CUCM Configuration

1. Log into the CUCM Administration page

2. Go to User Management > User Settings > Access Control Group

3. Select Add New. For Name, enter OneAlert AXL Users and select Save.
4. For Related Links (in the upper right), select Assign Role to Access Control Group and select Go.
   

5. Enable the following roles:

   • Standard AXL API Access
   • Standard CCM Admin Users
   • Standard SERVICEABILITY Administration for Cisco Call Manager Serviceability > Administer All Aspects of Serviceability System
6. Select Save.

These instructions are for creating a new user account, but you can edit an existing one.

1. Go to User Management > Application User and select Add New.
2. Enter a User ID and Password.

3. Under Permissions Information, select Add to Access Control Group

4. Enable OneAlert AXL Users, which is the user group you just created.
5. Select Add Selected.
6. Verify all information is correct and select Save.

Important: The following instructions are outside the scope of Support. Use of these instructions is left to the discretion of the customer.

This change requires phones to be reset. Consider scheduling this change during a maintenance window. You will need to search by Device Type. Searching for more than one phone model will not allow the Web Access option to be displayed.

1. Go to Bulk Administration > Phones > Update Phones > Query.
2. Change Find Phones Where to Device Type.
3. Search for the desired phone model and click Next.

4. Do one of the following:

   • Select Reset Phones, if the phone is NOT currently in use.
   • Select Don't Reset/Restart phones/Apply Config, if the phone IS in use.

6. Enable Web Access. 
7. Select Enabled.
8. Select Run Immediately.
9. Select Submit.
10. Repeat this process to change additional phone models.

1. Go to System > Enterprise Phone Configuration.
2. Set HTTPS Server to http and https Enabled.
3. Set Web Access to Enabled.
4. Save changes.
5. Go to Device > Device Settings > Common Phone Profile.
6. Select Find in the search parameters.
7. Select Shared Common Phone Profile.
8. Under Product Specific Configuration Layout, set Web Access to Enabled.
9. Click Save > Apply Config or Save > Reset.

If your organization requires a certificate assigned by a Certificate Authority, follow the Optional TLS/SSL Setup instructions in the Installation topic on how to create a certificate request.

You must use one of the following as the Common name:

• server host name if your OneAlert server is standalone
• FQDN if your OneAlert server is a member of a domain

Once you've been notified that your signed certificate is available, download it from your Certificate Authority so you can upload it to your Call Manager.

Upload the certificate to CUCM

There are three basic steps:

Upload the certificate

1. Change the CUCM Navigation to Cisco Unified OS Administration and select Go.
2. Log in to your CUCM.
   (Hint: This is typically a different login than CM Administration.)
3. Select Security > Cert Management.
4. Select Find and check that the certificate has not already been uploaded.
5. Select Upload Certificate/Cert chain.
6. Select tomcat-trust from the Certificate Purpose drop-down list.
7. Provide a Description of your choice, for example RevApp. (Do not use spaces in the name.)
8. Select Choose File and select your certificate.
9. Select Upload.

Restart the TVS service

1. Change the CUCM Navigation to Cisco Unified Serviceability and select Go.
2. Select Tools > Control Center - Network Services.
3. Scroll to the bottom of the screen to Security Services and select Cisco Trust Verification Service.
4. Select Restart.

Cisco Notifier SSL setup

1. Log in to OneAlert.
2. Go to Configuration > Phone Systems > Cisco.
3. Select Settings.
4. Scroll to the bottom of the page and select Use SSL/TLS.
5. Select Save.
6. In OneAlert, go to Status > System Status.
7. Expand Cisco Notifier and select Restart.

This section is optional.

Configure HTTPS Authentication URL in CUCM

1. Go to System > Enterprise Parameters and scroll down to the Secured Phone URL Parameters section.

2. Populate the Secured Authentication URL fields as follows:

   https://<Revolution_server_ip>/Authenticator/Authenticate

   for example:

   https://10.10.10.10/Authenticator/Authenticate

3. Save your changes.
4. Reboot your phones.

Note: You won't see the certificate listed in Cisco Notifier.

Your Cisco phones now trust OneAlert.

If your phones are receiving notification audio but not text and image, the phone may not be able to verify the certificate.

First, reboot the phone.

If this doesn't resolve the issue, delete the ITL file from the phone and reboot the phone again. Deleting the ITL file forces the phone to refresh its data. (The process for deleting the ITL file is different for different Cisco phone models. Consult your phone model documentation for instructions.)

You can also check you phone logs for errors verifying the certificate.