Polycom 1725-31424-001 manuale d’uso

R2 | July 2010 | 1725-31424-001 Rev . A Deployment Guide for the Polycom® CX700 IP Phone[...]

© 2010 Polycom, Inc. All rights reserved. Polycom, Inc. 4750 Willow Road Pleasanton, CA 94588-2708 USA No part of this document may be reproduce d or transmitted in any form or by any means, el ectronic or mechanical, for any purpose, without the express written permission of Polycom, Inc. Under the law, reprod ucing includ es translating into ano[...]

iii About This Guide Thank you for choosing the Polycom® CX700 IP phone which enables a ne w era in unified commu nications currently u navailable with trad itional desktop phones. Connecting a Polycom CX700 to Microsoft® Offi ce Communications Server 2007 R2 allows you to place regu lar and Voice over Internet Protocol (VoIP) calls, answer calls[...]

Deployment Guide for the Polycom CX700 I P Phone iv[...]

v Contents About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii 1 Deploying Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Envi ronment . . . . . . . . . . . . 1 DHCP and the Polycom CX700 IP Phone . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 DHCP Search Options . . . . . .[...]

Deployment Guide for the Polycom CX700 I P Phone vi Configuring Windows Server as an NTP Time Source . . . . . . . . . . . . . . . . 43 Enabling Automatic Certif icate Enrollment . . . . . . . . . . . . . . . . . . . . . . . . . 45 Making the Root CA Cert ificate Available to a Polycom CX700 Phone . . 48 Installing a Public Root CA Certificate on a[...]

1 1 Deploying Polycom CX700 Phone within a Microsoft Of fice Communications Ser ver 2007 R2 Environment The Polycom® CX700 IP phone running Microsoft® Office Communicator 2007 R2 Phone Edition is an intelligent IP phone that is designed to g et the most out of the Microsoft unified communication platform. The Polycom CX700 phone combines network [...]

Deployment Guide for the Polycom CX700 I P Phone 2 DHCP and the Polycom CX700 IP Phone All computers that are on a TCP/IP netw ork must have an IP address for the network to work correctly. Generall y, you can manually configure IP addresses at each computer, or you ca n install a Dynamic Host Configuration Protocol (DHCP) server that automatically[...]

Deploying Polycom CX700 Phone within a Microsof t Office Communications Ser ver 2007 R2 Environment 3 T o enable search option 119 for Windows Ser ver 2003 DHCP ser ver: 1. Open DHCP. (To open DHCP, click Start, point to Se ttings , click Control Panel , double- click Administrative Tools , and then double-click DHCP .) 2. In the console tree, clic[...]

Deployment Guide for the Polycom CX700 I P Phone 4 When the Polycom CX700 phone connects to the Microsoft Office Communications Server 2007 R2, it queries in the following order. 1. Hosts and port pointed to by these SRV records — _sipinternaltls._tcp.<SIP domain> — _sip._tls.<SIP domain> — _sipinternal. tcp.<SIP domain> 2. [...]

Deploying Polycom CX700 Phone within a Microsof t Office Communications Ser ver 2007 R2 Environment 5 Outlook 2007 uses Active Directory S e rvice Connections Points (SCP) and DNS SRV records to locate Exchange Se rver 2007 CA S. However, the device does not support these additional methods. The Autodiscover service finds and presen ts the various [...]

Deployment Guide for the Polycom CX700 I P Phone 6 Although the actual operati ons of these two providers are closely related, they appear independent to the time service. By default, when a computer that is running Windows Server 2003 is connected to a network, it is configured as an NTP client. The Polycom CX700 phone searches for a NTP server in[...]

Deploying Polycom CX700 Phone within a Microsof t Office Communications Ser ver 2007 R2 Environment 7 • TLS (Transport Layer Security) and MTLS (Mutual Transport Layer Security) enable endpoint authenti cation and instant messaging (IM) encryption. Media streams are encrypted by using Secure Re al-time Transport Protocol (SRTP). These fundamental[...]

Deployment Guide for the Polycom CX700 I P Phone 8 2. If the search for Active Di rectory objects of category CertificationAuthority does not return any objects, or if the objects have empty caCertificate attributes, the de vice searches for Active Directory objects of category pKIEnrollmentSer vice in the configuration naming context. Such objects[...]

Deploying Polycom CX700 Phone within a Microsof t Office Communications Ser ver 2007 R2 Environment 9 — Cn=Certificate Authorities, cn=P ublic Key Services, CN=Services, cn=Configuration, dc=<AD Domain> The LDAP request is BaseDN: CN=Conf iguration, dc= <Domain> Filter: (objectCategory=pKIEnrollmentService ) and searched for attribute[...]

Deployment Guide for the Polycom CX700 I P Phone 10 Equilax Equifax Secure Certification Authority 8/22/2018 1024 GeoT rust GetT rust Global CA 5/20/2022 2048 GoDaddy GoDaddy Class 2 Certification Authority 6/29/2034 2048 GoDaddy http//www .valic ert.c om/ 6/25/2019 1024 GoDaddy S tarfield Class 2 Certification Authority 6/29/2034 2048 V endor Cer [...]

11 2 Upgrading Polycom CX700 Phone within a Microsoft Of fice Communications Ser ver 2007 R2 Environment This chapter detailed instruct ions on how to upgrade Polycom CX700 IP Phone. Due to a number of issues, the upgrade may be a two-step process, which includes a hard reset of the phone to remove any pre-existing phone credentials, certificat es [...]

Deployment Guide for the Polycom CX700 I P Phone 12 Introduction The Polycom® CX700 IP Phone may cont ain one of the following software releases: This section will focus on upgrad ing the Polycom CX700 phone from 1.0.199.123 to 1.0.522.101 and then to 3.5.6907.35 using an Office Communications Server 2007 R2 Device Update service. The Polycom CX70[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 13 Sign-in address: ocstest1@f abrikam.com(fabrikam.com represe nts <SIPDomain> in this document) DomainUser name: contoso.c omocstest1(contoso.com represen ts <DHCPDomain> in this documen t) <SIPDomain> and <DHCPDoma in> are[...]

Deployment Guide for the Polycom CX700 I P Phone 14 The Polycom CX700 phone reset options are as follows: • Power cycle— Reboot the phone by removing and the n reapplying power • Soft Reset—Press the reset button on the back of the phone just long enough to reset it • Hard Reset - Unplug the phone, use a paper clip to press and hold the r[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 15 http://POOL01.contoso.com/De viceUpdateFiles_Int/UCPhone/Poly com/CX 700/A/ENU/1.0.522.101/CPE + Element: XmlElement: <ExternalBaseURL> - https://ocsrp.fabrikam.com/D eviceUpdateFiles_Ext/UCPhone/Pol ycom/C X700/A/ENU/1.0.522.101/CPE Scenario[...]

Deployment Guide for the Polycom CX700 I P Phone 16 Device Update File Storage During Microsoft Office Communications Server 2007 R2 in stallation, Device Update Serv ice is automatica lly installed on all servers ru nning the Web Components Server role. You do not need to plan for additional servers to support Device Update Service. Device Update [...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 17 How Polycom CX700 Phones Connect to the Device Update Ser vice At a high level, a Polyco m CX700 p hone using the default configuration connects to the Microsoft Office Commun ications Server (OCS) 2007 R2 Device Update Serv ice in the followi ng w[...]

Deployment Guide for the Polycom CX700 I P Phone 18 2. If the phone determines it is running a down level version of firmware it issues either an HTTP or HTTPS GE T request to the pool hosting the Device Update Se rvice: http://192.168.7.81/DeviceUpdateFiles_Int/UCPhone/Polycom/CX700 /A/ENU/1.0.522.101/CPE/CPE.nbt https://63.123.155.6/De viceUpdate[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 19 • Query DNS for _sipinternal ._tcp. <SIPDomain> SRV record (_sipinternal._t cp.fabrikam.com) • Query DNS for _sipinternal ._tcp. <SIPDomain>.<DHCPDomain> SRV record (_sipinternal._ tcp.fabrikam.c om.contos o.com) • Query DNS[...]

Deployment Guide for the Polycom CX700 I P Phone 20 17. Polycom CX700 phone attempts HTTP req uest to download RootCA cert chain using Kerberos (SPNEGO) (Kerberos Auth fails) 18. Polycom CX700 phone attempts HTTP request to download RootCA cert chain using Kerberos (SPNEGO) w/different key (Kerberos Auth succeeds) 19. DC streams Base64 certific ate[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 21 Polycom CX700 Phone Upgrade Steps - Summar y If your environmental dependencies are close to being set and you just want a high level checklist of the steps involved in configuring Microsoft Office Communications Server (OCS) 2007 R2 to upgrade fro[...]

Deployment Guide for the Polycom CX700 I P Phone 22 c Configure DNS for <DHCPDomain> (contoso.com is used in the example) Add A records for: — yourPoolName.contoso.com pointed to the IP address of the pool running Device Update se rvice — ucupdates-r2.contoso.com pointed to the IP address of the pool running Device Update se rvic e. If yo[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 23 — Performs a hard reset, and then recalibrate the phone. — Sign-in to the Polycom CX700 phone using your SIP URI for the Sign-in Address value and your domain FQDN fo r the DomainUser name value (e.g., ocstest1@fabri kam.com and contoso.comoc[...]

Deployment Guide for the Polycom CX700 I P Phone 24 Step 1.1 - Configure DHCP The first step is to make sure the Po lycom CX700 phone can get an IP address and the necessary DNS (and potentially WINS) information it needs to locate a time service, certificate chain and p ool running the Device Update service. The figure below shows both WINS and DH[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 25 DNS Ty p e Name Port IP Address / FQDN Internal Zone <SIPDomain> A sip.<SIPDomain> N/A IP/VIP of Pool running Device Update. A autodiscover .<SIPDomain> N/A Internal IP/VIP of Exchange server running CAS role. Note: this assumes S[...]

Deployment Guide for the Polycom CX700 I P Phone 26 Step 1.3 - Configure Cer tificates Two approaches to configure certificates are provided. By default, a Windows 2008 / 2003 Enterprise Certificate Au thorit y (CA) will publish the trusted root certificate chain in Active Directory automatically. To determine whether you need to ru n certutil, you[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 27 Do one of the following: • Upload certificate chain If for some reason the cACertificate attr ibute is not populated, or you want to make sure that it contains th e information you want, you can run certutil with the -f option to force an overrid[...]

Deployment Guide for the Polycom CX700 I P Phone 28 Modify Device Update Service External URLs (requ ired even if upgrading OCPE devices internall y) There are two URLs used by external Polycom CX700 phones for downloading updates; the DownloadURL and StoreURL. If there ar e Polycom CX700 phones that need to upgrade remotely, then use either the Au[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 29 Also, you have to add a second backsl ash to existing ba ckslash separating the instance name from the database name as shown (fo r example, '(local)rtc'): 4. This query opens one instance of this class. Double-click the instance. T o d[...]

Deployment Guide for the Polycom CX700 I P Phone 30 5. Double-click the ExternalUpdatesDownloadURL and ExternalUpdatesStoreURL properties to edit them, and type the values for each property as follows: For ExternalUpdatesDownloadURL, type https://ReverseProxyFQDN/Reque stHandl erExt/ucdevice.upx 6. Click Save Property. For ExternalUpdatesStoreURL, [...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 31 • Internal — Using a browser from inside the corporate firewall, connect to: http://FQDNofPoolRunningDeviceUp dateService/DeviceUpdateFil es_Int/OCInterim/ENU/cpe.nbt and verify that you can download the file. If you can, chances are the Polyco[...]

Deployment Guide for the Polycom CX700 I P Phone 32 For details on Verifying Exte rnal Device Access refer to the Microsoft Office Communications Server (OCS) 200 7 R2 product documentation: http://technet.microsoft.com/en-us/ library/dd572289(office.13).aspx Step 1.5 - Configure a Time Source This step is optional. If you are not using time.window[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 33 T o prepare the software update files: 1. Download the Microsoft Office Communications Server (OCS) 2007 1.0.522.101 Polycom CX700 phone software release (UCUpdates.exe) here and store it on a Pool Front End server (for example, c:UCUpdates522.10[...]

Deployment Guide for the Polycom CX700 I P Phone 34 4. Sign in to the Polycom CX700 phone us ing an account that is on the same pool as the Device Update service. 5. Perform a Reboot— power cycle the Polycom CX700 phone to force it to look for an update and leave it alone for five to ten minutes. The phone should reset automatically and present t[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 35 Step 3 - Upgrade Polycom CX700 Phon es from 1.0.522.101 to 3.5.6907.35 This is the final step in the upgrade process and can be conducted on a one-off basis or after all Polycom CX700 phone s have been upgraded from release 1.0.522.101 to 3.5.6907.[...]

Deployment Guide for the Polycom CX700 I P Phone 36 6. Click the Pending Updates tab and ensure that 3.5.6907.9 is in the “Pending” state. Do not change it at this time. 7. If using a different Polycom CX700 ph one for testing release 3.5.6907.9, click the Test Devices tab and add the Polycom CX700 phone to be upgraded (no spaces / dashes in th[...]

Upgrading Polycom CX700 Phone within a Microsoft Office Communications Ser ver 2007 R2 Environment 37 3. Calibrate the phone and sign in. 4. Confirm the Polycom CX700 phone is running releas e 3.5.6907.9 by clicking About on the main menu and checking the Version information. Click OK to return to the Sign in screen. The Polycom CX700 phone is now [...]

Deployment Guide for the Polycom CX700 I P Phone 38[...]

39 3 T roubleshooting the Polycom CX700 Phone This chapter contains general troubles hooting information to help you solve any problems you might encounter when you use the Polycom® CX700 Phone in a wireless environment. The phone can provide feedback in the form of on-screen error messages, status indica tors, and log files for troubleshooting is[...]

Deployment Guide Polycom CX700 40 Logs Used for T roubleshooting To confirm that a Polycom CX700 phone running release 1.0.199.123 is not having issues locating resources, you can use a browser to FTP to the device and copy over the Communicator and DO MO l og files. Use the IP address assigned to the device (for example, ftp://192.168.7.235 ). Thi[...]

T roubleshooting the Polycom CX700 Phone 41 T o confirm the Polycom CX700 phone can locate / r un ucdevice.upx (w hich in turn locates the correct CPE.NBT file): >> Use a browser to confirm you can access the virtual directory where the ucdevice.upx file is located: Internal http://pool01.contoso.com/RequestHandler/ucdevice.upx When hitting t[...]

Deployment Guide Polycom CX700 42 When you use NetBIOS style, the phone needs to use the <domain> name to find a domain controller. If WINS is configured for use by the phone (via DHCP), it will use that. However if WI NS is not configur ed, and the phone is on another subnet than the domain contro ller, it needs to us e DNS to find it. The w[...]

T roubleshooting the Polycom CX700 Phone 43 How to Configure DHCP Option 119 T o configure DHCP Option 119 : 1. From DHCP Administrator , right click DHCP server name and select Set Predefined Options . 2. Leave Option class: as DHCP Standard Options and click Add . 3. For Name: , enter DNS Search List , set Code: to 119 and Data Type to String , l[...]

Deployment Guide Polycom CX700 44 6. In the right pane, right-click NtpServer , then Modify , in the Edit DWORD Value under Value Data type the Domain Name System (DNS), each DNS must be unique and you must append 0×1 to the end of each DNS name otherwise changes will not take effect. By default this is set ti me.windows.com,0x9 and was change d t[...]

T roubleshooting the Polycom CX700 Phone 45 6. From the Group Policy Object Editor menu, select File and click Exit . Enabling Automatic Cer tificate Enrollment For Windows 2008 T o configure autoenrollment Group Policy for a domain: 1. On a domain controller r unning Wi ndows Server 2008 R2 or Windows Server 2008, click Start , point to Administra[...]

Deployment Guide Polycom CX700 46 — Expiration notificatio n controls when the end user is notified that a certificate is about to expire. 8. Click OK to accept your changes. 9. Run the following command at an elevated command prompt: gpupdate /force Automatic enrollment wi ll start wo rking in about 90 seconds for any applicable templates. For W[...]

T roubleshooting the Polycom CX700 Phone 47 6. From the Group Policy Object Editor menu, select File and click Exit . T o confirm that the Cer tificate Authorities is set: 1. Click Start , Ru n , type ADSIEDIT.MSC and click OK . 2. Select Configurat ion [yourDC.yourDomain.com] 3. Select CN= Configuration,DC=yourDomain,DC=co m 4. Select CN= Services[...]

Deployment Guide Polycom CX700 48 Making the Root CA Cer tificate A vailable to a Polycom CX700 Phone Communication between the Polycom CX 700 phone and Microsoft Office Communications Server 2007 R2 is by default encrypted using TLS and SRTP. Therefore, the device nee ds to trust certificates pr esented by Microsoft Office Communications Server 20[...]

T roubleshooting the Polycom CX700 Phone 49 Installing a Public Root CA Cer tificate on a Polycom CX700 Phone The Public Certif icate you are usi ng on your Edge server(s) is not trusted by the Polycom CX700 phone, because its co rresponding Root CA certificate is not installed on the phone per default. You can use the certutil mechanism to in stal[...]

Deployment Guide Polycom CX700 50[...]