issues,
your PC might get hung.

00:26:20.750 --> 00:26:25.350 align:middle line:84%
So what I would suggest
is once you make the call,

00:26:25.350 --> 00:26:27.975 align:middle line:84%
answer the call and
disable the video.

00:26:27.975 --> 00:26:31.930 align:middle line:90%


00:26:31.930 --> 00:26:33.040 align:middle line:90%
Let's disable that.

00:26:33.040 --> 00:26:38.760 align:middle line:90%


00:26:38.760 --> 00:26:42.760 align:middle line:84%
Same thing here,
disable his video.

00:26:42.760 --> 00:26:52.270 align:middle line:84%
Now, from Jabber 1, I will make
another call to PSTN 95151111.

00:26:52.270 --> 00:26:55.700 align:middle line:84%
And go and answer
the call on the PSTN.

00:26:55.700 --> 00:26:58.590 align:middle line:90%


00:26:58.590 --> 00:27:00.675 align:middle line:84%
Again, ensure you
disable the video.

00:27:00.675 --> 00:27:06.080 align:middle line:90%


00:27:06.080 --> 00:27:09.440 align:middle line:84%
And then click on
this three dots here.

00:27:09.440 --> 00:27:12.120 align:middle line:90%
And click on Merge HQ One.

00:27:12.120 --> 00:27:13.422 align:middle line:90%
So Merge with HQ One.

00:27:13.422 --> 00:27:15.680 align:middle line:90%
This should redirect to CMS.

00:27:15.680 --> 00:27:19.310 align:middle line:84%
And we should go in
Conference Bridge,

00:27:19.310 --> 00:27:22.670 align:middle line:84%
where all three users
would be connected,

00:27:22.670 --> 00:27:23.915 align:middle line:90%
which you can see here.

00:27:23.915 --> 00:27:27.430 align:middle line:90%


00:27:27.430 --> 00:27:29.350 align:middle line:84%
All three users are
basically connected

00:27:29.350 --> 00:27:32.690 align:middle line:90%
in the Conference Bridge.

00:27:32.690 --> 00:27:35.320 align:middle line:84%
So with this, we've basically
met the requirements

00:27:35.320 --> 00:27:36.400 align:middle line:90%
of the question.

00:27:36.400 --> 00:27:38.540 align:middle line:84%
I hope this video was
informative to you.

00:27:38.540 --> 00:27:41.280 align:middle line:90%
And thank you for watching.

00:27:41.280 --> 00:27:42.000 align:middle line:90%