Polycom 1725-31424-001 Deployment Manual

Polycom 1725-31424-001 Deployment Manual

Ip phone

Advertisement

Quick Links

Deployment Guide for the
Polycom® CX700 IP Phone
R2
July 2010
1725-31424-001 Rev. A
|
|

Advertisement

Table of Contents
loading

Summary of Contents for Polycom 1725-31424-001

  • Page 1 Deployment Guide for the Polycom® CX700 IP Phone July 2010 1725-31424-001 Rev. A...
  • Page 2 As between the parties, Polycom, Inc., retains title to and ownership of all proprietary rights with respect to the software contained within its products. The software is protected by United States copyright laws and international treaty provision.
  • Page 3: About This Guide

    About This Guide Thank you for choosing the Polycom® CX700 IP phone which enables a new era in unified communications currently unavailable with traditional desktop phones. Connecting a Polycom CX700 to Microsoft® Office Communications Server 2007 R2 allows you to place regular and Voice over Internet Protocol...
  • Page 4 Deployment Guide for the Polycom CX700 IP Phone...
  • Page 5: Table Of Contents

    DHCP Search Options ..........2 DNS and the Polycom CX700 IP Phone ......3 NTP and the Polycom CX700 IP Phone .
  • Page 6 Making the Root CA Certificate Available to a Polycom CX700 Phone . . 48 Installing a Public Root CA Certificate on a Polycom CX700 Phone ..49 Confirming the Current Software Version ......49...
  • Page 7: Deploying Polycom Cx700 Phone Within A Microsoft Office Communications Server 2007 R2 Environment

    Environment The Polycom® CX700 IP phone running Microsoft® Office Communicator 2007 R2 Phone Edition is an intelligent IP phone that is designed to get the most out of the Microsoft unified communication platform. The Polycom CX700 phone combines network voice, user-driven design, up-time reliability, quality audio, and the improved communication and collaboration of Microsoft®...
  • Page 8: Dhcp And The Polycom Cx700 Ip Phone

    Dynamic Host Configuration Protocol (DHCP) server that automatically assigns IP addresses to each client computer or device on the network. The Polycom CX700 phone is no exception and therefore can receive only DHCP-assigned IP addresses and requires no configuration on the device.
  • Page 9: Dns And The Polycom Cx700 Ip Phone

    The Polycom CX700 phone uses the following DNS domains when querying information in DNS. • • If the query fails, the Polycom CX700 phone tries to look up the same record with DNS suffix(es) appended. • • Panel, double-click Administrative Tools, and then double-click DHCP.) and then click OK.
  • Page 10: Exchange Server 2007 Autodiscover Service

    Retrieving Outlook Contacts, Call Logs, and Voice Mail The Polycom CX700 phone retrieves Outlook contacts, call logs, and voice mails and displays them on the device. The Polycom CX700 phone does this by accessing the Exchange Server 2007 Client Access Server (CAS) and retrieving the information by using Exchange Web Services (EWS).
  • Page 11: Polycom Cx700 Phone Querying Of Exchange Server 2007

    Deploying Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment Outlook 2007 uses Active Directory Service Connections Points (SCP) and DNS SRV records to locate Exchange Server 2007 CAS. However, the device does not support these additional methods.
  • Page 12: Server Security Framework Overview

    Windows Server 2003 is connected to a network, it is configured as an NTP client. The Polycom CX700 phone searches for a NTP server in DNS as follows: • If it cannot find the NTP SRV record, it will try to use windows.com as an NTP server: •...
  • Page 13: Root Ca Certificate For The Polycom Cx700 Phone

    Deploying Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment • These fundamental elements work together to define trusted users, servers, and connections. The resulting trust relationships provide the foundation on which the complete Microsoft Office Communications Server 2007 R2 security framework is built.
  • Page 14 If neither of these methods succeeds, the device displays the error message “Cannot validate server certificate” and the user is unable to use the device. Polycom CX700 Phone Certificates The following is a list of considerations for issuing certificates to the Polycom CX700 phone. •...
  • Page 15 Deploying Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment — Cn=Certificate Authorities, cn=Public Key Services, CN=Services, cn=Configuration, dc=<AD Domain> The LDAP request is BaseDN: CN=Configuration, dc= <Domain> Filter: (objectCategory=pKIEnrollmentService) and searched for attribute is dNSHostname. Be aware that the device downloads the certificate by using HTTP get - http://<dNSHostname>/certsrv/certnew.p7b?ReqID=CACert&Renewal=-1...
  • Page 16 Deployment Guide for the Polycom CX700 IP Phone Vendor Equilax GeoTrust GoDaddy GoDaddy GoDaddy Certificate Name Expiry Date Equifax Secure 8/22/2018 Certification Authority GetTrust Global CA 5/20/2022 GoDaddy Class 2 6/29/2034 Certification Authority http//www.valicert.c 6/25/2019 Starfield Class 2 6/29/2034 Certification...
  • Page 17: Upgrading Polycom Cx700 Phone Within A Microsoft Office Communications Server 2007 R2 Environment

    Communications Server 2007 R2 Environment This chapter detailed instructions on how to upgrade Polycom CX700 IP Phone. Due to a number of issues, the upgrade may be a two-step process, which includes a hard reset of the phone to remove any pre-existing phone credentials, certificates chains, and URLs.
  • Page 18: Introduction

    1.0.199.123 to 1.0.522.101 and then to 3.5.6907.35 using an Office Communications Server 2007 R2 Device Update service. If any of the Polycom CX700 phones are running a software release earlier than 1.0.199.123, it may be necessary to install an R1 Update Server to update to 1.0.199.123.
  • Page 19 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment Sign-in address: ocstest1@fabrikam.com(fabrikam.com represents <SIPDomain> in this document) Domain\User name: contoso.com\ocstest1(contoso.com represents <DHCPDomain> in this document) <SIPDomain> and <DHCPDomain> are used as placeholders to distinguish between the domain used in the Sign-in address: list box and the domain specified in the Domain\User name: list box: •...
  • Page 20 Deployment Guide for the Polycom CX700 IP Phone The Polycom CX700 phone reset options are as follows: • • • This process removes any credentials, certificate chains and XML configuration files and restores the phone to factory defaults. The first time a user powers up the phone and signs in, the phone gets in-band provisioning information from the server or Enterprise pool hosting the user's account.
  • Page 21: Background

    Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment 700/A/ENU/1.0.522.101/CPE X700/A/ENU/1.0.522.101/CPE Scenario The upgrade instructions in this document assume the following conditions: • • • • • • • • • • • Background When trying to figure out why one or more steps in the upgrade process are not working, it is helpful to know how it is supposed to work.
  • Page 22 Deployment Guide for the Polycom CX700 IP Phone Device Update File Storage During Microsoft Office Communications Server 2007 R2 installation, Device Update Service is automatically installed on all servers running the Web Components Server role. You do not need to plan for additional servers to support Device Update Service.
  • Page 23 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment How Polycom CX700 Phones Connect to the Device Update Service At a high level, a Polycom CX700 phone using the default configuration connects to the Microsoft Office Communications Server (OCS) 2007 R2 Device Update Service in the following way: 1.
  • Page 24 Detailed Polycom CX700 Phone Upgrade Sequence When Running Software Release 1.199.123 The following steps occur when you sign in to a Polycom CX700 phone running software release 1.199.123. This assumes that the Sign-in address: value is ocstest1@fabrikam.com and the Domain\User Name: value is contoso.com\ocstest1 .
  • Page 25 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment • Query DNS for _sipinternal._tcp. <SIPDomain> SRV record • Query DNS for _sipinternal._tcp. <SIPDomain>.<DHCPDomain> SRV record • Query DNS for _sip._tls. <SIPDomain> SRV record • Query DNS for _sip._tls.
  • Page 26 <BaseURL> - http://pool01.contoso.com/DeviceUpdateFiles_Int/UCPhone/Polycom/CX700/A/ENU/1.0.522.101/CPE • <ExternalBaseURL> - https://ocsrp.fabrikam.com/DeviceUpdateFiles_Ext/UCPhone/Polycom/CX700/A/ENU/1.0.522.101/CPE 26. Polycom CX700 phone issues an HTTP GET for CPE file if it’s newer than the currently installed version • (HTTP:Request, GET /DeviceUpdateFiles_Int/UCPhone/Polycom/CX700/A/ENU/1.0.522.101/CPE/CPE.nbt) 27. Pool begins streaming CPE.nbt to Polycom CX700 phone as a binary/octet-stream (approx.
  • Page 27: Polycom Cx700 Phone Upgrade Steps - Summary

    Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment When looking through a NetMon trace from an upgrade to 1.0.522.101, you may notice that the DNS query for ucupdates-r2.<DHCPDomain> does not occur until the CPE.NBT file had already started streaming to the OCPE device. This happens when you sign into the phone prior to the upgrade starting;...
  • Page 28 Deployment Guide for the Polycom CX700 IP Phone If upgrading Polycom CX700 phones remotely, refer to the table in Configure DNS 2. Configure Microsoft Office Communications Server (OCS) If you get the error "Cannot sign in. You do not have the necessary permissions.
  • Page 29: Polycom Cx700 Phone Upgrade Steps - Details

    — If you do sign-in to the Polycom CX700 phone, use your SIP URI for the Sign-in Address value and your domain FQDN for the Domain\User name value (for example, ocstest1@fabrikam.com and...
  • Page 30 Deployment Guide for the Polycom CX700 IP Phone Step 1.1 - Configure DHCP The first step is to make sure the Polycom CX700 phone can get an IP address and the necessary DNS (and potentially WINS) information it needs to locate a time service, certificate chain and pool running the Device Update service.
  • Page 31 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment Type Name Internal Zone sip.<SIPDomain> <SIPDomain> autodiscover.<SIPDomain> _sipinternaltls._tcp.<SIPDomain> _ntp._udp.<SIPDomain> Internal Zone ucupdates-r2.<DHCPDomain> <DHCPDomain> poolName.<DHCPDomain> External Zone sip.<SIPDomain> <SIPDomain> autodiscover.<SIPDomain> reverseProxyFQDN.<SIPDomain> _sip._tls.<SIPDomain> _ntp._udp.<SIPDomain> External Zone ucupdates-r2.<DHCPDomain> <DHCPDomain> Polycom CX700 phones running release 1.0.199.123 look for time.windows.com by default and use it if it's reachable.
  • Page 32 Enterprise CA (CN=ContosoCA in the example) and look for the cACertificate attribute. It should be populated because this is the data (basically .CER file) that the Polycom CX700 phone pulls down from Active Directory to populate its Trusted Root Certificate cache in order to trust the...
  • Page 33 There is also a client version filter on the Edge so if you plan to upgrade external Polycom CX700 phones as well, be sure to make the same adjustment on your Edge server (set to 1.0.522.* by default).
  • Page 34 2. From a command prompt on a front end server in the pool running the 3. The script will populate the DownloadURL / StoreURL values with the 4. If you plan to upgrade external Polycom CX700 phones, open a browser Use the Manual Method: 1.
  • Page 35 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment To determine the correct syntax for the DB to connect to you can look at the Pool, Database tab; the value listed for Database Instance Name: is the value you substitute for $poolbackend$.
  • Page 36 9. Verify that the Windows Management Instrumentation (WMI) values are 10. Click Exit to close wbemtest. Verify Internal and External Download URLs Confirm that internal and external Polycom CX700 phones will be able to download firmware updates. ExternalUpdatesStoreURL properties to edit them, and type the values...
  • Page 37 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment • Internal — Using a browser from inside the corporate firewall, connect to: http://FQDNofPoolRunningDeviceUpdateService/DeviceUpdateFil es_Int/OCInterim/ENU/cpe.nbt and verify that you can download the file. If you can, chances are the Polycom CX700 phone can.
  • Page 38: Step 2 - Upgrade Polycom Cx700 Phones From 1.0.199.123 To

    Internet Information Services (IIS). For security reasons, once all previously deployed devices have been updated, you should disable anonymous access on this virtual directory. OCS 2007 R2 Polycom CX700 phones can be updated without Anonymous access. Step 1.5 - Configure a Time Source This step is optional.
  • Page 39 6. Click the Pending Updates tab and ensure that 1.0.522.101 is in the “Pending” state. Do not change it at this time. 7. Click the Test Devices tab and add the Polycom CX700 phone to be upgraded (no spaces / dashes in the MAC address).
  • Page 40 Deployment Guide for the Polycom CX700 IP Phone 4. Sign in to the Polycom CX700 phone using an account that is on the same If the Polycom CX700 phone is not picking up downloads, be sure the client version filter is set properly and that WMI has been configured with internal (BaseURL) and external (ExternalBaseURL values.
  • Page 41: Step 3 - Upgrade Polycom Cx700 Phones From 1.0.522.101 To

    Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment Step 3 - Upgrade Polycom CX700 Phones from 1.0.522.101 to 3.5.6907.35 This is the final step in the upgrade process and can be conducted on a one-off basis or after all Polycom CX700 phones have been upgraded from release 1.0.522.101 to 3.5.6907.35.
  • Page 42 3.5.6907.9. To upgrade the phone to release 3.5.6907.9: 1. If the Polycom CX700 phone has not reset after 10 minutes of inactivity or There is a lag between when 3.5.6907.9 is available and when the phone can access it and the system logs the attempt. Be sure to allow for that (usually less than 5 minutes.)
  • Page 43 Upgrading Polycom CX700 Phone within a Microsoft Office Communications Server 2007 R2 Environment 3. Calibrate the phone and sign in. 4. Confirm the Polycom CX700 phone is running release 3.5.6907.9 by clicking About on the main menu and checking the Version information.
  • Page 44 Deployment Guide for the Polycom CX700 IP Phone...
  • Page 45: Troubleshooting The Polycom Cx700 Phone

    Phone This chapter contains general troubleshooting information to help you solve any problems you might encounter when you use the Polycom® CX700 Phone in a wireless environment. The phone can provide feedback in the form of on-screen error messages, status indicators, and log files for troubleshooting issues.
  • Page 46: Logs Used For Troubleshooting

    Deployment Guide Polycom CX700 Logs Used for Troubleshooting To confirm that a Polycom CX700 phone running release 1.0.199.123 is not having issues locating resources, you can use a browser to FTP to the device and copy over the Communicator and DOMO log files. Use the IP address assigned to the device (for example, ftp://192.168.7.235).
  • Page 47: When To Use Dhcp Option 119

    CPE.NBT file): >> Use a browser to confirm you can access the virtual directory where the To confirm that the Polycom CX700 phone can get to the device update files, the following example provides instructions for a Polycom CX700 running...
  • Page 48 Deployment Guide Polycom CX700 When you use NetBIOS style, the phone needs to use the <domain> name to find a domain controller. If WINS is configured for use by the phone (via DHCP), it will use that. However if WINS is not configured, and the phone is on another subnet than the domain controller, it needs to use DNS to find it.
  • Page 49: Configuring Windows Server As An Ntp Time Source

    Predefined Options. String, leave the Array check box unchecked (it is not an array) and click DNS Search List. in your organization delimited by a semi-colon. For example, contoso.com;corp.contoso.com;fabrikam.com Registry editor. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time \TimeProviders\NtpServer\ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time \Parameters\NtpServer Troubleshooting the Polycom CX700 Phone...
  • Page 50 Deployment Guide Polycom CX700 6. In the right pane, right-click NtpServer, then Modify, in the Edit 7. Now click OK. 8. Locate and click the following 9. In the right pane, right-click SpecialPollInterval, then click Modify. 10. In the Edit DWORD Value box, set Base to Decimal. In the Value data 11.
  • Page 51: Enabling Automatic Certificate Enrollment

    — Update certificates that use certificate templates enables autoenrollment for issuance of certificates that supersede issued certificates. Troubleshooting the Polycom CX700 Phone  ...
  • Page 52 To configure autoenrollment Group Policy for a domain: 1. Open Active Directory Users and Computers. 2. Right click on the domain containing the Polycom CX700 phone and 3. Click the Group Policy tab, make sure the Default Domain Policy is 4.
  • Page 53 Click CN=Enrollment Services and confirm that the name of your internal Certificate Authority is listed in the right pane with a Class type of pkiEnrollmentService. 6. From the ADSI Edit menu, click File, then Exit to close ADSIEDIT.MSC. Troubleshooting the Polycom CX700 Phone  ...
  • Page 54: Making The Root Ca Certificate Available To A Polycom Cx700 Phone

    CA to the phone. It is not possible to manually install the Root CA certificate on the phone, so it needs to come via the network. The Polycom CX700 phone is able to download the certificate using two methods: •...
  • Page 55: Installing A Public Root Ca Certificate On A Polycom Cx700 Phone

    If you have not signed in, click the About menu option (bottom menu) and the release information will be the first value displayed. If you have signed in to Polycom CX700 phone, unlock it (if necessary) and click the Settings icon (looks like a small sprocket on the left menu). The release information will be the first value displayed.
  • Page 56 Deployment Guide Polycom CX700...

This manual is also suitable for:

Cx700

Table of Contents