installing sametime852 from zero to hero part2 edge component

7/28/2019 Installing Sametime852 From Zero to Hero Part2 Edge Component

http://slidepdf.com/reader/full/installing-sametime852-from-zero-to-hero-part2-edge-component 1/408



2 © 2010 IBM CorporationSocial Business

Agenda

● Components of IBM Sametime 8.5.2

● Requirements for a IBM Sametime 8.5.2 Edge deployment

● Architecture of a IBM Sametime 8.5.2 Edge deployment

● The 25 steps to a IBM Sametime 8.5.2 Edge deployment




The IBM Sametime 8.5.2 Components we will cover In Part 1:● IBM DB2 Database Server ● IBM Sametime System Console

●

IBM Sametime Community Server ● IBM Sametime Proxy Server

● IBM Sametime Meeting Server

● IBM Sametime Media Manager

● IBM Sametime Advanced Server (optional)

● IBM Sametime Connect Client

In this Part 2:

● IBM Sametime Community MUX (optional)

● IBM Sametime SIP Edge Proxy

● IBM Sametime Meeting HTTP Proxy

● IBM Sametime TURN Server

● IBM Sametime Gateway (optional)

In Part 3:

● Moving Sametime Servers to separate boxes

● Implementing additional Servers for clustering

●

Clustering of Sametime Servers




IBM Sametime System Level Architecture

Sametime

Gateway

Community

Server

Media Manager

Unified Telephony

Advanced

Server Meeting

Server

Sametime

Proxy

Sametime Clients

External IM

Communities

Enterprise Phone System

Embedded Applications,

including Web Client, Portal, and

Mobile

Partner

A/V Bridges

SIP, RTP SIP, RTP

VP

VP

VP VP

VP VP

HTTP HTTP

HTTP SIP, XMPP

SIP, TCSPI SIP

Logical servers shown – maybe combined physicallydepending on user workload




IBM Sametime System Console

SametimePresence/IM

SametimeClassic

Meetings

Sametime

New Meetings

SametimeMedia

Server

Sametime

Advanced

D o m i n o

W e b S p h e r e

DB2

LDAP

SametimeProxy

S a m e t i m e S y s t e m C o n s o l e

● Manage prerequisites.

– System console manages all needed info for prerequisite components

– No install/reinstall of IBM DB2® (for example) for each separate offering

● Centralize configuration.

– Setup & testing of things like LDAP centralized ina single location, instead of various wizards indifferent installers

● Facilitate deployment planning.

– Mechanism to plan the Sametime server deployment

– Installation of server nodes is simpler, as theshared configuration already exists. Server installers are “headless”, and need no input

from user

● Single point of action for administrative tasks

– Example: Policies are managed from a singleplace for all components






● Architecture of a IBM Sametime 8.5.2 Edge deployment


Agenda


http://slidepdf.com/reader/full/installing-sametime852-from-zero-to-hero-part2-edge-component 7/4087 © 2010 IBM CorporationSocial Business

IBM Sametime 8.5.2 Prerequisites

● IBM Sametime 8.5.2 Community MUX Server requires● IBM Sametime Community Server (Version >= 7.5.1)

●

IBM Sametime 8.5.2 SIP Edge Proxy● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM Sametime 8.5.2 Mdia Manager

● IBM Sametime 8.5.2 Meeting HTTP Proxy● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM Sametime 8.5.2 Meeting Server

●

IBM Sametime 8.5.2 TURN Server requires● IBM Sametime 8.5.2 Media Manager

● IBM Sametime 8.5.2 Gateway Server requires● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM DB2 9.7 or 9.5 FP1

● LDAP directory server (Supported IBM® Lotus® Domino® Directory LDAP, Microsoft®

Active Directory, IBM Tivoli® Directory Server, SunOne® iPlanet®, Novell®eDirectory®)

● IBM Sametime Community Server (Version >= 8.0.1)


http://slidepdf.com/reader/full/installing-sametime852-from-zero-to-hero-part2-edge-component 8/4088 © 2010 IBM CorporationSocial Business

● IBM Sametime 8.5.2 System Console Server requires● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM DB2 9.7 or 9.5 FP1

● LDAP directory server (Supported IBM® Lotus® Domino® Directory LDAP, Microsoft® Active Directory, IBM Tivoli® Directory Server, SunOne® iPlanet®, Novell®eDirectory®)

● IBM Sametime 8.5.2 Community Server requires● IBM Lotus Domino 8.5.1 or 8.5.2 (32 Bit Version only)

● LDAP directory server

● IBM Sametime 8.5.2 Proxy Server requires● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)


● IBM Sametime 8.5.2 Meeting Server requires● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM DB2 9.5 FP1 (provided automatically via Install)


● IBM Sametime 8.5.2 Media Manager requires● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM Sametime 8.5.2 Community Server


IBM Sametime 8.5.2 Prerequisites (cont.)




IBM Sametime 8.5.2 Prerequisites (cont.)

● IBM Sametime 8.5.2 Advanced Server requires● IBM WebSphere Application Server 7.0.0.15 (provided automatically via Install)

● IBM DB2 9.7 or 9.5 FP1

● LDAP directory server (Supported IBM® Lotus® Domino® Directory LDAP, Microsoft® Active Directory, IBM Tivoli® Directory Server, SunOne® iPlanet®, Novell®eDirectory®)





● Software requirements● Client

● Windows XP (SP2), XP Tablet, Vista and Windows 7 – 32 and 64 bit

● MAC OS X 10.6.2 x86-64 and future OS fix packs● RHEL 5.0 Update 4 Desktop Edition x86-32 and future OS fix packs

● SLED 10.0 SP3 and 11.0 SP1 32 and 64 bit and future OS fix packs

● Ubuntu 10.04 LTS x85-32 and future OS fix packs

● Server

● Windows Server 2003/2008 - 32 and 64 bit (including R2)

●

Linux (RHEL, SLES) - 32 and 64 bit● AIX 5.3/6.1

● i5/OS 5.4, 6.1

● Solaris 10

● ESX and ESXi 4.0, MS Hyper-V R2

● Browsers

● Microsoft® Internet Explorer 6.x, 7.x, 8.0 (Windows)

● Firefox 3.5 and 3.6 (Windows, Mac, Linux)

● Safari 5.0 (Mac)

● Other

● Domino 8.5.1/8.5.2 for Community Server / 'Classic' meetings

● WebSphere Application Server 7 for new servers and gateway (included)

● DB2 9.7 for new servers and gateway (included)

IBM Sametime 8.5.2 Prerequisites (continued)




● Software requirements● For WEB A/V

● Microsoft® Internet Explorer 6.x(!!), 7.x, 8.0 (Windows)

●

Firefox 3.5 and 3.6 (Windows, Mac)

SPECIAL NOTE:

Microsoft Internet Explorer 9, Apple Safari and Google Chrome are

not supported with the Sametime Audio/Video Browser Plugin in

this actual Sametime Version 8.5.2.

We do not support any Linux based OS now for Browser A/V.

Microsoft Internet Explorer 6 should work and is officially

supported. But it is not recommended to use this version becauseit can cause issues when several parallel connections needs to be

established with the meeting server.

IBM Sametime 8.5.2 Prerequisites (continued)




Other requirements

● Make sure that all servers you want to use can be resolved in DNS.

●

If DNS is not available then list all full qualified server names and IP addressesfrom all servers in the hosts file and publish this file to all servers.

● The Media Manager Server does not work when installing with a DNS alias. Youmust configure the full qualified machine host name (including domain part)and use this for the installation. This name does not need to be configuredanywhere else and the client does not see it.

● If you use Windows 2008 as Operating System, then you need to start allinstallations and configurations in „Administrative mode“.

● You need a LDAP Server hosting your user base. This can be a Domino LDAP or Microsoft Active Directory or any other supported V3 LDAP.

● The Sametime gateway requires a public, not NATed IP address. NAT does notwork with SIP traffic (specially when using TLS encryption) because the SIPpackages contain the sending IP address inside. Then the receiver refuses theSIP package coming from another address then the one inside the package.




Required files for a deployment on Windows

For a Windows installation of the Edge components you need to download these filesfrom Passport Advantage:

CZYD7ML.zip IBM Sametime Community Server StandardCZYE0ML.zip IBM Sametime Meeting Server CZYF0ML.zip IBM Sametime Media Manager Server CZYF9ML.exe IBM Sametime GatewayCZYA0ML.zip IBM Sametime WebSphere Application Server CZYH1ML.zip IBM Sametime WebSphere Application Server iFixes

Create a directory, for example “C:\Install ”, on the servers where you want to install.Then unpack the downloaded files into this directory. Just unpack the files required for your deployment architecture on the particular server.

If you run the CZYF9ML.exe, create a subdirectory “C:\Install\SametimeGateway ” to

unpack the file.

When unpacked the CZYH1ML.zip file go into the subdirectory“C:\Install\SametimeWASiFixes\WebSphereUPDI ” and unzip the update installer for your used operating system.






●

Architecture of a IBM Sametime 8.5.2 Edge deployment


Agenda




IBM Sametime 8.5.2 - Our pilot recommendation

Compared with the last version of this document installing IBM LotusSametime 8.5.1 (from Lotusphere 2011), we have changed again our

recommendation for a pilot deployment.The reason for the change is the availability of new features ininstallation methods as well as our increased experience and manysuccessful installations using this method in the last months.

The most Edge components described in this part 2 can be installedon one single box in the DMZ because all of them use different portsfor communication. Only the Sametime Gateway requires a separatebox because it uses the SIP Protocol and requires a non NATedpublic IP address. The Sametime Gateway is optional and notrequired for the other Edge components to work properly.

It is important to have the full environment described in the Part 1 of this documentation up and running before starting the Edgecomponents installation. The Sametime Advanced part is notrequired for this installation.




IBM Sametime 8.5.2 Edge – our pilot deployment

DB2 9.5

Server Sametime

System

Console

Sametime

Meeting

Server

webchat.renovations.com

192.168.30.30

Sametime

Proxy Server

meeting.renovations.com

192.168.30.10

Sametime

Media

Manager

sametime.renovations.com

192.168.30.10

edge.renovations.com

192.168.30.50 192.168.40.40

Port Forwardings:

80 TCP

1533 TCP

5061 TCP

5081 TCP

3478 UDP

to 192.168.40.40

DNS entries:

sametime.renovations.com

meeting.renovations.com

chat.renovations.com

webchat.renovations.com

edge.renovations.compointing to 192.168.0.1

STMux

SIP

Edge

Proxy

WAS

HTTP

Proxy

TURN

Server

Active

Directory

LDAP

ldap.renovations.com

192.168.30.99

gateway.renovations.com

192.168.30.60

gateway.renovations.com

192.168.0.60

192.168.0.1

Sametime

Community

Server

chat.renovations.com

192.168.30.20

Sametime

Gateway

Server




● 1 Server for the IBM Sametime 8.5.2 Community MUX, IBM Sametime 8.5.2Meeting HTTP Proxy, IBM Sametime 8.5.2 SIP Edge Proxy, IBM Sametime 8.5.2TURN Server

Quad CPU, 8GB RAM or more, 100GB disk space or more, 64 Bit OS1 GBit Network Interface with 2 IP addresses (internal and external).

● 1 Server for the IBM Sametime 8.5.2 Gateway Server Dual CPU, 4GB RAM or more, 50GB disk space or more, 64 Bit OS1 GBit Network Interface with 2 IP addresses (internal and external but notNATed).

● Various client endpoints

Hardware required for this Pilot Example Deployment

With such a configuration you can host up to● 300 concurrent Meeting Participants *● 5.000 concurrent Sametime Clients *● 150 concurrent Media Streams *● 1500 concurrent Proxy web client users *

* Ask you IBM representative for more detailed sizing information in a definedenvironment




Special IP configuration for the WebSphere based Server

For this Edge environment it is required to have the same FQ Hostnames that you use in the internal network (see Part 1 of this

documentation) be configured in the public DNS pointing to the publicIP address of the server machine in the DMZ hosting the Edgecomponents. This means splitted DNS configuration is required.

Host Name: edge.renovations.com Alias Names: sametime.renovations.com

meeting.renovations.comwebchat.renovations.comchat.renovations.com

Public IP: 192.168.0.1 (NATed to the DMZ IP)DMZ IP: 192.168.40.40

Local address in the Intranet:Host Name: edge.renovations.comIP: 192.168.30.50




Special IP configuration for the WebSphere based Server (cont)

For the Sametime Gateway Server a not NATed public IP address isrequired. Best practice is to have a splited DNS configuration.

Public address in the Internet:Host Name: gateway.renovations.comPublic IP: 192.168.0.60 (not NATed)

Local address in the Intranet:Host Name: gateway.renovations.comIP: 192.168.30.60




Required technical users for IBM Sametime 8.5.2

IBM Sametime requires some technical users for components tocommunicate in an authenticated mode. All of this users should beconfigured so that the password never expires and never needs to be

changed.

db2adminThis user is created during installation of the DB2 server in theOperating System. Do not create this user in advance.

It is the user for all IBM Sametime related components using DB2 toaccess their databases. Be sure to match the password policyrequirements of the OS.

wasadminThis is the user to access the IBM WebSphere components and to

administer the system. This user must not exist in your LDAP directory.It is created during WebSphere installation in a local file repository. Youcan use the same user name and password for all components (makesit easier) or different names and passwords. But again, it does not workwhen this user exists in the LDAP.




Required technical users for IBM Sametime 8.5.2 (cont)

Domino Administrator This user is created during installation of Domino for the IBM SametimeCommunity Server. It is a best practice to not use a existing

administrative account because it is the account with that the IBMSametime System Console communicates with the Community Server.

LDAP Bind User This is a user account in your LDAP directory. This account is used to

connect in authenticated mode to the LDAP server to get all requiredattributes. It is possible to connect anonymously to the LDAP but then itdoes not work with some LDAP systems or the LDAP server requiresspecial configuration to allow anonymous bind.




Starting and stopping the WebSphere based Server

In this pilot deployment we install and configure all WebSphere basedSametime servers using a single Cell. Then it is easy to administer all

of them using just one administrative interface. (The IntegratedSolutions Console of the Sametime System Console)

With Sametime 8.5.1 the services where created automatically for allservers because we used for all of them a separate “Cell Profile”deployment. Now with IBM Sametime 8.5.2 we use the Network

deployment method by implementing all servers as a Primary Nodefederated to the Deployment Manager of the Sametime SystemConsole in just one Cell.

Using this method the installer does not create some requiredcomponents and it does not create some services in the Windowsoperating system. We need to manually create this components andServices. All the required steps are described in detail later this slidedeck.




Audio/Video Plug-In for Browser access to Meeting Rooms

The Meeting Plug-In is shipped with the Media Manager in two formats.

1.) Download VersionThis version files needs to be copied onto a Web Server that can beaccessed by the Browser from the client who want to access the Meetingsusing Audio and Video services. This could be the Domino basedSametime Community Server, the Sametime Proxy Server or the SametimeMeeting Server or any other web server in your organization.

In this pilot deployment recommendation we use the Sametime Proxyserver for this service.

To download and install this Plug-In it is required to have Administrative

access rights on Windows 7. With all other OS the user right is enough

2.) Deployment VersionThis version can be deployed using your preferred deployment tool. Itcontains a MSI installer file. But be careful in some operating systems asWindows 7, it is required to install this version with administrative rights.






●

Architecture of a IBM Sametime 8.5.2 Edge deployment


Agenda




The 25 steps to deploy a Sametime 8.5.2 EDGE environment

1.Enable Trust for the Community Mux in the Sametime CommunityServer

2.Install the Sametime Community Mux

3.Configure the Community Mux in the Sametime System Console

4.Install the SIP EDGE Proxy without the Sametime System Console

5.Configure the SIP Edge Proxy

6.Post Install Tasks

7.Create a Deployment Plan for the Sametime Meeting HTTP Proxy8.Install the Sametime Meeting HTTP Proxy

9.Run the guided activity to add the Sametime Meeting HTTP Proxy tothe Meeting Cluster

10.Remove the Sametime Meeting Server on the Edge Server

11.Create the WebSphere Meeting Http Proxy on the Edge Server 12.Post Install tasks

13.Install the TURN Server

14.Configure the TURN Server and enable NAT Traversal

15.Test all the Edge components




STEP ONE: Enable Trust for the Community MUX in theSametime Community Server

Summary

A Sametime Community Server only accepts connections from a Community Services

multiplexer that is listed in the "CommunityTrustedIps" field of a"CommunityConnectivity" document to prevent an unauthorized machine fromconnecting to the Sametime community server.

This can be configured directly in the “STCONFIG.NSF” Database -“CommunityConnectivity” Document, or – and this is now much easier – in theSametime System Console. This is the way we want to configure this part.




Enter the URL „http:// sametime.renovations.com:8700/admin“.

The WebSphere Application Server Administrative interface (the Integrated SolutionsConsole ISC) is always secured by SSL. Therefore you will be redirected to HTTPS and theport 8701 automatically. You are prompted to accept the default certificate. For differentbrowsers the procedure to accept this IBM signed certificate is different.

You can use the direct URL: „https://sametime.renovations.com:8701/ibm/console“.

http://meeting.renovations.com:8700/admin











Enter the WebSphere Application Server Administrative User name and its password.We use „wasadmin“. Then click the „Log in“ button to continue.




You have now reached the IBM Lotus Sametime System Console.




Click on “Sametime System Console”, then on “Sametime Servers” and then on“Sametime Community Servers”.




Click your “Chat Server ” now.




Go to the bottom of the page and enter the IP address of your Edge server that hosts your Sametime Community MUX. Then click the “Add” button




The IP address is now added. Click the “OK” button to save the setting into theSametime Community Server configuration.




Restart your Sametime Community Server to apply the trust settings. Be aware to use this“restart server ” console command only in your test environment. On a production server this won't work because the restart is often faster then stopping all 41 Sametime server tasks. The complete restart can take up to 5 minutes. Wait until all 41 ST... tasks appear inyour Task Manager.




STEP TWO: Install the Sametime Community MUX

Summary

This step installs theIBM Sametime 8.5.2 Community MUX.

We like to use a CMD command line window to enter some of the commandsand start the installers. For that we have created a short cut in our fast startsection.You can use the Windows Explorer as well to navigate to the destinationdirectory and double click the installation file (setupwin32.exe)




Enter the command “cd \Install\CommunityMux ” and press the “Enter ” key.

Enter the command “setupwin32.exe” and press the “Enter ” key.




My Operating System was set to German language. But I want to use the Englishlanguage (default) for the installation. Just click the “OK” button.




Now click the “Next” button to continue.




Accept the terms in the license agreement and click the “Next” button to continue




Remove “Program Files\ ” and click the “Next” button to continue

We recommend to use path names without spaces (as some scripts may require this) andalso shorten the path name so that the typical limits of some operating systems andapplications for path + file name length are avoided.




Enter the full qualified host name of your community Server. We use“chat.renovations.com”. Then click the “Next” button to continue.




Click the “Install” button to install the Community MUX.




The Sametime Community MUX is now installing. This step takes approximately 1 to 2minutes.




Important to know...Consider the requirements of the community server multiplexer machine before

installing it.

* community server multiplexer installation files are available for Windows®, AIX®,Linux®, and Solaris. A stand-alone community server multiplexer cannot beinstalled on IBM® i. However, Sametime® on IBM i supports the use of a stand-alone multiplexer installed on a Windows system.

* The minimum system requirements for the community server multiplexer machine are the same as the system requirements for the core Sametimecommunity server.

* A machine that meets the minimum system requirements should be able tohandle approximately 20,000 simultaneous client connections.

* Testing indicates that machines with dual 1133 MHz CPUs and 2 GB of RAMcan handle approximately 30,000 simultaneous client connections.

* TCP/IP connectivity must be available between the community server multiplexer machine and the Sametime community server. Port 1516 is the default port for the connection from the community server multiplexer machine to the SametimeCommunity Server.




When the installation has finished successfully, click the „Finish“ button to close theInstaller.




Set the preferences of the Community Mux “ST Mux” service to start and stopautomatic with the Operating System. Then start the service.




The Community Mux is now setup to start and stop automatic with the Operating System,and it is started.




Install a Sametime Connect client in the public network and connect to your SametimeCommunity Mux server. In the public network this should be the same address as inyour local network “chat.renovations.com”. The Sametime Community Mux forwardsyour connection to the internal Sametime Community Server. Login with a user in your

directory to see that the Mux works.




Another way to test the functionality and connectivity of your Sametime Community Mux isto enter the command “netstat -an” in a CMD line window. There you should see the STMux is listening on ports 1533 and 8082. There are established connections to your Community Server (IP 192.168.30.20) on port 1516 and from your Sametime Client (IP

192.168.0.9) on port 1533.




STEP THREE: Configure the Community MUX in the

Sametime System ConsoleSummary

Use the IBM® Sametime System Console to connect to a Sametime

Community Mux and validate its settings.




Click on “Sametime System Console” then on “Sametime Prerequisites” and then on“Connect to Sametime Community Mux Servers”.




Enter the host name of your Sametime Community Mux server (we use“edge.renovations.com”) and click the “Save” button.

Click the “Add” button




The Sametime Community Mux Server is now successfully added to your SametimeSystem Console.




STEP FOUR: Install the SIP EDGE Proxy without the

Sametime System Console

Summary

The IBM® Lotus® SIP Edge Proxy is a SIP Application installed over a

WAS server. Since there is no specific installer for the IBM Lotus SIP

Edge Proxy server, you can use the SIP Proxy/Registrar installer and then

perform manual steps in order to adjust the environment to the Lotus SIP

Edge Proxy.




Navigate to the „\Install\SametimeMediaManager “ directory and enter thecommand „Launchpad “




The Sametime 8.5.2 Launchpad opens. Click the „Install IBM LotusSametime Media Manager “ link on the left side.




Now click the link „Launch IBM Lotus Sametime Media Manager 8.5.2Installation“




The Installation Manager is now loading.




Click the “Next” button to continue.




Accept the terms in the license agreement and click the “Next” button to continue




Remove “Program Files\ ” and click the “Next” button to continue

We recommend to use path names without spaces (as some scripts may require this) andalso shorten the path name so that the typical limits of some operating systems andapplications for path + file name length are avoided.




Click the “Install” button to install the Installation Manager.




The installation Manager is now installing




If you are using Windows 2008 R2 or Windows 2003 R2 then it can be possible thatyou run into a JAVA heap memory overflow. To prevent this issue change a parameter inThe “IBMIM.INI” configuration file of the Sametime Install Manager. See the next 2 slideshow to do this. And then click the „Restart Installation Manager “ button to continue.




In the File Explorer navigate to your Install Manager's eclipse directory “C:\IBM\InstallManager\eclipse”. Then open the configuration file “IBMIM.ini” in notepad.




Add he parameter “-Xmx1024m” at the end. Then save and close the file.This parameter is case sensitive.Now click the “Restart Installation Manager ” button in your Install Manager screento continue your Installation.




Click the „Install“ icon to start the installation.




Select „IBM Sametime Media Manager “ and „Version 8.5.2“. Then click the „Next“button to continue.




Accept the terms in the license agreement and click the „Next“ button to continue.




Enter the correct path (remove „Program Files\ “) and click the „Next“ button to continue.




Select “IBM Sametime Media Server 8.5.2” but deselect “Use Lotus SametimeSystem Console to Install”. Then click the „Next“ button to continue.




With IBM Sametime 8.5.2 it is possible to install Sametime on top of an existingWebSphere 7.0.0.15 Server. We don't want to do this in this pilot deployment.Just click “Next” to continue.




In this screen you need to select the WebSphere deployment method. We use“Standalone” for this installation. And you need to define the WebSphere ApplicationServer administrative user. You need to authenticate with this user to access theIntegrated Solutions Console of your Media Manager Server. It is important that this

user does not exist in your LDAP. In this example we use the standard „wasadmin“.Enter the password twice and click the „Next“ button to continue.




The host names for the SIP Proxy/Registrar, Conference Manager, Packet Switcher,and Community Server must be all different. The Proxy/Registrar host name should bethe local host, and the others should be different from the Proxy/Registrar host nameand also from each other. We use in this example:

* Conference Manager host name: “sametime.renovations.com”* Proxy/Registrar host name: “edge.renovations.com”* Packet Switcher host name: “meeting.renovations.com”

For the Community Server we use our chat server “chat.renovations.com”Then click the „Validate“ button to continue.




If the connection to the different hosts was successful, then you should see that thetext in the button has changed to „Validated“.Now click the „Next“ button to continue.




Select the checkbox “Configure LDAP after the installation” and click the “Next” button.




Click the „Install“ button to install the Sametime Media Manager Server.




The Installation Manager now installs the Sametime Media Manager. Thisstep can take approximately 30 to 45 Minutes.




Important to know...

It should be possible to do this installation with every other Sametime component thatis WebSphere based to just have the WebSphere binaries and the Cell profile structureon the box. But we need to implement a special application - the Edge Proxy

Application. This application is shipped in the Media Manager install package. So it iseasier to use this installer for this installation.

If you plan to implement all Edge components on one box, like described in this

document, then you need to install the SIP Edge Proxy component first – before theMeeting Http Edge Proxy. The reason is the required configuration steps for theMeeting Http Edge Proxy disallow the complete Cell installation of the SIP Edge Proxy.

Th I t ll fi t k th W bS h A li ti S i t ll fil




The Installer first unpacks the WebSphere Application Server install files

Then he installs the WebSphere Application Server 7.0.0.3 binaries

Then he creates the WebSphere profiles

Then he installs the Update Installer

Then he installs the Update to WebSphere 7.0.0.15

Then he install the application and configures everything

In this directory is the log file where the installer logs its progress The file increases up




Director on Windows 2008: C:\Users\All Users\IBM\Installation Manager\logs\ant

In this directory is the log file where the installer logs its progress. The file increases upto approximately 302 KBytes.

The last step is to configure the services and some post install tasks.

The Sametime Media Manager server has installed successfully Click the Finish“




The Sametime Media Manager server has installed successfully. Click the „Finishbutton and close the Installation Manager and the Launchpad.




STEP FIVE: Configure the SIP Edge Proxy

Summary

The SIP Edge Proxy needs to be configured. Several steps are required to

complete this configuration: A)Login to the new Media Manager integrated Solutions Console

B)Uninstall all Media manager applications

C)Install the new SIP Edge Proxy application

D)Configure the SIP Ports

E)Modify the SIP Edge Proxy Settings in the edge-proxy.xml file

F)Replace the default certificate

G)Exchange certificates between the SIP Edge Proxy and the SIP Proxy

Registrar

Enter the URL http://edge renovations com:8800/admin“

A) Login to the new Media Manager integrated Solutions Console
















Enter the URL „http:// edge.renovations.com:8 8 00/admin .

The WebSphere Application Server Administrative interface (theIntegrated Solutions Console ISC) isalways secured by SSL. Thereforeyou will be redirected to HTTPS andthe port 8701 automatically. You areprompted to accept the default

certificate. For different browsers theprocedure to accept this IBM signedcertificate is different.

You can use the direct URL:„https://sametime.renovations.com:8 801/ibm/console“.

Then click the “Add Exception” button.
















The IBM signed certificate is not trusted by the browser. Click the „Get Certificate“button to accept the certificate by clicking the “Confirm Security Exception Button”.(this dialog is different using other browsers)




Enter the WebSphere Application Server Administrative User name and its password.We use „wasadmin“. Then click the „Log in“ button to continue.




You have now reached the IBM WebSphere Integrated Solutions Console.

Click on “Applications” - “Application Types” and then on “WebSphere

B) Uninstall all Media manager applications




Click on Applications - Application Types and then on WebSphereenterprise applications”.

Select the installed applications “ConferenceFocus” and “SSCConnect ear” If other




Select the installed applications ConferenceFocus and SSCConnect.ear . If other applications are installed like “SIP Proxy”, “SIP Registrar ” or “Packet Switch”, selectthem as well and then click the “Uninstall” button.

Cli k h “OK” b i




Click the “OK” button to continue.

Y t t th h d li k th “ ” li k




Yes we want to save the changes and click the “save” link.

Th li ti d l t d N t i t i t ll th SIP Ed P li ti Cli k

C) Install the new SIP Edge Proxy application




The applications are now deleted. Next is to install the SIP Edge Proxy application. Clickthe “Install” button.

If b th Ed hi “L l Fil S t ” If




If you run your browser on the Edge machine, you can use “Local File System”. If youuse your Browser from your workstation, then the install files are “remote”. So use the“Remote file system” and click the “Browse” button.

Select the directory where you have unpacked the Media Manager install files And from




Select the directory where you have unpacked the Media Manager install files. And fromthere the subdirectory “SIPEdgeProxy”. Then select the “EdgeProxyAppl.ear ” file andclick the “OK” button.






Click the “Next” button to continue




Click the Next button to continue.






Click the “Finish” button to continue.




Click the Finish button to continue.

Click the “save” link to continue.




The EdgeProxyAppl is now installed successfully




The EdgeProxyAppl is now installed successfully.

To set up ports for the IBM® Lotus® SIP Edge Proxy, an administrator needs to determine

D) Configure the SIP Ports




p p g y,the SIP ports used for the SIP Proxy/Registrar and ensure that the Lotus SIP Edge Proxylistens on these same ports.

To perform this configuration step we open a new browser window and connect to our Sametime System Console – Integrated Solutions Console. Enter the URL“http://sametime.renovations.com:8700/admin ”. If the console is already open in your browser, then switch to this browser window.

Click on “Servers” - “Server Types” and then on “WebSphere application servers”

http://sametime.renovations.com:8700/admin







Click on Servers Server Types and then on WebSphere application servers .

Click on “STMediaServer”




Click on STMediaServer .

On the right side under “Communications” click on “Ports”.




Record the ports that are used for the “SIP_ProxyRegHOST” and “SIP_ProxyReg_SECURE”.




Here we can find ports “5080” and “5081”.

Go back to the Integrated Solutions Console of your Edge Media Manager installation.




Now click on “Servers” -“Server Types” and then on

“WebSphere applicationservers”.

Click on “STMediaServer ”.




On the right side under “Communications” click on “Ports”.




Click on “SIP_ProxyRegHOST”




_ y g

Enter the Port “5062 ” and click the “OK” button.




Click on “SIP_ProxyReg_SECURE”




Enter the Port “5063” and click the “OK” button




Click on “SIP_DEFAULTHOST”




Enter the Port “5080 ” and click the “OK” button.




Click on “SIP_DEFAULTHOST_SECURE”




Enter the Port “5081” and click the “OK” button.




Click the “Save” link to save the last changes.




Next is to add the ports to the virtual hosts table. Click on “Environment” and then on“Vi t l h t ”




“Virtual hosts”.

Click on “default_host”




Click on “Host Aliases”.




Click the “New” button to add a new entry.




Leave the Host Name as it is and enter the Port “5080 ” in the Port field. Then click the“OK” button




OK button.

To add an other entry click the “New” button again.




Enter the Port “5081” and click the “OK” button.




We have changed the SIP_ProxyRegHOST and SIP_ProxyReg_SECURE ports. So weneed to map this changes here as well. Click the “*” near the Port “5060”.




Change the port to “5062 ” and click the “OK” button.




Now click the “*” near the port “5061”.




Change the port to “5063” and click the “OK” button.



132© 2010 IBM CorporationSocial Business

Click the “Save” link to save the last changes.



133© 2010 IBM CorporationSocial Business

We have now successfully configured the host aliases for our SIP Edge Proxyserver.




server.

Now we need to make sure that the setting “Use available authentication data when anunprotected URI is accessed” is switched off. To check that click on “Security” - “Global




unprotected URI is accessed is switched off. To check that click on Security GlobalSecurity”.

Under “Web and SIP security” click on “General settings”.




Confirm that the check box near “Use available authentication data when anunprotected URI is accessed” is switched off.




p

Now we need to confirm 2 more settings in the Server configuration for our SIP EdgeProxy Server. Click on “Servers” - “Server Types” and then on “WebSphere application




y yp p ppservers”

Click the “STMediaServer ” application server.




Under “SIP Container Settings” click on “SIP container ”.




Now click on “Custom properties”




Confirm that the setting “com.ibm.ws.sip.sent.by.host” contains the full qualified hostname of your Edge Proxy Server machine. If this is wrong, click on




“com.ibm.ws.sip.sent.by.host” and change the host name. Then check that aproperty “com.ibm.ws.sip.security.trusted.iplist ” does not exist. If it exists mark it

and click the “Delete” button. Then click the “Save” link in the next screen.

E) Modify the SIP Edge Proxy Settings in the edge-proxy.xml file

Next step is to configure the “edge-proxy.xml” file and populte it to the server node.Open a windows File explorer and navigate to the directory:




“C:\IBM\WebSphere\AppServer\profiles\STMSDMgrProfile\config\cells\edgeMediaCell\applications\EdgeProxyAppl.ear\deployments\EdgeProxyAppl\EdgeProxyWeb.war\WEB-INF”. Then open the file “edge-proxy.xml” with notepad or better with wordpad.

The authoritativeProxy section contains the hostname, port, and transport of the SIPProxy/Registrar:




Proxy/Registrar:

* Specify the SIP port used for TCP.

* Specify the SIP port used for TLS.

The edgeProxy section contains the hostname, port, and transport of the Lotus SIP EdgeProxy:

* Specify the SIP port used for TCP.* Specify the SIP port used for TLS.

The authProxySourceAddr section specifies the address of the SIP Proxy/Registrar.When the Lotus SIP Edge Proxy receives stand-alone or initial requests, it determines theremote address from which the request was received. If the remote address does notmatch the SIP Proxy/Registrar address, the request is sent to the SIP Proxy/Registrar for further processing. Supported values: IP address, regular expression that matches theSIP Proxy/Registrar address (for example, "10.10.102.14 | 10.10.102.16").

We use in our example:authProxyHost=”sametime.renovations,com”

thP P t ”5081”




authProxyPort=”5081”authProxyTransport=”TLS ”authProxySourceAddr=”192.168.30.10 ”edgeProxyHost=”edge.renovations.com”edgeProxyPort=”5081”edgeProxyTransport=”TLS ”

Now save the file and close your wordpad editor.

Next is to copy the edited file to the application server configuration in the DeploymentManager. Open a second File explorer and navigate to the directory:“C \IBM\W bS h \A S \ fil \STMSDM P fil \ fi \ ll \ d M di C ll




“C:\IBM\WebSphere\AppServer\profiles\STMSDMgrProfile\config\cells\edgeMediaCell \nodes\edgeMediaNode\servers\STMediaServer ”.

Now copy the file. (be sure to copy and not move the file)




Next is to synchronize the file to the node. In your Edge Integrated Solutions Consoleclick on “System administration” - “Nodes”.




click on System administration Nodes .

Select the “edgeMediaNode” and click the “Full Resynchronize” button.




F) Replace the default certificate

To avoid the problem of IBM® Sametime® clients rejecting the certificate issued for theIBM Lotus® Edge Proxy server, an administrator needs to replace the default certificate onthe Lotus SIP Edge Proxy so that it contains the SIP Proxy/Registrar's FQDN




the Lotus SIP Edge Proxy so that it contains the SIP Proxy/Registrar s FQDN.These instructions are for the default certificate, which is meant for internalcommunications (not meant to act as a CA). Sametime clients verify that the certificatewas issued for the SIP Proxy/Registrar. In a Lotus SIP Edge Proxy deployment, the clientopens a TLS connection to the Lotus SIP Edge Proxy resulting in the client receiving acertificate issued for the Lotus SIP Edge Proxy server. This certificate will be rejected bythe client.

Click on “Security” and then on“SSL certificate and keymanagement”.

Now click the “Manage endpoint security configurations” link.




Open the “Inbound” tree and click on “edgeMediaCell” and then “edgeMediaNode”




Click the “Manage certificates” button.




Click the “Create” button and then the “Chained Certificate...” menu entry.




This fields are required to continue:




Alias “sip-pr-cn-cert ”

Common name“sametime.renovations.com”

Organization“renovations”

Country or region

“US ”

Then click the “OK” button.

To save the last changes just click the “Save” link.




Now click again the “edgeMediaNode” in the “Inbound” tree.




Click the “Manage certificates” button.




Check mark the “default” certificate and then click the “Replace” button.




In the “Replace with” selection box select the newly generated “sip-pr-cn-cert” certificate.Check mark both check boxes “Delete old certificate after replacement” and “Delete oldsigners”. Then click the “OK” button.




To save the last changes click the “Save” link.




G) Exchange certificates between the SIP Edge Proxy

and the SIP Proxy Registrar

Click “Security” and then on “SSL certificate and key management”.




Now click “Key stores and certificates” on the right side.




Click on “CellDefaultTrustStore”.




On the right side click on “Signer certificates”.




Check the check box near the root certificate (the one with the “root” alias). Then clickthe “Extract” button.




Enter a path to save the certificate. We use “c:\temp\edgeroot.cer ”. Then click the“OK” button.




The certificate was extracted successful. Now you need to copy this certificate file to your Sametime Media Manager box. Best is to copy it there into the “C:\temp” directory.

http://c/temp

http://c/temp

http://c/temp

http://c/temp




We have exported the root certificate in the SIP Edge Server and need to import that intothe Sametime Media Manager. We have copied the file and need to import it next. Go tothe Sametime System Console (which is the Integrated Solutions Console for our




Sametime Media Manager). The Browser window should still be open from a previousstep. But it can be possible that the session is timed out. Then you need to re-authenticate

with your “wasadmin” account.

Click on “Security” and then on “SSL certificate and key management”.




On the right side click on “Key stores and certificates”.




Click the “CellDefaultTrustStore”.




On the right side click on “Signer certificates”.




To import the root certificate from the SIP Edge Proxy server click the “Add” button.




Enter a name for the certificate, we just use “edge_root ”. In the “File name” field enter the path to where you have copied the certificate file and the filename. We use“c:\temp\edgeroot.cer ”. Then click the “OK” button.




Now we need to do the same thing in the opposite direction. Copying the root certificate of our Media Manager to the SIP Edge Proxy. For that we check the check box near the rootcertificate (the one with “root” in the Alias) and then click the “Export” button.




Enter a path and file name to where the certificate should be saved. We use“c:\temp\siproot.cer ”. Then click the “OK” button.




The certificate is now saved. Next is to copy this file from the Media manager to the SIPEdge Proxy box. Best is to copy the file to “c:\temp”.




Go back to the Integrated Solutions Console of your SIP Edge Proxy server. There justclick the “Add” button.




Enter a name for the Media Managers root certificate. We just use “sip_root ”. In the“File name” field enter the path to where you have copied the file and the file name. We just use “c:\temp\siproot.cer ”. Then click the “OK” button.




To save the last changes just click the “Save” link.




Because we did security changes in bot servers it is required to restart the DeploymentManager and all nodes on both servers. Lets start with the Sametime Media Manager Server first.In the Services window select the Deployment Manager (the Service with the “..._DM” at




the end) and click the “Stop service” button. You are asked to stop all services. Click

“ Yes” to really stop all services.

When all services are stopped you should start all services. Start with the SametimeSystem Console, then the Media Manager, then the Meeting Server and at last theProxy Server. This takes a long time and sometimes the services cause into a popupWi d i i ld t b t t d Y i th t d j t it til




Window saying a service could not be started. You can ignore that and just wait until

All services are started.

Another option is to reboot the Operating system of the box. Then you need to wait asWell until all services are started. This really can take some time.We can recommend to check this in your “Task Manager”. Wait until you can see 10Java.exe tasks running and each of them consuming between 170 and 450 MB of RAM.When the CPU usage goes down then the startup of all tasks has finished.

For the SIP Edge Proxy Server box we will do the restart after we configured thepost install tasks.

STEP SIX: Post Install tasks for the Sametime SIP




Summary

This step is to configure automatic stop, startup and dependencies in theWindows Operating System Services.

Edge Proxy

Configure the properties of all 3 task to start automatic.Then restart the Operating System of your SIP Edge Proxy Server.




When the Operating System has restarted, you should see all 3 services as started.




STEP SEVEN: Run the guided activity to configure




Summary

This step is to preconfigure the settings for the Sametime Meeting Edge HTTPProxy Server installation.

g y gthe IBM Sametime Meeting Server deploymentplan for the Meeting Edge HTTP Proxy

Start your browser and enter the URL “http://sametime.renovations.com:8700/admin ” to access the Sametime System Console.








Log in with your “wasadmin” user.

In your Sametime System Console click on „Sametime System Console“ then„Sametime Guided Activities“ and then on „Install Sametime Meeting Server “.




Use the first entry „Create a New Deployment Plan“ and click the „Next“ button.




Enter a name for your Meeting Server Deployment Plan. In this example we use„Meeting Edge“. Then click the „Next“ button to continue.




We want to install the product version „8.5.2“. Click the „Next“ button to continue.




Change to „Secondary Node“ and click the „Next“ button to continue.




Check the “Systemconsole...” and click “Next” to continue.




Enter the full qualified host name of your Sametime Meeting Server. In thisexample we use „edge.renovations.com“. Enter a WebSphere administrativeuser name and its password twice. We just use the standard „wasadmin“




name.

Click the „Next“ button to continue.

Check your settings and then click the „Finish“ button to save the new Deployment Plan.




You have now successfully created a Deployment Plan for the Sametime MeetingEdge Server installation.




The next step is to install the Sametime Meeting Edge Server.

STEP EIGHT: Install the IBM Sametime MeetingS




Summary

In this step you install the Sametime Meeting Server secondary node for theSametime Meeting Edge HTTP Proxy Server using the preconfigured settings inthe deployment plan on the Sametime System Console.

Server

On your Edge Box start a CMD line window and navigate to the Sametime MeetingServer install directory. We do this with the command: „cd \Install\SametimeMeetingServer “. Then start the Launchpad installer with thecommand „launchpad “.




Click the „Install IBM Lotus Sametime Meeting Server “ link.




Click the „Launch IBM Lotus Sametime Meeting Server 8.5.2 Installation“ link.




The Installation Manager is starting loading.




Just click the „Install“ icon to start the Sametime Meeting Server installation.




Check the „IBM Sametime Meetings server “ and „Version 8.5.2“ entries.They are unchecked by default. Then click the „Next“ button.




Accept the terms in the license agreement and click the „Next“ button.




Because we have already installed a WebSphere based Sametime Server on this box,(The Sametime SIP Edge Proxy Server) we can reuse the installed binaries. Theinstaller detects this and checks the „Use the existing package group“. Andtherefore the path is greyed and can not be changed. Click the „Next“ button to




continue.

We want to use the predefined Deployment Plan from the Sametime System Console.Click the „Next“ button to continue.




We don't want to use an other existing WebSphere Application Server installation so we just click the “Next” button.




Enter the Sametime System Console Server information and credentials to authenticate.In our example we use „sametime.renovations.com“ as SSC Server name and„wasadmin“ as the WebSphere Administrative User name. The last field is the hostname where we want to install the Sametime Meeting Server. Here we useedge renovations com“ Then click the Validate“ button to check the connection to




„edge.renovations.com . Then click the „Validate button to check the connection to

the System Console Server.



Select your Sametime Meeting Server Deployment plan that you have created inthe previous step. We use our „Meeting Edge“. Then click the „Next“ button tocontinue.




Control the settings you received from the System Console. Then click the „Next“ button.




To start the installation click the „Install“ button.




The Sametime Meeting Server is now installing. This takes approximately 30 to 45minutes. But because we already have the binaries installed and reuse this data, theinstallation is much shorter. It then takes only 15 to 20 minutes.




Now the installation is in progress....




Important to know...

The Meeting Server can be clustered using the WebSphere Network Deployment. This




can be configured and deployed with the Sametime System Console.The new Sametime Meeting Server consists of two components.- the Meeting Server - the Meeting HTTP Proxy

Clustering means that a meeting room is running only on one server at a time. TheMeeting Proxy servers have the information on witch Meeting Server instance theMeeting Room is running and forward incoming requests to the right server. Meeting

data are stored only in the database. In case of a fail over the Meeting Room will bestarted on another Meeting Server in the cluster immediately.

For external access a separate Sametime Meeting Server in your DMZ is recommendedfor better security.

You have now successfully installed the Sametime Meeting Server. Click the „Finish“ button and exit the Installation Manager and Launchpad.




Click “File” in the menue bar and then “Exit”.




In the Launchpad click again on “Exit”.




Click the “OK” button to close the Launchpad.




Close the CMD line window with the command “exit”.




STEP NINE: Use the Guided Activity in the SametimeSystem Console to federate the new installed




Summary

In this step you create a Meeting cluster, add the new node on your Edge Server to the WebSphere Cell of your Sametime System Console and add it to thecluster.

y

Meeting Server node to the DeploymentManager and cluster it.

In your Sametime System Console click on “Sametime System Console” - “SametimeGuided Activities” and then on “Cluster WebSphere Application Servers”.




We want to cluster our Meeting Server installations. So select “Sametime MeetingServer ” and click the “Next” button.




Enter a name for the cluster. We use “Meeting_Cluster ”. Then click the “Next” button.The cluster name can not contain blank characters.



Click the “Create cluster ” button to create the cluster. This step can take 4 or 5minutes. If the process takes too long and runs into a timeout, then you get a failuremessage here. Wait 2 minutes and click the button “Create cluster” again. Then itworks mostly.




The cluster is now created successfully. Click the “Next” button to continue.




The secondary node is already federated to the cell. Click the “Next” button to continue.




To add the secondary node to the cluster click the “Add to cluster ” button.




The secondary node is now successfully added to the cluster. Click the “Next” button tocontinue.




Now you have successfully clustered the 2 Sametime Meeting Servers. Click the“Finish” button to continue.




STEP TEN: Remove the newly created applicationserver “Meeting Server”.




Summary

In this step you remove the installed meeting server. We only need the nodeinstallation for the Edge HTTP Proxy but we dont need the Server.

In your Sametime System Console – Integrated Solutions Console – click on “Servers” -“Server Types” and then on “WebSphere application servers”.



Crosscheck that you have selected the right one. If yes, then click the “OK” button.




Save the last changes by clicking the “Save” link.




STEP ELEVEN: Create the WebSphere Meeting HTTPEdge Proxy.




Summary

In this step you create a Meeting HTTP Edge Proxy on your Edge Server toforward incomming HTTP requests from Internet clients to your SametimeMeeting and Sametime Proxy servers in your Intranet.This step has to be done in your Sametime System Consoles IntegratedSolutions Console.

Click on “Servers” - “Server Types” and then on “WebSphere proxy servers”.




Click the “New” button to create the new HTTP Proxy server.




Select the node on your edge server “edgeSTMNode1” and enter a name for your EdgeHTTP Proxy Server. We just use “STMeetingHttpEdgeProxy”. Then click the “Next”button to continue.




Uncheck the “SIP” property. In this server we only need HTTP. Then click the “Next”button to continue.




Save the last changes by clicking the “Save” link.




STEP TWELVE: Post Install tasks for the WebSphereMeeting HTTP Edge Proxy.




Summary

In this step you configure the ports used by your HTTP Edge Proxy Server andthe Services for automatic startup with the Operating System.

Click on “Servers” - “Server Types” and then on “WebSphere proxy servers”.




Click the newly created “STMeetingHttpEdgeProxy” server.




On the right side click on “Ports”.




Click the “PROXY_HTTP_ADDRESS”.




Change the Port to “80 ” and click the “OK” button.




Now click the “PROXY_HTTPS_ADDRESS”.




Change the port to “443” and click the “OK” button.




The Installer has installed a service for an server that does not exist anymore. We firstneed to remove that service and then create the services we need.




In a CMD line window navigate to the directory WebSphere binaries directory with thecommand “cd \IBM\WebSphere\AppServer\bin”.




Remove the service with the command: “wasservice -remove STMeetingServer ”.




Confirm that the removal was successful.




To create the right services we need the profile path in the command line.In your file explorer navigate to the directory“C:\IBM\WebSphere\AppServer\profiles\edgeSTMSNProfile1 ”.Copy the link into your dashboard with the “Ctrl-C” keycombination.




Now enter the command to create the service:“wasservice -add STMeetingHttpEdgeProxy -serverName STMeetingHttpEdgeProxy -profilePath C:\IBM\WebSphere\AppServer\profiles\edgeSTMSNProfile1-stopArgs “-username wasadmin -password passw0rd” -encodeParams”.Check that the command was processed successfully.




Now enter the command to create the Nodeagent service:“wasservice -add STMeetingHttpEdgeProxy_NA -serverName nodeagent -profilePath C:\IBM\WebSphere\AppServer\profiles\edgeSTMSNProfile1-stopArgs “-username wasadmin -password passw0rd” -encodeParams”.Check that the command was processed successfully.




Last step is to configure the dependencies between the 2 services. For that enter thecommand:“sc config “IBMWAS70Service – STMeetingHttpEdgeProxy” depend=“IBMWAS70Service – STMeetingHttpEdgeProxy_NA””.Confirm that the command was processed successfully.



When the OS has been restarted after some minutes you should see that all servicesare started succesfully.




STEP THIRTEEN: Install the TURN server.




Summary

In this step you copy the TURN Server files to the Edge server and configure it.

First you need to check that JAVA is installed and in the PATH environment variable. Opena CMD line window and enter the command “ java -version”. If you get back the versioninfo, then all is ok. The JAVA Version should be 1.6 at minimum. Because we have installed2 Websphere parts before, we already have the Java version we need.




If the command “java -version” does not return the JAVA version, then you need to setthe System PATH environment variable correctly first.

Right Click on your “Computer ” and then “Properties”. In the Properties Window click on“Advanced System Settings”




Click the “Environment Variables” Button.




In the “System Variables” part click the “Path” variable and then the “Edit..”button.




At the end of the path add “;C:\IBM\WebSphere\AppServer\java\bin ”. Don'tforget the Semicolon character at the beginning. Then click the “OK” button.




Click “OK” to close the window.




Click “OK” again to close the window. Then close the Control Panel.




In your File Explorer copy the “TURN_Server ” directory from your Media Manager Installpackage to the destination folder you want. We copy the directory to “C:\IBM”.



Configure the TURN Server configuration file with the IP addresses who are used in your environment. In this example we use:turn.local.hostname.ipv4 “192.168.40.40 ”turn.allocation.hostname.ipv4 “192.168.30.50 ”turn.public.hostname.ipv4 “192.168.0.1” And

udp.turn.port “3478 ”Th d l th fil




Then save and close the file.

To start the TURN server open a CMD line window and navigate to the TURN Server directory with the command “cd \IBM\TURN_Server ”. Then start the turn server with thecommand “run”.




The TURN server is now started and listens on the required ports.




STEP FOURTEEN: Configure the TURN server.




Summary

In this step you configure your Sametime Media Manager to support NAT

Traversal using the TURN server.

On your Sametime Media Manager Machine open a File Explorer and navigate to thedirectory:“C:\IBM\WebSphere\AppServer\profiles\STSCDMgrProfile\config\cells\sametimeSSCCell\nodes\sametimeSTMSNode1\servers\STMediaServer ”.Here open the file “stavconfig.xml” using your Wordpad. (we need to edit the file so abrowser wont work)




Find the setting “NATTraversalEnabled” and set its value to “true”. Then save andclose the file.




To synchronize this change to the Sametime Media Manager go to your SametimeSystem Console – Integrated Solutions Console and click on “System Administration”and then on “Nodes”.




Check all nodes and click the “Full Resynchronize” button.




Then click on “Sametime System Console” - “Sametime Servers” and then on“Sametime Media Managers”.




Click your “Media Manager ”.




Go down to the “NAT Traversal” settings. In the “UDP host name” field enter the edgeserver host name “edge.renovations.com”. Then click the “OK” button.




To apply the changes just restart the Sametime Media Manager by restarting the“STMediaServer” service.




Next is to implement a Service to start and stop the TURN server automatic during OSstartup and to run the TURN server in the background.

Stop your running TURN server now by clicking the “Ctrl-C” key combination. Then just hitthe “ Y” key and then Enter.




For that you need a small tool called “SRVANY.EXE”. This tool is in the MicrosoftWindows Resource Kit for the Windows Server 2003. Take a Windows 2003 Server,download the resource kit from Microsoft and install the kit. Then copy this file from theresource kit to your Windows OS into the directory “C:\Windows\system32”. (This canbe Windows 2003 or 2008, 32 or 64bit. It works in all versions)




To create the service open a CMD Windows in Administrator mode and enter the command:“sc create “IBM Sametime TURN Server” binPath= “C:\Windows\System32\srvany.exe”

Don't forget the space between the “binPath=” and the path.




Now you need to configure the service. This can be done only in the Registry Editor. Openyour regedit and navigate to the key of your new service: “HKEY_LOCAL_MACHINE” -“SYSTEM” - “CurrentControlSet” - “Services” - “IBM Sametime TURN Server ”




Create a new key by clicking “Edit” - “New” - “Key”.




Give the new Key a name. Enter just “Parameters”.




Next is to enter the Parameter String. For that a String Value field is required. Click on“Edit” - “New” - “String Value”




Enter the name for your new String Value. Enter “ Application” here.




Now double Click into the “Application” String Value to enter the content string.




Enter the string: “ java.exe-Djava.util.logging.config.file=c:\IBM\turn_server\logging.properties -cpc:\IBM\turn_server\TurnServer.jar;c:\IBM\turn_server\ICECommon.jar com.ibm.turn.server.TurnServer ”




Be sure that you have entered the string correctly.



Your Service is now ready to use. Just configure it to start Automatic and then start it.




Your TURN Server Service is now configured and started.




STEP FIFTEEN: Test all Edge components.




Summary

In this step you use your Browser and a Sametime Connect client to access your

Sametime System from the Internet thrugh a NAT traversal firewall.

Install a Sametime Connect client in thepublic network and connect it to“chat.renovations.com” for communityservices. Tthis DNS host name should berouted to your Edge server in your publicDNS.Login with a user in your LDAP. Youshould see that you are online and that




should see that you are online and thatyou have connectivity to your MediaManager when the Audio and Video iconsappear.

Configure the Sametime meeting server “meeting.renovations.com” to accessyour meeting rooms. This host nameshould point to your Edge server as well inyour public DNS.

If you attend a meeting room with someone in your Intranet you should see Audio and Videoworks.




Next test is to access the URL “http://meeting.renovations.com” in your browser.

You should be redirected to the “../stmeetings” page.

http://meeting.renovations.com/







Next test is to access the URL “http://webchat.renovations.com” in your browser.

You should be redirected to the “../stwebclient/index.jsp” page.












STEP SIXTEEN: Create the DB2 Database for theSametime Gateway.




Summary

In this step you create the DB2 Database for the Sametime Gateway.

You need to copy the DB2 Database creation script “createDb.sql” from the Install directory“C:\Install\SametimeGateway\database\db2 ” to your DB2 server machine. We copy it to“D:\Install” on this box..

http://d/Install

http://d/Install

http://d/Install

http://d/Install




Open a CMD line window, navigate to the “D:\Install” directory and enter the command“db2cmd”.

http://c/Install

http://c/Install

http://c/Install

http://c/Install




A new CMD line window opens. This window now has the environment to run the DB2Database installation script. Enter the command “db2 -tvf createDb.sql ”.




It takes some time until the database is created and configured. Confirm that you can seeall commands completed successfully.




STEP SEVENTEEN: Create the DB2 Prerequisite inthe Sametime System Console for the Sametime

Gateway database.




Summary

In this step you create a DB2 Prerequisite for your Sametime Gateway DB2

database to be used in the Sametime System Console.

In the Sametime System Console click on “Sametime System Console” - “SametimePrerequisites” and then on “Connect to DB2 Databases”.




Click the “Add” button to add your new database.




Enter the data in the form:Host name: “sametime.renovations.com”Database name: “stGW ” Application user ID: “db2admin” Application password: password of your db2admin user Then click the “Finish” button.



STEP EIGHTEEN: Enable Trust for the SametimeGateway in the Sametime Community Server.




Summary

In this step you enable your Sametime Gateway to connect to your Sametime

Community Server.

Open the Sametime System Console, and navigate to the Sametime CommunityServer by clicking on „Sametime System Console“ then „Sametime Servers“ andthen „Sametime Community Servers“.




Click the link to your Community Server. We click on „Chat Server “ because this isour name for the Community Server Deployment Plan.




Enter the IP address of the Server you want to allow connecting to the SametimeCommunity Server. In this example we use the IP „192.168.30.60 “ for the SametimeGateway Server and then click the “Add” Button.




We have now added the required IP addresses for the Sametime Gateway. Now clickthe “OK” button to continue.




Now restart the Sametime Community Server by entering the command „restart server “in the Domino Console window. Never use this command in a production Sametimeserver because it can happen that not all Sametime tasks are stopped before thedomino server restarts. This can cause massive problems for starting the SametimeServices. Stop your Domino Server using the “Quit ” command or by stopping the“Lotus Domino Service”. Wait until all ST... Tasks disappeared in your TaskManager.

Then restart the Domino Server again.




It takes up to 5 Minutes until the Sametime Community Server is completelyrestarted and all 41 Sametime tasks are again active.

STEP NINETEEN: Install the Sametime Gateway.




Summary

Complete these steps to install Sametime® Gateway as a single server on

Windows®, to create an administrative user ID for WebSphere® ApplicationServer, and to connect to an LDAP server. This installation program installsWebSphere Application Server and Sametime Gateway.

Open a CMD line window and navigate to the directory “cd \Install\SametimeGateway”.Then enter the command “install.bat”.




The Install Shield Wizard is starting up.




Select your preferred language. We use “English”. Then click the “OK” button.




Accept the terms in the license agreement and click the “Next” button to continue.




We want to install a “Standalone server ”. Then click the “Next” button to continue.




We need to select the WebSphere installation files directory. Click the “Browse”button to continue.




Select the directory “ifpackage” under the directory to where you have unpacked theWebSphere Application Server install package. Click the “Open” button to continue.




As always in this example installation – remove “\Program Files” please. Then clickthe “Next” button to continue.




Confirm that your host name is listed correctly. Then click the “Next” button to continue.




Enter the user name for your WebSphere Administrator. As for other WebSpherebased servers before, this user must not exist in your directory. We use our standarduser name “wasadmin”. Enter the password for this user twice. Then click the “Next”button to continue.




As always in this example installation – remove “\Program Files” please. Then clickthe “Next” button to continue.




In this screen we need to configure the DB2 server and database properties. We use:DB2 Host name: “sametime.renovations.com”Database name: “stGW ” Application User ID: “db2admin” and its passwordSchema User ID: “db2admin” and its passwordThen click the “Next” button to continue.




Yes, we want to configure the LDAP settings now. Then click the “Next” button tocontinue.




The Host name in our example is “ldap.renovations.com”. And the Port is “3268 ”because it is an Active Directory Server. Then click the “Next” button to continue.




The Bind distinguished name in our example is“cn=LDAP Bind,cn=users,dc=ad,dc=renovations,dc=com”.Enter the password of this user in the Bind password field. Then click the “Next”button to continue.




Theis are the detected baseDN settings retrieved from our AD LDAP. If using another LDAP like Domino LDAP, then this screen can be different. We use the default“DC=ad,DC=renovations,DC=com”. Then click the “Next” button to continue.




Click the “Install” button to start the installation.




The Sametime Gateway including the base WebSphere Application Server is nowinstalling. This task takes approximately 15 minutes.




The installation has finished successfully. Click the “Finish” button to continue.




S

STEP TWENTY: Post Install tasks for the SametimeGateway.




Summary

In this step you install the WebSPhere Update Installer and install some

WebSphere iFixes that are required by the Sametime Gateway. Then you createthe service to start the Sametime Gateway automatic with the Operating System.

You need to unzip the installer for the WebSPhere Update installer first. Unzip the zip filefor your Operating System. In our example we use Windows. So we unzip the file“7.0.0.15-WS-UPDI-WinIA32.zip ”.




Open a CMD line window and navigate to the directory where you have unpacked theUPDI install files. We just use the command “cd \Install\SametimeWASiFixes\WebSphereUPDI\UpdateInstaller ”. Then start the installer with the “install.exe” command.




Accept the terms in the license agreements and click the “Next” button to continue.




Confirm the System Prerequisite Check is passed. Then click the “Next” button tocontinue.




As always we recommend to remove the “\Program Files” part in the Path. Thenclick the “Next” button to continue.



The Update Installer is now installing.




We need to change the directory path where the iFixes can be found. Click the “Browse”button.




Change to the directory where you have unpacked the iFixes. We use“C:\Install\SametimeWASiFixes\WebSphereiFixes ”. Then click the “Open” button.




The WebSphere iFixes are now installing.




Confirm that all iFixes where installed successfully. Then click the “Finish” button tocontinue.




To create the service we need the profile path. Open a file explorer and navigate to thisdirectory “C:\IBM\WebSphere\AppServer\profiles\RTCGW_Profile ”. Then copy thispath into your dashboard using the Ctrl-C key combination.




Now start a CMD line window. There navigate to the WebSphere binaries directory withthe command: “cd \IBM\WebSphere\AppServer\bin”. Then enter the command to createthe service:“wasservice -add RTCGWServer -serverName RTCGWServer -profilePathC:\IBM\WebSphere\AppServer\profiles\RTCGW_Profile -stopArgs “-usernamewasadmin -password passw0rd” -encodeParams”Confirm that the service creation was successful.




The Service was created and can be seen in the services view.




Set the service to “Automatic” in the preferences. Then start the service.




The Sametime Gateway Service has started successfully.




Summary

STEP TWENTYONE: Register the Sametime Gatewayin the Sametime System Console.




After installing an IBM® Sametime® Gateway server on IBM AIX®, Linux™, SunSolaris, or Microsoft™ Windows™, register it with the Sametime SystemConsole, so you can manage all of the Sametime servers from a central location.



Configure the parameters:SSCHostName “sametime.renovations.com”SSCUserName “wasadmin” and its password.Then save and close the file.




Next is to open the file “productConfig.properties” in your notepad.




In this file you need to enter several variables:DepName “Sametime Gateway ” (or whatever you want to name it in your SSC)WASPassword Enter the password of your local wasadmin user in the Gateway.




Enter the passwords of your “db2admin” user and of your “LDAP Bind” user.




Enter the DNS FQ Host name of your Sametime Community Server. We use“chat.renovations.com”. The Port is “1516 ”.Important is to set the flag “IsFederated” to “true”. Otherwise the registration can fail.Save and close the file.




Open a CMD line window and navigate to the console directory with the command “cd \IBM\WebSphere\STGateway\console ”. Then start the registration bat with thecommand “registerProduct.bat ”.




Just hit the ENTER key...




The registration has finished. Confirm that it has completed successfully.




Summary

Connect a local Sametime® Community Server or Sametime community cluster to Sametime Gateway to enable Sametime users to have instant messaging with

STEP TWENTYTWO: Connect the Sametime Gatewayto the local Sametime Community.




y g gexternal users.

Important: You can only connect one gateway to a community; otherwise theawareness and chat features may not work properly. Likewise, you can connectonly one local Sametime community to Sametime Gateway. You must add thelocal community to Sametime Gateway before you add external communities.

In your Sametime System Console click on “Sametime System Console” - “SametimeServers” and then on “Sametime Gateway Servers”.




Click on “Communities”.




Click the “New” button.




Fill the form with your data. For the Name we just use “Renovations”. The Domainsshould contain your local internet e-mail domains. We use “renovations.com”. TheSametime Community Host is “chat.renovations.com” in our example. Then click the“Apply” button.




The local community has been added.




Restart the Sametime Gateway by restarting the RTCGWServer service.




After the restart you should see in your Sametime System Console that the localcommunity is connected.




Summary

STEP TWENTYTHREE: Connect the SametimeGateway to an other Sametime Community.




Add an external Sametime® community to IBM® Sametime Gateway. Youconnect to a Sametime community by specifying domains in the externalcommunity, selecting a translation protocol, and setting the host name, port, andtransport protocol for the external community.

To connect to an external Sametime Community click the “New” button in your Sametime System Console.




We have already prepared a partner community with a working Sametime Gateway.We need to fill the connectivity data to this community now.Name “IBM ”Type “External”Domains “ibm.com”Protocol “SIP for Sametime Gateway”Host name “gateway.ibm.com”

Port “5060 ”Transport “TCP”then click the “OK” button.




It is again required to restart the gateway server by restarting the “RTCGWServer” service.




The Gateway is restarted and connected to the internal and external Sametime community.




Summary

STEP TWENTYFOUR: Enable the clients to use theSametime Gateway.




In this step you allow your Sametime Clients to add external users to their contact lists.

In your Sametime System Console click on “Sametime System Console” - “ManagePolicies”.




Edit the default policy by clicking the “Edit” button.




Check the check box “Allow users to add external users using the Sametime gatewaycommunities”.




On the bottom of the form click the “OK” button to save the policy changes.




Restart the Sametime Community Server with the console command “restart server ”.You know don't use this command in a production environment.




Summary

STEP TWENTYFIVE: Test the Sametime Gatewaywith the Sametime Client.




You are done with installing and configuring all the Edge components. Now youwant to know if all works. Here we test the Sametime Gateway functionality.

In your Sametime Connect Client click the “Add Person” button.




Because of the policy change you canadd external users now.

Check the check box to “Add externalusers by E-mail address” and enter avalid E-mail address from your partner

community.We try it with the name“[email protected]”.

Then click the “Add” button.

mailto:[email protected]







The user is now added. Some partner gateways require a permission by the partner.Click the “OK” button.




Close the “New Contact” dialog with the “Close” button.




Wow, it works. You partner user is shown as online and you kan chat with him now.




Additional Steps after the installation:

Some additional Tuning steps can be done after all components are installed. Youshould consult the Sametime Product Documentation in the Internet about this stepshere:

http://www-10.lotus.com/ldd/stwiki.nsf/dx/Tuning_st852

If you want to implement SSL to access your Sametime Meeting or Sametime ProxyServer, additional configuration steps are required. See the Lotus Sametime InfoCenter for more details or contact the author of this document.




Automatic URL redirection to https (SSL) can be configured. To get the install

instructions you can contact the author of this document.

If you want to connect your Sametime Gateway to AOL, then a trusted certificate isrequired. This needs to be bought from a public certificate authority.

If you want to connect your Sametime Gateway to Google, then you need some specialXMPP records in the public DNS.

You can connect your Sametime Gateway to a Microsoft Office Communication Server community or other XMPP based communities (Jabber)

See the Sametime documentation for more information.http://www-10.lotus.com/ldd/stwiki.nsf/xpViewCategories.xsp?lookupName=Product%20Documentation

http://www-10.lotus.com/ldd/stwiki.nsf/xpViewCategories.xsp?lookupName=Product%20Documentation







%20Documentation

The first part (Basic installation) of this documentation can be found here:http://www-10.lotus.com/ldd/stwiki.nsf/dx/IBM_Sametime_8.5.2_Installation-From_Zero_To_Hero-Basics

Ports to access the Integrated Solutions Consoleof the particular Servers

This are the standard ports when the servers are

installed with the Cell profile method.

HTTP HTTPSSametime Meeting Server 8500 8501


http://www-10.lotus.com/ldd/stwiki.nsf/dx/IBM_Sametime_8.5.2_Installation-From_Zero_To_Hero-Basics








Sametime Meeting Server 8500 8501Sametime Proxy Server 8600 8601Sametime System Console 8700 8701Sametime Media Manager 8800 8801

In this Pilot we only need the Sametime System

Console and Sametime Media Manager ports for alladministrative work in WebSphere and Sametime.

Legal Disclaimer

© IBM Corporation 2011. All Rights Reserved.

The information contained in this publication is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in this publication, it isprovided AS IS without warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and strategy, which are subject to change by IBM without notice. IBM shallnot be responsible for any damages arising out of the use of, or otherwise related to, this publication or any other materials. Nothing contained in this publication is intended to, nor shall have the effect of,creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software.

References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in thispresentation may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way.

Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth or other results.

Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary dependingupon many factors, including considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, noassurance can be given that an individual user will achieve results similar to those stated here.

All customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performancecharacteristics may vary by customer.

installing sametime852 from zero to hero part2 edge component

Documents