Cisco Systems Computer Monitor OL 25111 01 User Manual

Installation Guide for Cisco Unified  
Service Monitor  
Software Release 8.6  
Cisco Unified Communications Management Suite  
Americas Headquarters  
Cisco Systems, Inc.  
170 West Tasman Drive  
San Jose, CA 95134-1706  
USA  
Tel: 408 526-4000  
800 553-NETS (6387)  
Fax: 408 527-0883  
Text Part Number: OL-25111-01  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Contents  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
iv  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Contents  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
vi  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Preface  
This manual describes Cisco Unified Service Monitor (Service Monitor) and provides instructions for  
installing and upgrading it.  
Audience  
The audience for this document includes:  
IP communications and IP telephony management personnel.  
Administrative personnel monitoring the overall service levels of their organization.  
Network engineering personnel who evaluate and design IP network infrastructures.  
Conventions  
This document uses the following conventions:  
Item  
Convention  
Commands and keywords  
Variables for which you supply values  
Displayed session and system information  
Information you enter  
boldface font  
italic font  
screen font  
boldface screen font  
italic screen font  
Variables you enter  
Menu items and button names  
Selecting a menu item in paragraphs  
Selecting a menu item in tables  
boldface font  
Option>Network Preferences  
Option>Network Preferences  
Note  
Means reader take note. Notes contain helpful suggestions or references to material not covered in the  
publication.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
vii  
Download from Www.Somanuals.com. All Manuals Search And Download.  
         
Preface  
Caution  
Means reader be careful. In this situation, you might do something that could result in equipment  
damage or loss of data.  
Warning  
This symbol means danger. You are in a situation that could cause bodily injury.  
Product Documentation  
Note  
We sometimes update the documentation after original publication. Therefore, you should review the  
documentation on Cisco.com for any updates.  
Table 1 describes the product documentation that is available.  
Table 1  
Product Documentation  
Document Title  
Available on Cisco.com at These URLs  
Release Notes for Cisco Unified  
Service Monitor 8.6  
Compatibility Matrix  
ml  
Installation Guide for Cisco  
Unified Service Monitor 8.6  
User Guide for Cisco Unified  
Service Monitor 8.6  
Context-sensitive online help  
Click the Help link in the upper-right hand corner of the window or the help button in  
any dialog box.  
Related Documentation  
Note  
We sometimes update the documentation after original publication. Therefore, you should review the  
documentation on Cisco.com for any updates.  
Table 2 describes the additional documentation that is available.  
Table 2  
Related Documentation  
Document Title  
Available on Cisco.com at These URLs  
Sensor  
guide/1040qs21.html  
Release Notes for Cisco Unified  
Operations Manager 8.6  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
viii  
Download from Www.Somanuals.com. All Manuals Search And Download.  
             
Preface  
Table 2  
Related Documentation (continued)  
Document Title  
Available on Cisco.com at These URLs  
Installation Guide for Cisco  
Unified Operations Manager  
(Includes Service Monitor) 8.6  
User Guide for Cisco Unified  
Operations Manager 8.6  
Obtaining Documentation and Submitting a Service Request  
For information on obtaining documentation, submitting a service request, and gathering additional  
information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and  
revised Cisco technical documentation, at:  
Subscribe to the What’s New in Cisco Product Documentation as an RSS feed and set content to be  
delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently  
supports RSS Version 2.0.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
ix  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Preface  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
x
Download from Www.Somanuals.com. All Manuals Search And Download.  
C H A P T E R  
1
Prerequisites  
Product Overview  
Cisco Unified Service Monitor (Service Monitor), a product from the Cisco Unified Communications  
Management Suite, receives and analyzes data from these sources when they are installed in your voice  
network and configured properly:  
Cisco Unified Communications Manager (Unified Communications Manager) clusters—Retain Call  
Detail Records (CDRs) and Call Management Records (CMRs). CDRs include Mean Opinion Score  
(MOS) values that were calculated on IP phones and voice gateways using the Cisco Voice  
Transmission Quality (CVTQ) algorithm.  
For Unified Communications Manager versions that Service Monitor supports, see Cisco Unified  
Service Monitor 8.6 Compatibility Matrix. For information about configuring Unified  
Communications Manager clusters to work with Service Monitor, see User Guide for Cisco Unified  
Service Monitor.  
Sensors—Network Analysis Modules (NAMs) and Cisco 1040 Sensors (Cisco 1040s)—Compute  
MOS for each RTP stream. Service Monitor obtains data from sensors every 60 seconds.  
Service Monitor compares MOS against a threshold value—default or user-specified—for the codec in  
use. When MOS drops below the threshold, Service Monitor generates SNMP traps and sends them to  
up to four recipients. Service Monitor stores the data that it obtains in the database, where it is available  
for display on Service Monitor reports. Service Monitor purges the database daily to maintain a  
configurable number of days of data. (For more information, see the online help.)  
If you configure Cisco Unified Operations Manager (Operations Manager) as a trap receiver for  
Service Monitor, Operations Manager can further analyze, display, and act on the traps that Service  
Monitor generates. Operations Manager can generate service quality events, display and track these  
events on a real-time dashboard, and display and store event history. You can configure additional event  
settings on Operations Manager to alert you if MOS drops below a threshold or if too many (configurable  
number) service quality events occur during a period of time (configurable number of minutes). In  
addition, you can configure Operations Manager to send notifications by e-mail, SNMP trap, and syslog  
message.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 1 Prerequisites  
Server and Client System Requirements  
Service Monitor 8.6 can be installed in two modes—Enterprise Network Deployment mode and  
Managed Service Provider (MSP) Network Deployment mode. You can specify the mode that you need  
to use, when you install the product. You need to choose which mode to install based on your  
requirements. See User Guide for Cisco Unified Service Monitor for more details.  
Server and Client System Requirements  
Server Requirements  
Note  
For Service Monitor to coreside on a system with other applications in the Cisco Unified  
Communications Management Suite, see the coresidence requirements in Installation Guide for  
Cisco Unified Operations Manager 8.6.  
Service Monitor supports VMware for virtualization. For more information, see VMware  
Table 1-1 lists the server requirements for a standalone installation of Service Monitor.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 1 Prerequisites  
Server and Client System Requirements  
Table 1-1  
Server Requirements for Service Monitor Standalone Installation  
Description  
Specifications  
System  
parameters  
Up to 1,000 phones  
Up to 10,000  
phones  
Up to 30,000  
phones  
Up to 45,000 phones  
Up to 500  
Call rate  
Up to 50  
Up to 150  
Up to 500  
(CDRs/min)  
NAM/1040  
Sensor  
Up to 100  
Up to 1000  
Up to 5000  
Up to 5000  
RTP Stream  
rate  
(Streams/min)  
CDR/ RTP  
S t r e a m r a t e  
(together)  
Up to 50/100  
Up to 150/800  
Up to 500/1500  
Up to 500/1500  
Processor  
Two processors or dual core, 2 Two processors or Four processors,  
Four processors, quad  
core or two dual core,  
2 GHz minimum each  
GHz minimum each  
dual core, 2 GHz  
minimum each  
quad core or two  
dual core, 2 GHz  
minimum each  
Memory  
(RAM)1  
Page file2  
4 GB  
8GB  
4 GB  
8GB  
4 GB  
4 GB  
8GB  
8GB  
Disk space3  
84 GB recommended  
NTFS file system (required  
for secure operation).  
At least 200 MB in  
Windows temporary  
directory (%TEMP%)  
Software4 5 6 7  
Windows Server 2003 Standard Edition or Enterprise Edition with Service Pack 2 (32 Bit);  
Windows Server 2008 Standard Edition or Enterprise Edition (32 bit) with Service Pack 2 8  
VMware ESX 3.5 or ESXi 4.x. For requirements, see VMware Guidelines.  
ODBC Driver Manager9 3.5.10 or later.  
NTP-Configure the server to use Network Time Protocol (NTP) to synchronize with the  
timeserver that is used by Cisco Unified Communications Managers in your network. See NTP  
Hardware  
Color monitor.  
CD-ROM drive.  
Support for one or two 1-GB NICs (one is required, and the second is for failover support; both  
NIC cards must have the same IP address)  
1. If server RAM size is less than 4 GB, then a warning message appears.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Chapter 1 Prerequisites  
Server and Client System Requirements  
2. While configuring the page file, you should set both the minimum and maximum file size parameters to same size. Page size also needs to be  
changed from automatic to manual. This ensures that Windows creates a page file of the required size.  
3. Do not install Service Monitor on a FAT file system  
4. You must install Service Monitor on a dedicated system. Do not install Service Monitor on a Primary Domain Controller (PDC) or Backup  
Domain Controller (BDC). Do not install Service Monitor in an encrypted directory. Service Monitor does not support directory encryption.  
5. Immediately following installation, the TCP/IP stack should be hardened to avoid denial of service attacks. Ensure these steps are taken before  
using the product.  
—Apply Windows security patches. See Microsoft Security Updates for Denial of Service Attacks for details. The system that you use for  
your Operations Manager server should meet all security guidelines that Microsoft recommends for Windows 2003 or 2008 Server.  
—Specifically, the TCP/IP stack should be hardened to avoid denial of service attacks. Refer to the section "Security Consideration for  
Network Attacks" on page 121 of the The Windows Server 2003 - Security Guide, v2.1 which can be downloaded from the NSA website.  
—On the Windows Server 2003 Enterprise Edition or 2008 Standard or Enterprise Edition server, block remote access to all TCP/UDP ports  
except for those ports used by Operations Manager required for external access.  
6. The default locale for your Windows operating system must be set to US-English.  
7. Windows Terminal Services is supported in Remote Administration mode only. Use of Windows Terminal Services or Remote Desktop and  
Virtual Network Computing (VNC) to remotely control the server is not recommended for performing day-to-day operations (for example,  
running reports, keeping dashboards open, and so on).  
8. Windows Server 2008 Enterprise Edition (64 bit) and Windows Server 2008 R2 Edition are not supported Operation Systems  
9. To verify the version of ODBC Driver Manager, from the Windows desktop, choose Start > Settings > Control Panel > Administrative Tools  
> Data Sources (ODBC). Select the About tab. If necessary, install Microsoft Data Access Component (MDAC) 2.5 or later  
Note  
If your browser is configured to use a proxy server for your LAN, Service Monitor cannot open some  
report windows. Disable proxy server settings in Internet Options. (From the Connections tab, click  
LAN Settings.)  
When using Service Monitor, disable any software on your desktop that you use to prevent popup  
windows from displaying. Service Monitor must be able to open multiple windows to display  
information.  
Client Requirements  
Table 1-1 lists the client hardware and software requirements.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 1 Prerequisites  
Server and Client System Requirements  
Table 1-1  
Minimum Client Hardware and Software Requirements  
Minimum Requirement  
Component  
Hardware/software  
Color monitor with video card set to 256 colors (For optimum viewing on the Service  
Monitor display, We recommend that you use the highest native resolution supported by  
the client PC and monitor. A large, high-resolution display will also allow for less  
scrolling through information presented and increase operator efficiency. The minimum  
resolution recommended is 1440 x 900.)  
Any PC or server platform with a Pentium IV processor, 1.0 GHz or greater, running one  
of the following:  
Windows XP Professional Service Pack 2  
Windows 2003 Server (Standard and Enterprise Editions) without Windows  
Terminal Services  
Windows Server 2008 Enterprise Edition SP2  
Windows Server 2008 Standard Edition SP2  
Processor  
Memory  
Dual Core, 2 GHz minimum (Windows PC or Apple Mac)  
2 GB RAM minimum  
Browser  
Microsoft Internet Explorer 8.x or 9.x  
Firefox 3.6, 4.0 or 5.0  
Note  
We strongly recommend that you use a browser from a client system to perform  
day-to-day operations (for example, running reports). Use of Windows Terminal  
Services, Remote Desktop, or VNC to perform day-to-day operations is not  
recommended.  
Adobe Flash Player 10 or later.  
VMware Guidelines  
Service Monitor supports VMware ESX 3.5 and ESXi 4.x. Service Monitor must have the same system  
resources available to it inside the virtualization environment that it has for a standard (nonvirtual)  
installation. When determining the performance of Service Monitor in your virtual setup, you must take  
into account that the VMware instance will use some system resources that would normally be available  
to Service Monitor in a standard installation. Additional requirements for running Service Monitor in a  
virtualization environment might vary with your environment and system load. For more information,  
see Best Practices for Cisco Unified Communication Suite on Virtualization at this URL:  
The following configurations are supported for Service Monitor in a virtual environment:  
An instance of Service Monitor, supporting up to 45,000 phones  
Each of these products installed on a separate virtual machine:  
Operations Manager  
Service Monitor  
Service Statistics Manager  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-5  
Download from Www.Somanuals.com. All Manuals Search And Download.  
       
Chapter 1 Prerequisites  
Server and Client System Requirements  
Provisioning Manager  
Each product installed on one virtual machine, supporting up to 10,000 phones and 1,000 IP devices.  
Note  
For more information, see Best Practices for Cisco Unified Communication Suite on Virtualization at the  
following website:  
When setting up Service Monitor in a VMware environment, keep in mind the following guidelines:  
Resources must be reserved at 100% of requirements for the virtual machine.  
To use a licensed Service Monitor in a VMware environment, you must configure your virtual  
machine with a static MAC address.  
Note  
You can run Service Monitor in Evaluation mode with a dynamic MAC address. However,  
before you can run a licensed copy of Service Monitor, you must set up a static MAC  
address.  
To set up a static MAC address, do the following:  
Step 1  
Step 2  
Step 3  
Step 4  
Step 5  
Step 6  
Power down the virtual machine.  
In the Inventory panel, select the virtual machine.  
Click the Summary tab and then click Edit Settings.  
In the Hardware list, select Network Adapter.  
For MAC address, select Manual.  
Change the current MAC address of the virtual machine to a static MAC address in the following range:  
00:50:56:00:00:00 to 00:50:56:3F:FF:FF.  
When assigning a static MAC address, we recommend choosing a complex address. An example of a  
complex MAC address is 00:50:56:01:3B:9F. A less complex MAC address is 00:50:56:11:11:11,  
because of the repeating ones (1).  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-6  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Chapter 1 Prerequisites  
Terminal Server Support for Windows 2003 and Windows 2008  
Note  
Choosing a complex address makes it less likely that you will choose an address being used by  
another customer. This can prevent accidental licensing overlap between different customers.  
Step 7  
Click OK.  
Terminal Server Support for Windows 2003 and Windows 2008  
You can install Service Monitor on a system with Terminal Services enabled in Remote Administration  
mode. However, you cannot install Service Monitor on a system with Terminal Services enabled in  
Application mode.  
If you have enabled Terminal Services in Application mode, you should disable the Terminal Server,  
reboot the system, and start the installation again.  
Table 1-2 summarizes the Terminal Services features in Windows 2003 and Windows 2008 Server.  
.
Table 1-2  
Terminal Services on Windows 2003 and Windows 2008 Server  
Windows 2003 /Windows 2008  
Server  
Features  
Terminal Server  
Remote access and virtual system. Each client has its own virtual  
OS environment.  
Remote Desktop Administration Remote access only. All clients use the same (and the only)  
operating system.  
Note  
Do not use terminal services to perform day-to-day tasks in  
Cisco Unified Communications Management Suite  
applications, such as viewing the Service Level View in  
Operations Manager or viewing reports in Service Monitor.  
Enabling and Disabling Terminal Services on a Windows Server  
To enable or disable Terminal Server, go to Manage Your Server > Add or Remove a Role > Terminal  
Server.  
To enable or disable Remote Desktop Administration, go to Control Panel > System > Remote.  
Enabling and Disabling FIPS on a Windows Server  
Sometimes, Federal Information Processing Standard (FIPS) compliant encryption algorithms are  
enabled for Group security policy on Windows server.  
When FIPS compliance is activated, the SSL authentication may fail on the Service Monitor server. To  
allow Service Monitor to work properly, disable FIPS compliance.  
To enable or disable FIPS on Windows 2003 server:  
Step 1  
Go to Start > Settings > Control Panel > Administrative tools > Local Security Policy.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-7  
Download from Www.Somanuals.com. All Manuals Search And Download.  
         
Chapter 1 Prerequisites  
Port Usage  
The Local Security Policy window appears.  
Step 2  
Step 3  
Step 4  
Step 5  
Step 6  
Click Local Polices > Security Options.  
Select System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.  
Right-click the selected policy and click Properties.  
Select Enabled or Disabled to enable or disable FIPS compliant algorithms.  
Click Apply.  
You must reboot the server for the changes to take effect.  
Port Usage  
Before you install Service Monitor, ensure that the ports listed in Table 1-3 and Table 1-4 are free.  
The ports in Table 1-3 and Table 1-4 should not be scanned.  
Note  
Table 1-3 lists the ports that Service Monitor uses. Common Services is installed with Service Monitor.  
Table 1-4 lists the ports that Common Services uses.  
Table 1-3  
Service Monitor Port Usage  
Protocol Port Number  
Service Name  
TCP  
22  
SFTP—Service Monitor uses SFTP to obtain data from Unified  
Communications Manager versions 5.x and later.  
UDP  
UDP  
TCP  
TCP  
UDP  
TCP  
53  
DNS.  
67 and 68  
2000  
DHCP.  
SCCP—Service Monitor uses SCCP to communicate with Cisco 1040s.  
Database.  
43459  
5666  
Syslog—Service Monitor receives syslog messages from Cisco 1040s.  
5665–5680  
Interprocess communication between the user interface and back-end  
processes.  
These ports must be free.  
Note  
Service Monitor uses TFTP to find the configuration file for a given Cisco 1040. Service Monitor by  
default uses port 69 on the TFTP servers.  
Common Services is also installed on the Service Monitor system. Table 1-4 lists the ports used by  
Common Services.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-8  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 1 Prerequisites  
Port Usage  
Table 1-4  
Common Services Port Usage  
Port  
Protocol Number Service Name  
TCP  
TCP  
TCP  
UDP  
UDP  
TCP  
23  
Telnet.  
25  
Simple Mail Transfer Protocol (SMTP).  
TACACS+ and ACS.  
49  
69  
Trivial File Transfer Protocol (TFTP).  
Simple Network Management Protocol (SNMP).  
Common Services HTTP server in SSL mode.  
161  
443  
If IIS is on your system, even when IIS is disabled, you will be asked if you want  
to select an HTTPS port other than 443 during installation or upgrade. To avoid  
port conflict, select another port.  
TCP  
UDP  
UDP  
TCP  
514  
Remote Copy Protocol.  
514  
Syslog.  
1431  
1741  
2002  
8898  
9007  
9009  
15000  
16236  
Trap Listener to MAC Notification Traps.  
Common Services HTTP Protocol.  
Communicate with Cisco Secure ACS server when AAA mode is ACS.  
Log Server.  
TCP  
TCP  
TCP  
TCP  
UDP  
TCP  
Tomcat shutdown.  
Ajp13 connector used by Tomcat.  
Log server.  
UT Host acquisition.  
40050-  
40070  
CSTM ports used by Common Services applications, such as Device and  
Credential Repository (DCR).  
TCP  
TCP  
UDP  
TCP  
UDP  
TCP  
TCP  
TCP  
TCP  
TCP  
40401  
42340  
42342  
42344  
42350  
42351  
42352  
42353  
43441  
50001  
LicenseServer.  
Daemon Manager - Tool for Server Processes.  
OSAGENT.  
ANI HTTP Server.  
Event Services Software (ESS) (alternate port is 44350/udp.)  
Event Services Software (ESS) Listening (alternate port is 44351/tcp.)  
ESS HTTP (alternate port is 44352/tcp.)  
ESS Routing (alternate port is 44352/tcp.)  
CMF Database.  
SOAPMonitor.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-9  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Chapter 1 Prerequisites  
Port Usage  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
1-10  
Download from Www.Somanuals.com. All Manuals Search And Download.  
C H A P T E R  
2
Installing, Uninstalling, and Upgrading  
Service Monitor  
This section contains the following topics:  
Preparing to Install Service Monitor  
To ensure a successful Service Monitor installation, do the following before you install Cisco Unified  
Service Monitor (Service Monitor):  
Make sure that your hardware and software meet the requirements for the server. See Server  
Prepare the Service Monitor server for installation. See Preparing the Server, page 2-2.  
Verify that the ports that Service Monitor and Common Services use are not being used. See  
Gather information that you might need to provide during the Service Monitor installation. See  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Preparing to Install Service Monitor  
Preparing the Server  
Note  
The system that you use for your Service Monitor server should meet all the security guidelines that  
Microsoft recommends for Windows 2003 Server. See the NSA website for security guidance  
Specifically, the TCP/IP stack should be hardened to avoid denial of service attacks. Refer to the section  
"Security Consideration for Network Attacks" on page 121 of the The Windows Server 2003 - Security  
Guide, v2.1 which can be downloaded from the NSA website.  
Service Monitor is already installed on a server when you install Operations Manager. To activate  
Service Monitor on such a server, register your PAK on Cisco.com and install the license file for Cisco  
Unified Service Monitor. (See Licensing, page B-1.)  
Before installing, reinstalling, or upgrading Service Monitor, do the following:  
Verify that the Primary and Active regional settings on your Windows system are set to either US  
English or Japanese. Other options are not supported by Service Monitor.  
You can set the Active regional settings in Control Panel > Regional and Language Options >  
Regional Options.  
Set the correct date and time on the system. For more information, see Common Services online  
help.  
Verify that the drive that you choose to install Service Monitor on is an NTFS file system.  
Verify that the fully qualified domain name of the system on which Service Monitor is installed is  
Domain Name System (DNS) resolvable. The IP address must be resolvable to the DNS, and the  
DNS must be resolvable to the IP address (forward and reverse lookup, in DNS terms). To check  
name resolution on the Service Monitor server, in a command prompt, run the command  
NMSROOT\bin>smNameRes.exe.  
Note  
NMSROOT is the directory where Service Monitor is installed on your system. If you  
selected the default directory during installation, it is C:\PROGRA~1\CSCOpx.  
Disable the virus scan software on your system. You can restart it after the installation is complete.  
Disable Cisco Security Agent if it is running on your system. You can restart it after the installation  
is complete.  
Close all open or active programs. Do not run other programs during the installation process.  
Do not install Service Monitor on:  
A Primary Domain Controller (PDC) or Backup Domain Controller (BDC).  
An Advanced Server with terminal services enabled in application server mode.  
You must install Service Monitor on a system with a static IP address.  
You can perform the following tasks either before or after you complete the installation:  
Configure the Service Monitor server to use the same NTP server that Unified Communications  
Manager uses. See NTP Configuration Notes, page 2-3.  
Obtain the license file or files for Service Monitor. See Licensing, page B-1.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Preparing to Install Service Monitor  
Read through the following installation notes:  
Service Monitor is installed in the default directory SystemDrive:\Program Files\CSCOpx  
where SystemDrive is the Windows operating system installed directory.  
If you select another directory during installation, the application is installed in that directory.  
The destination folder should not contain the following special characters:  
! @ # $ % ^ & * ( ) + | } { " [ ] ; ' / ? < > , . ` =  
If errors occur during installation, check the installation log file in the root directory on the drive  
where the operating system is installed. Each installation creates a new log file; for example:  
C:\Ciscoworks_install_YYYYMMDD_hhmmss.log, where YYYYMMDD denotes the year, month and  
date of installation and hhmmss denotes the hours, minutes and seconds of installation.  
For example:  
C:\Ciscoworks_install_20060721_182205.log  
You can click Cancel at any time to end the installation. However, any changes to your system will  
not be undone. For example, if any new files were installed or if there were any changes to the  
system files, you need to manually clean up the installation directories.  
To monitor Service Monitor using a third-party SNMP management tool, see Configuring Your  
Gathering Information to Provide During Installation  
During installation, you will need to set passwords for various user accounts and for the database. For  
more information about the user accounts and for password rules, see Password Information, page A-7.  
You might need to supply mail settings—such as HTTPS port—and security certificate information. For  
need to supply the license file location or select Evaluation only. For more information, see Licensing,  
Ensuring That Required Ports Are Free  
The ports that Service Monitor and Common Services use must be free. For a list of ports, see Port  
NTP Configuration Notes  
The clocks on Service Monitor and Unified Communications Manager servers must be synchronized for  
Service Monitor reports to include complete and up-to-date information and accurately reflect activity  
during a given time period. These notes offer a starting point and do not provide complete instructions  
for configuring NTP.  
To get started:  
1. Talk with your Unified Communications Manager administrators to determine the time server with  
which Service Monitor should synchronize. You might find Cisco IP Telephony Clock  
Synchronization: Best Practices, a white paper on Cisco.com, useful; read it at this URL:  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
       
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Installing Cisco Unified Service Monitor  
2. Use your system documentation to configure NTP on the Windows Server 2003 system where  
Service Monitor will be installed. Configure NTP with the time server being used by  
Cisco Unified Communication Managers in your network. You might find How to configure an  
authoritative time server in Windows Server, useful; look for it at this URL:  
Note  
This website is Copyright © 2010, Microsoft Corporation.  
We also recommend that you configure your NAMs to use the same NTP server that Unified  
Communications Manager instances use.  
Installing Cisco Unified Service Monitor  
To ensure that your system is ready for the installation, perform the necessary tasks in Preparing to  
Note  
Windows Management Instrumentation (WMI) services must not run during installation; WMI services  
can lock processes and cause the installation to terminate unexpectedly. The installation procedure will  
notify you if WMI services are running and ask permission to stop the services and restart them after  
installation completes.  
Note  
We recommend that you do not terminate the installation while it is running.  
Step 1  
Step 2  
Step 3  
As the local administrator, log in to the machine on which you will install the Service Monitor software.  
Unzip the file that you obtained through the eDelivery system.  
Click the setup.exe file.  
The Cisco Unified Service Monitor Setup Program window opens.  
Read any messages and acknowledge them to continue:  
Step 4  
If WMI Services are running on the system—A message is displayed stating that, for the installation  
to proceed, the script will stop WMI Services, complete the installation, and restart WMI Services.  
To continue, click OK.  
If IIS is detected (even if it is disabled)—A message is displayed. To avoid port conflict with IIS,  
click OK: in a later step you will be prompted to select an HTTPS port other than 443.  
The Welcome window appears.  
Step 5  
Step 6  
Step 7  
Step 8  
Click Next. The Software License Agreement window appears.  
Select the I accept the terms of the license agreement radio button and click Next.  
The Licensing Information window appears.  
Select one of the following, and then click Next:  
License File Location—Browse to enter the location.  
Evaluation OnlyYou can complete the installation and then register the license file later.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Installing Cisco Unified Service Monitor  
Note  
For instructions on obtaining a license file, see Licensing Process, page B-3.  
The installation program checks the name lookup and DHCP. If a static IP address is not configured  
on your system, the DHCP-Enabled Network Adapters dialog box appears. Click Yes.  
If you are installing on a virtual machine with a dynamic MAC address, another warning message  
will be displayed. Click Yes. (Although you can complete the installation, Service Monitor will not  
be functional. For more information, see VMware Guidelines, page 1-5.)  
The Setup Type window appears.  
Step 9  
Select one of the following radio buttons:  
Typical—To install Service Monitor 8.6 while entering the least amount of input.  
Custom—To install Service Monitor 8.6, select the destination directory, and enter passwords for  
user and database.  
If you choose the Typical installation mode, the following information will be supplied for you for the  
Common Services installation: guest password, Common Services database password, Mail Settings,  
and self-signed certificate information. The remainder of this procedure is written for a Typical  
installation.  
If you choose the Custom installation mode, you will be prompted to enter the above information during  
the installation process.  
Step 10 Click Next. The Select Components window appears.  
Step 11 Select the Install Cisco Unified Service Monitor 8.6 radio button. Click Next.  
The installation program checks dependencies and system requirements. The System Requirements  
window displays the results of the requirements check and advises whether the installation can continue.  
One of the following might occur:  
If there is not enough disk space for the installation, or the correct operating system is not present,  
or the minimum required RAM is not available, the installation program displays an error message  
and stops.  
If your system has less than 4 GB of RAM, you can continue with the installation after reading this  
message:  
WARNING: System memory is less than the requirement for Cisco Unified Service  
Monitor system to support high call volume.  
Please refer to Service Monitor documentation for more details and upgrade the  
memory to at least 4GB if you have high call volume.  
If your disk space is less than 73000 MB, you can continue with the installation after reading this  
message:  
Current disk space <nnnn> MB is less than Recommended disk space 73000 MB and it  
may affect performance.  
Note  
The disk space displayed in the System Requirements window is the least amount you need  
to install and start Service Monitor. The Recommended disk space (see table on page 1-2)  
is the minimum space necessary to use Service Monitor.  
If other minimum requirements are not met, the installation program displays an appropriate  
message and continues installing.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-5  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Installing Cisco Unified Service Monitor  
Step 12 Click Next. The Enter Admin Password window appears:  
a. Enter a password for the admin user, confirm, and click Next.  
Note  
Note the password. You will need it to log in to Service Monitor until you have configured  
security and created other users.  
The Enter System Identity Account Password window appears  
b. Enter a System Identity Account password (and confirm), and click Next. The Create casuser dialog  
box appears.  
c. Click Yes to continue with the installation.  
Note  
If you selected the Custom installation mode, during this part of the installation you will be asked  
to enter the following information: guest password, Common Services database password, Mail  
Settings, and self-signed certificate information.  
If you need to change the HTTPS port from 443 to another number, the Mail Settings information  
page will be displayed.  
Step 13 The Summary window appears, displaying the current settings. Click Install. As the installation  
proceeds, additional informational messages are displayed.  
Step 14 Click OK on additional messages as they are displayed to ensure that the installation progresses:  
You will see a dialog box with the following message displayed:  
Before you reboot this system, configure automatic time synchronization on it using  
NTP. Configure this system to use the time server that is used by Cisco Unified  
Communications Managers in your network.  
For more information, see NTP Configuration Notes, page 2-3.  
If Windows SNMP service is not installed on your system, you will see this message:  
Windows SNMP service is not installed on your system. This installation will continue.  
To install support for system application and host resources MIBs, you must install  
the Windows SNMP service, using Add/Remove Programs from the Control Panel.  
If you installed Service Monitor for evaluation only, you will see this message:  
Please obtain a valid license key from Cisco.com within 90 days.  
A Restart window appears. The Yes, I want to restart my computer now radio button is selected.  
Step 15 Click Finish. (You must restart your computer before you start Step 16.)  
Step 16 After the installation completes:  
a. Verify that Service Monitor was installed correctly by starting Service Monitor. See Starting Cisco  
Note  
You should wait approximately fifteen minutes after the installation completes before starting  
Service Monitor. This allows all of the process to start. If you do not wait, you may receive the  
following HTTP Status 500 error message: The server encountered an internal error ()  
that prevented it from fulfilling this request.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-6  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Starting Cisco Unified Service Monitor  
b. Exclude the NMSROOT\databases directory from virus scanning. Problems can arise if database  
files are locked because of virus scanning.  
Note  
NMSROOT is the directory where Service Monitor is installed on your system. If you selected  
the default directory during installation, it is C:\Program Files\CSCOpx.  
Starting Cisco Unified Service Monitor  
Before starting Service Monitor, do the following:  
Ensure that you restarted your system after you completed the installation or upgrade to  
Service Monitor 8.6.  
Disable any popup blocker utility that is installed on your client system.  
Note  
By default, SSL is not enabled in Common Services. See “Setting up Browser-Server Security” in  
Common Services online help for information about how to enable SSL.  
Step 1  
Enter the appropriate address in your browser as follows:  
If you upgraded to Service Monitor 8.6 and had previously enabled SSL in Common Services, type  
https://servername:port number where:  
servername is the IP address or DNS name of the server where Service Monitor resides  
port number is either 443 (the default) or the HTTPS port you entered during the upgrade. A  
login page is displayed.  
If SSL is not enabled, type http://servername:1741 where servername is the IP address or DNS name  
of the server where Service Monitor resides. A login page is displayed.  
Step 2  
Enter a username and password. If you do not have a username, you can do the following:  
Enter admin for the user ID.  
Enter the password that you entered for the admin user during installation and press Enter.  
The Service Monitor home page appears.  
Preparing to Upgrade to Service Monitor 8.6  
This section contains the following information:  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-7  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Preparing to Upgrade to Service Monitor 8.6  
Upgrade Paths  
You can upgrade from Service Monitor 8.0, Service Monitor 8.0.1, Service Monitor 8.5 to Service  
Monitor 8.6.  
To save existing call data so that you can continue to run reports against it, you must migrate the call  
data before you start the upgrade. For more information, see Planning for Data Migration and Migrating  
During the upgrade, configuration data—TFTP servers, trap receivers, credentials, and so on—is  
automatically migrated.  
Upgrading from Enterprise Network Deployment mode to MSP Network Deployment mode is not  
supported. To change from MSP mode to Enterprise mode, you must uninstall Service Monitor and  
freshly install it again.  
Backing Up Service Monitor Files and Database  
The upgrade procedure does not back up your system. You should perform a backup before you upgrade.  
Step 1  
Back up the Service Monitor database:  
a. Log in to the system where Service Monitor is installed.  
b. Stop the daemon manager using this command:  
net stop crmdmgtd  
c. From NMSROOT\databases\qovr, copy the files qovr.db and qovr.log to a tape, an external drive, or  
a network directory (not a local directory). Doing so ensures data integrity in case of hardware  
failure and ensures that backup data does not exhaust local disk space.  
Note  
Ensure that you know the qovr database password. In case you do not know the password,  
modify the password before you proceed. For instructions, see “Changing the Password for  
the Service Monitor Database” in User Guide for Service Monitor 8.6.  
d. Restart the daemon manager using the following command:  
net start crmdmgtd  
Note  
To restore the database, perform steps 1a and 1b, restore the saved files, and perform step 1c.  
Step 2  
Back up Service Monitor configuration data using the Common Services backup described in the  
Common Services online help.  
The Common Services online help is only available through the Common Services pages, which are  
located in the Administration tab.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-8  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Preparing to Upgrade to Service Monitor 8.6  
To access the Common Services online help, you can use the following procedure:  
1. Select Administration > Server Administration (Common Services) > Security. The Setting up  
Security page appears.  
2. Click Help. The online help opens.  
Note  
You must restore the Service Monitor configuration data and additionally restore the database.  
To restore both the Service Monitor database and configuration data requires two steps: restoring the  
database manually and restoring the configuration data (using the procedures referenced in Step 2 b).  
Understanding the Effect an Upgrade Has on Your Data  
To migrate report data (also know as call data), you must run the call migration tool before you start the  
upgrade to Service Monitor 8.6. For more information, see Planning for Data Migration and Migrating  
When you upgrade to Service Monitor 8.6:  
Service Monitor configuration data—such as credentials and threshold settings—is retained.  
Common Services data is retained.  
Planning for Data Migration and Migrating Call Data Before the Upgrade  
Migrating call data is optional. However, to keep the data, you must migrate it before you start the  
upgrade to Service Monitor 8.6. You can find the call migration tool in the zip file that contains the  
Service Monitor product on Cisco.com.  
Note  
When you perform a data migration using the CMT tool, and an upgrade from Service Monitor 8.0 to  
Service Monitor 8.6, the grading of the previous calls will be Unknown after the upgrade, in CDR,  
CVTQ, and Sensor reports. The reason is that the grading logic is absent in 8.0. Grading will work  
properly for the new calls that are made.  
Global MOS Threshold settings cannot be retained for upgrades from Service Monitor 8.0 to 8.6. Two  
configurable MOS settings were introduced in Service Monitor 8.5, so the data was not available in 8.0.  
To configure global MOS threshold settings after the upgrade is complete, select Administration >  
Global > Threshold.  
The README_QOVR_CMT.TXT. file that is included with the Call Migration Tool provides estimates  
of the time that data migration takes and the disk space it uses. It also explains the effect that running  
the tool has on Operations Manager and Service Statistics Manager, if they are installed in your network.  
Step 1  
Download the zip file (CUSM8_6.zip) that contains the Service Monitor product from Cisco.com. You  
can navigate to the file as follows:  
a. Go to this URL:  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-9  
Download from Www.Somanuals.com. All Manuals Search And Download.  
       
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Preparing to Upgrade to Service Monitor 8.6  
b. If you have not already logged in to Cisco.com, log in.  
c. Click the Download Software link.  
d. Follow the online instructions to select Cisco Unified Service Monitor 8.6 and download the zip file.  
Extract the QOVR_CMT.zip file from the \install\CallMigrationTool folder in the CUSM8_6.zip file.  
Step 2  
Step 3  
Extract the README_QOVR_CMT.TXT file from the QOVR_CMT.zip file and use the information in  
it to plan for and execute the migration.  
Deleting Cisco 1040 Configuration Files from TFTP Servers  
We recommend that you delete existing Cisco 1040 configuration and binary image files from your  
existing TFTP servers before you perform the upgrade. Delete the following files:  
Cisco 1040 Sensor configuration files: One QOVDefault.CNF file and a QoVMACAddress.CNF file  
for each Cisco 1040.  
Binary image file: For example, SvcMonAA2_nn.img  
Preventing Extra Processing After Upgrade  
If you are monitoring calls from Unified Communications Manager 6.x or later, you should consider  
that:  
During the upgrade to Service Monitor 8.6, all processes are stopped. Service Monitor is not  
available to receive data files from Unified Communications Manager 6.x or later.  
After the upgrade completes:  
Unified Communications Manager sends all backlogged data files to Service Monitor; this takes  
time.  
Service Monitor drops old files.  
To avoid this processing, before you upgrade, you can:  
Prevent Unified Communications Manager 7.x and later from sending backlogged data. To do so,  
edit the billing server and uncheck the Resend on Failure check box. For more information, see  
Unified Communications Manager Configuration in User Guide for Cisco Unified Service Monitor  
8.6.  
For Unified Communications Manager software releases earlier than 7.x, prevent them from sending  
data by deleting the Service Monitor Application Billing Server from Unified Communications  
Manager and restarting the CDR Repository Manager service. See Removing Service Monitor from  
Unified Communications Manager, page 2-10. You can add Service Monitor to Unified  
Communications Manager and restart the CDR Repository Manager service again after the upgrade  
completes.  
Removing Service Monitor from Unified Communications Manager  
This procedure is recommended if you are performing an upgrade to Service Monitor 8.6 and you are  
monitoring calls from Unified Communications Manager 6.x.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-10  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Upgrading to Service Monitor 8.6  
Note  
You can configure Unified Communications Manager 7.x and later to not resend data on failure. For  
more information, see Unified Communications Manager Configuration in User Guide for Cisco Unified  
Service Monitor 8.6.  
Step 1  
Step 2  
Step 3  
Launch Unified Communications Manager Serviceability.  
Select Tools > CDR Management.  
Scroll down to Billing Applications Server Parameters and look for the Service Monitor server that you  
want to upgrade. You can identify the server from entries in the Hostname/IP Address and User Name  
columns; (smuser will be displayed in the User Name column).  
Step 4  
Step 5  
Step 6  
Select the check box for the Service Monitor server that you will upgrade.  
Click Delete Selected.  
Restart the CDR Repository Service:  
a. From Unified Communications Manager Serviceability, select Tools > Control Center - Network  
Services.  
b. From the list of servers, select the publisher.  
c. Scroll down to CDR Services.  
d. Select the Cisco CDR Repository Manager radio button.  
e. Click the Restart button.  
Configuring NTP  
If you plan to add Unified Communications Managers to Service Monitor and have not already  
configured the Service Monitor server to use NTP, do so before or after you upgrade. For more  
Upgrading to Service Monitor 8.6  
Before you perform the upgrade, you must:  
Disable the virus scan software on your system. You can restart it after the upgrade is complete.  
Disable Cisco Security Agent if it is running on your system. You can restart it after the upgrade is  
complete.  
Note  
Immediately after you upgrade, Cisco 1040s are unable register to Service Monitor until you complete  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-11  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Upgrading to Service Monitor 8.6  
Upgrading to Service Monitor 8.6 from 8.0 and 8.5  
Step 1  
Make sure you have taken the appropriate steps to migrate the report data (also know as call data), see  
As the local administrator, log in to the machine on which you will install the Service Monitor software.  
Unzip the file that you obtained through the eDelivery system.  
Click the setup.exe file.  
Step 2  
Step 3  
Step 4  
The Cisco Unified Service Monitor Setup Program window opens.  
Read any messages and acknowledge them to continue:  
Step 5  
If WMI Services are running on the system—A message is displayed stating that, for the installation  
to proceed, the script will stop WMI Services, complete the installation, and restart WMI Services.  
To continue, click OK.  
If IIS is detected (even if it is disabled)—A message is displayed. To avoid port conflict with IIS,  
click OK: in a later step you will be prompted to select an HTTPS port other than 443.  
The Welcome window appears.  
Step 6  
Step 7  
Step 8  
Step 9  
Click Next. The Software License Agreement window appears.  
Select the I accept the terms of the license agreement radio button and click Next.  
The Licensing Information window appears.  
Select one of the following, and then click Next:  
License File Location—Browse to enter the location.  
Evaluation OnlyYou can complete the installation and then register the license file later.  
Note  
For instructions on obtaining a license file, see Licensing Process, page B-3.  
The installation program checks the name lookup and DHCP. If a static IP address is not configured  
on your system, the DHCP-Enabled Network Adapters dialog box appears. Click Yes.  
If you are installing on a virtual machine with a dynamic MAC address, another warning message  
will be displayed. Click Yes. (Although you can complete the installation, Service Monitor will not  
be functional. For more information, see VMware Guidelines, page 1-5.)  
The Setup Type window appears.  
Step 10 Select one of the following radio buttons:  
Typical—To install Service Monitor 8.6 while entering the least amount of input.  
Custom—To install Service Monitor 8.6, select the destination directory, and enter passwords for  
user and database.  
If you choose the Typical installation mode, the following information will be supplied for you for the  
Common Services installation: guest password, Common Services database password, Mail Settings,  
and self-signed certificate information. The remainder of this procedure is written for a Typical  
installation.  
If you choose the Custom installation mode, you will be prompted to enter the above information during  
the installation process.  
Step 11 Click Next. The Select Components window appears.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-12  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Upgrading to Service Monitor 8.6  
Step 12 Select all radio buttons. Click Next.  
The installation program checks dependencies and system requirements. The System Requirements  
window displays the results of the requirements check and advises whether the installation can continue.  
One of the following might occur:  
If there is not enough disk space for the installation, or the correct operating system is not present,  
or the minimum required RAM is not available, the installation program displays an error message  
and stops.  
If your system has less than 4 GB of RAM, you can continue with the installation after reading this  
message:  
WARNING: System memory is less than the requirement for Cisco Unified Service  
Monitor system to support high call volume.  
Please refer to Service Monitor documentation for more details and upgrade the  
memory to at least 4GB if you have high call volume.  
If your disk space is less than 73000 MB, you can continue with the installation after reading this  
message:  
Current disk space <nnnn> MB is less than Recommended disk space 73000 MB and it  
may affect performance.  
Note  
The disk space displayed in the System Requirements window is the least amount you need  
to install and start Service Monitor. The Recommended disk space (see table on page 1-2)  
is the minimum space necessary to use Service Monitor.  
If other minimum requirements are not met, the installation program displays an appropriate  
message and continues installing.  
Step 13 Click Next. The Enter Admin Password window appears:  
a. Enter a password for the admin user, confirm, and click Next.  
Note  
Note the password. You will need it to log in to Service Monitor until you have configured  
security and created other users.  
The Enter System Identity Account Password window appears  
b. Enter a System Identity Account password (and confirm), and click Next. The Create casuser dialog  
box appears.  
c. Click Yes to continue with the installation.  
Note  
If you selected the Custom installation mode, during this part of the installation you will be asked  
to enter the following information: guest password, Common Services database password, Mail  
Settings, and self-signed certificate information.  
If you need to change the HTTPS port from 443 to another number, the Mail Settings information  
page will be displayed.  
Step 14 The Summary window appears, displaying the current settings. Click Install. As the installation  
proceeds, additional informational messages are displayed.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-13  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Upgrading to Service Monitor 8.6  
Step 15 Click OK on additional messages as they are displayed to ensure that the installation progresses:  
You will see a dialog box with the following message displayed:  
Before you reboot this system, configure automatic time synchronization on it using  
NTP. Configure this system to use the time server that is used by Cisco Unified  
Communications Managers in your network.  
For more information, see NTP Configuration Notes, page 2-3.  
If Windows SNMP service is not installed on your system, you will see this message:  
Windows SNMP service is not installed on your system. This installation will continue.  
To install support for system application and host resources MIBs, you must install  
the Windows SNMP service, using Add/Remove Programs from the Control Panel.  
If you installed Service Monitor for evaluation only, you will see this message:  
Please obtain a valid license key from Cisco.com within 90 days.  
A Restart window appears. The Yes, I want to restart my computer now radio button is selected.  
Step 16 Click Finish. (You must restart your computer before you start Step 16.)  
Step 17 After the installation completes:  
a. Verify that Service Monitor was installed correctly by starting Service Monitor. See Starting Cisco  
Note  
You should wait approximately fifteen minutes after the installation completes before starting  
Service Monitor. This allows all of the process to start. If you do not wait, you may receive the  
following HTTP Status 500 error message: The server encountered an internal error ()  
that prevented it from fulfilling this request.  
b. Exclude the NMSROOT\databases directory from virus scanning. Problems can arise if database  
files are locked because of virus scanning.  
Adding Service Monitor to Unified Communications Manager  
If you removed a Service Monitor Application Billing Server from Unified Communications Manager  
before upgrading, add the Service Monitor Application Billing Server back to Unified Communications  
Manager.  
Note  
Perform this task on Unified Communications Manager version 5.x and later only. Perform this task only  
while Service Monitor is up and running.  
Step 1  
Step 2  
Step 3  
Step 4  
Launch Unified Communications Manager Serviceability.  
Select Tools > CDR Management.  
Scroll down to Billing Applications Server Parameters and click Add New.  
Enter data in the following fields:  
Host Name / IP Address—Enter the IP address of the system where Cisco Unified Service Monitor  
is installed.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-14  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Upgrading to Service Monitor 8.6  
User Name—Enter smuser.  
Note  
Do not enter any username other than smuser.  
Password—Enter a password. The default password is smuser. To change this password:  
Change it in Service Monitor first. (For more information, see the online help.)  
Enter the same password that you entered for smuser while configuring other settings in Service  
Monitor.  
Note  
If you changed the password in Service Monitor and Unified Communications Manager does  
not immediately accept the new password, wait one minute and enter the new password  
again.  
Select SFTP Protocol.  
Directory Path—Enter /home/smuser/.  
Note  
Do not enter any directory path other than /home/smuser.  
Step 5  
Click Add. In some cases, for CDR/CMR files to be delivered to a newly added billing server, you must  
first restart the CDR Repository Management Service:  
a. From Unified Communications Manager Serviceability, select Tools > Control Center - Network  
Services.  
b. From the list of servers, select the publisher.  
c. Scroll down to CDR Services.  
d. Select the Cisco CDR Repository Manager radio button.  
e. Click the Restart button.  
Performing Post-Upgrade Configuration for Cisco 1040s  
This section provides the minimum steps required to enable Cisco 1040s to register with  
Service Monitor 8.6. For complete configuration procedures, including how to add NAMs and Unified  
Communications Managers to Service Monitor, see the configuration checklists in User Guide for Cisco  
Unified Service Monitor.  
Step 1  
Step 2  
Configure the default configuration file:  
a. Select Administration > Configuration > Cisco 1040 > Setup. The Setup page appears.  
b. Update the Default Configuration to TFTP Server fields:  
Image Filename—Enter SvcMonAB2_102.img.  
Primary Service Monitor—Enter an IP address or DNS name.  
Secondary Service Monitor—(Optional) Enter an IP address or DNS name.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-15  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Upgrading to Service Monitor 8.6  
Note  
Occasionally, updated binary image files might be released. For the names of supported binary image  
files, see Cisco Unified Service Monitor 8.6 Compliance Matrix.  
c. Click OK. Service Monitor stores the default configuration file locally and copies it to the TFTP  
servers that are configured in Service Monitor.  
d. Copy the binary image file, SvcMonAB2_102.img, from NMSROOT\ImageDir on the Service  
Monitor server to the root location on the TFTP server. (NMSROOT is the directory where Service  
Monitor is installed; its default location is C:\Program Files\CSCOpx.)  
e. Verify that the newly created QOVDefault.CNF file is on the TFTP server. If it is not, upload it to  
the root location on the TFTP server from the Service Monitor image file directory,  
NMSROOT\ImageDir. For examples of the configuration files, see Sample Cisco 1040 Sensor  
Note  
If you use Unified Communications Manager as a TFTP server, Service Monitor cannot copy  
configuration files to Unified Communications Manager due to security settings on the latter. You will  
need to manually upload the configuration file as described in Step 2e. After uploading the configuration  
file, reset the TFTP server on Unified Communications Manager. For more information, see Unified  
Communications Manager documentation.  
Step 3  
Wait a few minutes and verify that the Cisco 1040s have registered to Service Monitor. If they have not,  
reset the Cisco 1040s by disconnecting them from power and connecting them again.  
Warning  
Before disconnecting a Cisco 1040 Sensor, read the regulatory compliance and safety information in  
Quick Start Guide for Cisco 1040 Sensor.  
Sample Cisco 1040 Sensor Configuration Files  
Service Monitor creates these files when you edit the configuration through the user interface and when  
a Cisco 1040 uses the default configuration file to register. These samples are provided to enable you to  
confirm that the contents of a sensor configuration file are correct.  
Note  
Always use the Service Monitor user interface to edit sensor configuration files to ensure that Service  
Monitor functions properly. Do not edit Cisco 1040 Sensor configuration files on the TFTP server.  
Default 1040 Sensor Configuration File—QOVDefault.CNF  
In the default configuration file, the ID, A000, is a placeholder; an IP address or alternatively a DNS  
name is provided for the Receiver. The last updated data and time represent the last time that the default  
configuration was updated from the Service Monitor user interface.  
Receiver=10.92.99.22;;  
ID=A000  
Image=SvcMonAB2_102.img  
LastUpdated=11_16_2010-6_59_46.78  
CDPGlobalRunState=true  
SyslogPort=UDP:5666  
SkinnyPort=TCP:2000  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-16  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Uninstalling and Reinstalling Service Monitor  
MAC-Specific 1040 Sensor Configuration File—QOV001120FFCF18.CNF  
In a MAC-specific configuration file, the default ID, A000, has been replaced by the sensor MAC  
address; the receiver DNS name is included, although an IP address could appear instead. The last  
updated date and time represent the last time that the configuration file was updated; this could be when  
the sensor registered with Service Monitor or when a user edited the configuration file from the Service  
Monitor user interface.  
Receiver=qovr-weekly;;  
ID=001120FFCF18  
Image=SvcMonAB2_102.img  
LastUpdated=11_13_2010-4_3_57.578  
CDPGlobalRunState=true  
SyslogPort=UDP:5666  
SkinnyPort=TCP:2000  
Uninstalling and Reinstalling Service Monitor  
This section contains the following:  
Uninstalling Service Monitor  
Caution  
Step 1  
You must use the Cisco Unified Service Monitor uninstallation program to remove Service Monitor from  
your system. If you try to remove the files and programs manually, you can seriously damage your  
system.  
Use this procedure to uninstall Service Monitor.  
As the local administrator, log in to the system on which Service Monitor is installed, and select Start >  
All Programs > Cisco Unified Service Monitor > Uninstall Cisco Unified Service Monitor to start  
the uninstallation process.  
Note  
If WMI Services are running on the system, a message is displayed stating that, for the  
uninstallation to proceed, the script will stop WMI Services, complete the uninstallation, and  
restart WMI Services. To continue, click Yes.  
A confirmation dialog box is displayed.  
Click Yes if you want to proceed with uninstallation.  
Click Finish and restart your system.  
Step 2  
Step 3  
Step 4  
Delete any files that remain in the NMSROOT directory. NMSROOT is the directory where Service  
Monitor was installed; its default location is C:\Program Files\CSCOpx.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-17  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Uninstalling and Reinstalling Service Monitor  
Reinstalling Service Monitor  
Note  
To reinstall Service Monitor on a system with Operations Manager, you must reinstall both Operations  
Manager and Service Monitor; see Installation Guide for Cisco Unified Operations Manager (Includes  
Service Monitor).  
The existing database is preserved when you reinstall Service Monitor. However, the reinstallation  
procedure does not perform a backup prior to copying and installing new files on your system. To  
For information about passwords that you will be asked to set during reinstallation, see User Inputs for  
Use this procedure to install Service Monitor 8.6 on a system where Service Monitor 8.6 is already  
installed.  
Step 1  
As the local administrator, log in to the machine on which you will reinstall the Service Monitor  
software.  
Step 2  
Step 3  
Unzip the file that you obtained through the eDelivery system.  
Click the setup.exe file.  
The Cisco Unified Service Monitor Setup Program window opens.  
Read any messages and acknowledge them to continue:  
Step 4  
If WMI Services are running on the system—A message is displayed stating that, for the installation  
to proceed, the script will stop WMI Services, complete the installation, and restart WMI Services.  
Click OK.  
A message is displayed stating that a database backup will not be performed. Click OK.  
The Welcome window appears.  
Step 5  
Step 6  
Click Next. The Software License Agreement window appears.  
Select the I accept the terms of the license agreement radio button and click Next.  
The installation program checks the name lookup and DHCP. The Setup Type dialog box appears.  
Select the Typical radio button and click Next. The Select Applications window appears.  
Select all radio buttons. Click Next.  
Step 7  
Step 8  
The installation program checks dependencies and system requirements.  
The System Requirements window displays the results of the requirements check and advises whether  
the installation can continue. One of the following might occur:  
If there is not enough disk space for the installation, the installation program displays an error  
message and stops.  
If your system has less than 4 GB of RAM, you can continue with the installation after reading this  
message:  
WARNING: System memory is less than the requirement for Cisco Unified Service  
Monitor system to support high call volume.  
Please refer to Service Monitor documentation for more details and upgrade the  
memory to at least 4GB if you have high call volume.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-18  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Configuring Your System for SNMP Queries  
If your disk space is less than 73000 MB, you can continue with the installation after reading this  
message:  
Current disk space <nnnn> MB is less than Recommended disk space 73000 MB and it may  
affect performance.  
Note  
The disk space displayed in the System Requirements window is the least amount you need  
to install and start Service Monitor. The Recommended disk space (see table on page 1-2)  
is the minimum space necessary to use Service Monitor.  
If other minimum requirements are not met, the installation program displays an appropriate  
message and continues installing.  
Step 9  
Click Next. The Change casuser Password window appears.  
Step 10 Enter and confirm a password or click Next to have the system generate a random password for you. The  
Summary window appears, displaying the current settings.  
Step 11 Click Install.  
Step 12 The Summary window appears, displaying the current settings.  
Step 13 Click Install. The reinstallation proceeds and the Setup Complete window appears.  
Step 14 Click Finish.  
Configuring Your System for SNMP Queries  
Service Monitor implements the system application MIB. If you want to use a third-party SNMP  
management tool to make SNMP queries against the server where Service Monitor is installed, Windows  
SNMP service must be installed.  
Note  
To improve security, the SNMP set operation is not allowed on any object ID (OID) in the system  
application MIB. After installation of Service Monitor, you should modify the credentials for Windows  
SNMP service to not use a default or well-known community string.  
You can install Windows SNMP service before or after you install Service Monitor. Use this procedure  
to determine whether Windows SNMP service is installed.  
Step 1  
Verify that Windows SNMP service is installed on the server where you will install Service Monitor. To  
do so:  
a. Open the Windows administrative tool Services window.  
b. Verify the following:  
SNMP Service is displayed on the Windows administrative tool Services window; if so,  
Windows SNMP service is installed.  
SNMP service status is Started; if so, SNMP service is running.  
Step 2  
If Windows SNMP service is not installed, install it.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-19  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Chapter 2 Installing, Uninstalling, and Upgrading Service Monitor  
Configuring Your System for SNMP Queries  
Note  
Windows online help provides instructions for adding and removing Windows components, such as  
Windows SNMP service. To locate the instructions, try selecting the Index tab in Windows online help  
and entering a keyword or phrase, such as install SNMP service.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
2-20  
Download from Www.Somanuals.com. All Manuals Search And Download.  
C H A P T E R  
3
Getting Started with Service Monitor  
This section contains the following topics:  
Configuring Security  
Service Monitor relies on security that you configure using Common Services. To get started, see these  
topics:  
For more information, see Setting Up Security in the Common Services online help.  
Configuring Users (ACS and Local RBAC)  
What Service Monitor users can see and do is determined by the user role. Service Monitor supports two  
Common Services modes for authenticating users:  
Local RBAC—You select a supported login module to provide authentication and authorization. By  
default, Common Services uses the Local login module to assign roles, along with privileges  
associated with those roles. For more information, refer to Configuring Users Using the Common  
ACS—In ACS mode, authentication and authorization is provided by Cisco Secure Access Control  
Server (ACS). Cisco Secure ACS specifies the privileges associated with roles, ensuring that users  
perform only certain tasks.  
To use ACS mode, Cisco Secure ACS must be installed on your network and Service Monitor must  
be registered with Cisco Secure ACS. For more information, see Security Configuration with  
Note  
When Operations Manager and Service Monitor coreside on the same machine, the AAA  
mode configuration in use is same for both the products.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
3-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
               
Chapter 3 Getting Started with Service Monitor  
Configuring Security  
Configuring Users Using the Common Services Local Login Module  
Step 1  
Select Administration > Server Administration (Common Services) > Security > Local User Setup.  
The Local User Setup page appears.  
Step 2  
Step 3  
Step 4  
Click Add. The User Information page appears.  
Enter the user information.  
Click OK.  
To understand how each user role relates to tasks in Service Monitor, view the Permission Report.  
Step 1  
Step 2  
Select Administration > Server Administration (Common Services) > Reports > Permission  
Report > Generate Report. A new window opens.  
From the Go to list, select Cisco Unified Service Monitor to view the task list for Service Monitor.  
Enabling SSL Between the Browser and the Server  
When you start Service Monitor, the login page always opens in secure mode, providing secure access  
between the client browser and the Service Monitor server. In secure mode, Secure Socket Layer (SSL)  
is used to encrypt the transmission channel between the browser and the server. To use secure mode  
throughout Service Monitor, enable SSL in Common Services.  
Note  
If you enable SSL on a system with Service Monitor and Operations Manager, SSL is enabled for both  
applications.  
Step 1  
Select Administration > Server Administration (Common Services) > Security > Browser-Server  
Security Mode Setup. The Browser-Server Security Mode Setup dialog box appears.  
Step 2  
Step 3  
Step 4  
Step 5  
Select the Enable radio button.  
Click Apply.  
Log out from Service Monitor, and close all browser sessions.  
Restart the daemon manager from the command line by entering these commands:  
net stop crmdmgtd  
net start crmdmgtd  
Step 6  
Restart the browser and use the secure URL to restart Service Monitor:  
https://<servername>:<https port>  
Note  
If you enter http://<servername>:1741 in your browser and SSL is enabled, you will be directed  
to the secure URL.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
3-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
       
Chapter 3 Getting Started with Service Monitor  
Configuring Service Monitor  
Configuring Service Monitor  
The Service Monitor CDR Call Report relies on system-defined data and user-defined dial plans. To  
define dial plans—and call categories—see Configuring Call Classification in User Guide for Cisco  
Unified Service Monitor.  
Note  
If you use Service Statistics Manager for long-term reporting on Service Monitor data:  
Be aware that Service Statistics Manager relies on Service Monitor to categorize call data.  
Ensure that you configure call classification in Service Monitor before you install or upgrade to  
Service Statistics Manager 8.6.  
To configure Service Monitor, see the appendix Configuration Checklists and Tips in User Guide for  
Cisco Unified Service Monitor.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
3-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
       
Chapter 3 Getting Started with Service Monitor  
Configuring Service Monitor  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
3-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  
A P P E N D I X  
A
User Inputs for Installation, Reinstallation, and  
Upgrade  
This appendix provides information on the user inputs during Service Monitor installation,  
reinstallation, and upgrade.  
This appendix contains:  
User Inputs for Typical Installation  
Table A-1 lists information you need to supply when installing Service Monitor for the first time in  
Typical mode.  
Table A-1  
User Inputs for New Installation: Typical  
Settings  
Value  
Applications to install  
Select the applications you want to install.  
No default values.  
Password for admin user  
Enter the admin password. For more information on passwords, see  
Password for System  
Identity account  
No default values.  
Enter the System Identity account password. For more information on  
passwords, see Password Information.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
         
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
User Inputs for Custom Installation  
Table A-1  
User Inputs for New Installation: Typical (continued)  
Settings  
Value  
Password for casuser  
Mail Settings:  
The password is generated randomly if you leave the field blank.  
Note  
Appears if IIS was detected on your system, and you indicated  
that you would like to avoid port conflict between IIS and Service  
Monitor by reconfiguring the default HTTPS port. Otherwise,  
Mail Settings appears only during a Custom installation.  
HTTPS port  
Administrator’s e-mail  
address  
The default values are:  
SMTP server name  
Port number 443—Enter a value from the range that is displayed.  
localhost name.  
Table A-2 lists information you need to enter during an upgrade installation in Typical mode.  
Table A-2  
User Inputs for Upgrade Installation: Typical  
Settings  
Value  
Password for casuser  
account  
The password is generated randomly if you leave the field blank. (See  
Applications to install  
Select the applications you want to install.  
Table A-3 lists information you need to enter while reinstalling in Typical mode.  
Table A-3  
User Inputs for Reinstallation: Typical  
Settings  
Value  
Password for casuser  
account  
The password is generated randomly if you leave the field blank. (See  
Applications to install  
Select the applications you want to install.  
User Inputs for Custom Installation  
Table A-4 lists the information you must enter while installing for the first time in Custom mode.  
Table A-4  
User Inputs for a New Installation: Custom  
Settings  
Value  
Destination folder  
The default location is System drive:\Program Files\CSCOpx. Select another  
location if you want to install in a specific location. We recommend that you  
specify a short path for the destination folder.  
Applications to  
install  
Select the applications you want to install.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
       
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
User Inputs for Custom Installation  
Table A-4  
User Inputs for a New Installation: Custom (continued)  
Value  
Settings  
Password for users  
admin and guest  
(Mandatory)  
No default values. Enter the admin and guest passwords. For more information  
on passwords, see Password Information.  
Password for System No default values.  
Identity account  
Enter the system identity account password. For more information on  
passwords, see Password Information.  
(Mandatory)  
Password for user  
The password is generated randomly if you leave the field blank.  
casuser  
Password for the  
database  
Enter the database password. For more information on passwords, see  
(Mandatory)  
Mail Settings:  
(Mandatory)  
The default values are:  
443—If IIS is installed on your server, enter a port number from the range  
HTTPS port  
displayed.  
Administrator’s  
e-mail address  
localhost name.  
SMTP server  
name  
Data for the  
Self-signed  
Certificate:  
(Mandatory)  
By default, the self-signed certificate is generated using the organization that  
Windows is registered to, and the host name.  
You must enter the host name. You can leave the other fields blank.  
Note  
Common Services allows you to create security certificates to enable  
SSL communication between your client browser and management  
server. Self-signed certificates are valid for five years from the date of  
creation. When a certificate expires, the browser prompts you to install  
the certificate again from the server where you have installed Common  
Services. In Typical mode, this certificate is automatically generated.  
Country Code  
State  
City  
Organization  
Name  
Organization  
Unit Name  
Host name  
E-mail Address  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
User Inputs for Custom Installation  
Table A-5 lists the information you must enter during an upgrade installation in Custom mode.  
If Service Statistics Manager is installed in your network and you change either of the following:  
Note  
The password for the user admin  
The destination location (the directory in which Service Monitor is installed)  
Service Statistics Manager stops collecting data from Service Monitor. You can reenable data collection  
by performing the procedures that are documented in Release Notes for Cisco Unified Service Statistics  
Manager 1.3.  
Table A-5  
User Inputs for an Upgrade Installation: Custom  
Settings  
Value  
Applications to  
install  
Select the applications you want to install.  
Password for users  
admin and guest  
(Optional)  
You can change the passwords for the admin and guest users. To keep the  
existing passwords, leave the fields blank. (See Fixing Problems That Can  
Password for System No default values.  
Identity account  
Enter the System Identity account password. For more information on  
passwords, see Password Information.  
(Mandatory)  
Password for the user If you do not enter a password, the setup program generates a random password  
casuser (Optional)  
for you.  
Password for the  
Leave the fields blank to use the existing password.  
database (Optional)  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
User Inputs for Custom Installation  
Table A-5  
User Inputs for an Upgrade Installation: Custom (continued)  
Settings  
Value  
Mail Settings:  
(Optional)  
You can choose to keep the existing information.  
HTTPS port  
Administrator’s  
e-mail address  
SMTP server  
name  
Data for the  
Self-signed  
Certificate:  
(Mandatory)  
You can change the Self-signed certificate information. By default, the  
installation program uses the existing self-signed certificate information.  
If you want to generate a new certificate, uncheck the Keep Existing Certificate  
check box, and enter the country code, state, city, company, organization, and  
host name for HTTPS.  
Country Code  
State  
You must enter the host name. You can leave the other fields blank.  
City  
Note  
Common Services allows you to create security certificates to enable  
SSL communication between your client browser and management  
server. Self-signed certificates are valid for five years from the date of  
creation. When the certificate expires, the browser prompts you to  
install the certificate again from the server where you have installed  
Common Services. In Typical mode, this certificate is automatically  
generated.  
Organization  
Organization  
Unit Name  
E-mail Address  
Table A-6 lists the information you must enter while reinstalling in Custom mode.  
Note  
If you have Service Statistics Manager installed and you change either of the following:  
The password for the user admin  
The destination location (the directory in which Service Monitor is installed)  
Service Statistics Manager stops collecting data from Service Monitor. You can reenable data collection  
by performing the procedures that are documented in Release Notes for Cisco Unified Service Statistics  
Manager 1.3.  
Table A-6  
User Inputs for Reinstallation: Custom  
Settings  
Value  
Destination folder  
The default location is System drive:\Program Files\CSCOpx.  
We recommend that you specify a short path for the destination folder.  
Password for users  
admin and guest  
(Optional)  
You can change the passwords for the admin and guest users. To keep the  
existing passwords, leave the fields blank.  
(If you change the password for the admin user, see Fixing Problems That Can  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-5  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
User Inputs for Custom Installation  
Table A-6  
User Inputs for Reinstallation: Custom (continued)  
Value  
Settings  
Password for System You can change the passwords for the System Identity account. To keep the  
Identity account  
(Mandatory)  
existing passwords, leave the fields blank.  
Password for user  
casuser (Optional)  
If you do not enter a password, the setup program generates a random password  
Password for the  
Leave the fields blank to retain the existing password.  
database (Optional)  
Mail Settings:  
(Optional)  
You can choose to keep the existing information.  
HTTPS port  
Administrator’s  
e-mail address  
SMTP server  
name  
Data for the  
Self-signed  
Certificate:  
(Mandatory)  
By default, the self-signed certificate is generated using the organization that  
Windows is registered to, and the host name.  
You must enter the host name. You can leave the other fields blank.  
Note  
Common Services allows you to create security certificates to enable  
SSL communication between your client browser and management  
server. Self-signed certificates are valid for five years from the date of  
creation. When the certificate expires, the browser prompts you to  
install the certificate again from the server where you have installed  
Common Services. In Typical mode, this certificate is automatically  
generated.  
Country Code  
State  
City  
Organization  
Name  
Organization  
Unit Name  
Hostname  
E-mail Address  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-6  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
Password Information  
Password Information  
This topic provides information on the use of passwords during installation.  
It contains:  
Password Rules for a New Installation  
The following rules apply for a new installation:  
In Typical mode, admin, casuser, and System Identity account passwords are mandatory. The  
installation program generates guest and database passwords randomly.  
In Custom mode, admin, guest, System Identity account, and database passwords are mandatory.  
You can either enter the casuser password or allow the installation program to randomly generate it.  
Fixing Problems That Can Occur After You Change Passwords  
During upgrade and reinstallation, you might change the passwords for the admin user and for the  
casuser account. Table A-7 lists the problems that can occur and provides steps you can take to resolve  
them.  
Table A-7  
Potential Problems  
Password Changed  
Potential Problem  
Workaround  
admin  
Service Statistics Manager  
If Service Statistics Manager is installed in  
loses contact with Operations your network, reestablish contact by  
Manager and Service  
Monitor.  
performing the procedures in Release Notes  
for Cisco Unified Service Statistics Manager  
1.3.  
casuser  
Service Monitor credentials The casuser password on the Service Monitor  
fail when accessing a Unified server must match the casuser password on  
Communications Manager  
the Unified Communications server. Log in  
version 4.x system for which to the Windows server where Unified  
Windows authentication is  
configured.  
Communications Manager is installed and  
update the casuser password.  
Note  
If you do not know the casuser  
password on the Service Monitor  
server, change it; see Changing the  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-7  
Download from Www.Somanuals.com. All Manuals Search And Download.  
           
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
Password Information  
Password Rules for an Upgrade Installation  
During an upgrade installation, the casuser password is requested; other passwords are retained.  
Password Rules for Reinstallation  
The following rules apply for reinstallation:  
In Typical mode, the installation program retains passwords for admin, guest, and database.You can  
either enter the casuser password or allow the installation program to randomly generate it. (See  
In Custom mode, you can choose to enter new admin, guest, system identity account, and database  
passwords or retain most existing passwords. You can either enter the casuser password or allow the  
installation program to randomly generate it. (See Fixing Problems That Can Occur After You  
Password Descriptions  
The types of passwords are as follows:  
Common Services admin Password  
When entering the password for the admin user, include a minimum of five characters.  
The admin user account is the default administrator; you must use the admin username and password to  
log in to Service Monitor after initial installation. (Be sure to write down the password.)  
You are prompted to enter this password in both Typical and Custom modes of installation.  
System Identity Account Password  
When entering the System Identity account password, use a minimum of five characters.  
You are prompted to enter this password in both Typical and Custom modes of installation.  
The System Identity account is used in a multiple-server environment. Communication among multiple  
servers is enabled by a “trust” model addressed by certificates and shared secrets. For more information,  
see the Common Services online help.  
Note  
You need a System Identity account to configure security with Cisco Secure ACS (which must be  
installed on a separate server) and to configure the DCR in master and slave mode. (Operations Manager  
supports the DCR; Service Monitor does not support it.)  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-8  
Download from Www.Somanuals.com. All Manuals Search And Download.  
         
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
Password Information  
Common Services Guest Password  
When entering the password for the Common Services guest account, use a minimum of five characters.  
Use this password to log into the Common Services server as a guest user. You are prompted to enter  
this password in Custom installation mode. In Typical mode, this password is randomly generated.  
Common Services Database Password  
When entering database passwords:  
Use a minimum of five characters and a maximum of 15 characters.  
Do not start the password with a number.  
Do not insert spaces between characters.  
Do not use any special characters.  
Changing Passwords  
These topics explain how to change the passwords for the admin user and casuser accounts using utilities  
(or the Common Services user interface, if possible):  
Changing the Common Services Admin Password  
Note  
If you change the admin password and Service Statistics Manager is in your network, it will lose contact  
with Operations Manager and Service Monitor. To reestablish contact, perform the procedures in  
You can change your Common Services Admin password either by using the Common Services user  
password recovery utility or from the user interface.  
Changing the Admin Password Using the Password Recovery Utility  
Step 1  
Step 2  
Stop the daemon manager by entering the following at the shell prompt:  
net stop crmdmgtd  
Go to NMSROOT\bin directory and enter:  
NMSROOT\bin\resetpasswd username  
where NMSROOT is the directory where you have installed Service Monitor.  
A message appears:  
Enter new password for username:  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-9  
Download from Www.Somanuals.com. All Manuals Search And Download.  
         
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
Password Information  
Step 3  
Step 4  
Enter the new password for username.  
Start the daemon manager by entering the following at the command prompt:  
net start crmdmgtd  
Changing the Admin Password from Common Services  
Step 1  
Step 2  
Log in with username admin.  
Select Administration > Server Administration (Common Services) > Security > Local User Setup.  
The Local User Setup page appears.  
Step 3  
Click Modify My Profile.  
The My Profile window appears.  
Step 4  
Step 5  
Step 6  
Step 7  
Enter the password in the Password field.  
Re-enter the password in the Verify field.  
Enter the e-mail ID in the E-mail field.  
Click OK.  
Changing the casuser Password  
Caution  
Changing the casuser password might cause Service Monitor credential failure when accessing a Unified  
Communications Manager version 4.x system for which Windows authentication is configured. Be  
prepared to log into the Windows server where Unified Communications Manager is installed to update  
the casuser password to match the new casuser password that you enter.  
Step 1  
At the command prompt, enter:  
NMSROOT\setup\support\resetCasuser.exe  
Three options are displayed:  
1. Randomly generate the password  
2. Enter the password  
3. Exit.  
Step 2  
Step 3  
Enter 2, and press Enter.  
A message appears, prompting you to enter the password.  
Confirm the password.  
If a local user policy is configured on the Service Monitor server and you enter a password that does not  
match the password policy, the application exits with an error message. For more information, see  
Setting up Local User Policy in the Common Services online help.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-10  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
Password Information  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-11  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Appendix A User Inputs for Installation, Reinstallation, and Upgrade  
Password Information  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
A-12  
Download from Www.Somanuals.com. All Manuals Search And Download.  
A P P E N D I X  
B
Licensing  
This appendix provides licensing information for Cisco Unified Service Monitor (Service Monitor). It  
contains the following sections:  
Licensing Overview  
Service Monitor features software-based product registration and license key technologies. Licensing  
ensures that you possess a licensed copy of Service Monitor.  
Note  
Licensing uses node-locking technology. The license file can only be used with the MAC address  
that you supply.  
To license, install, and run Service Monitor on VMware, you must configure a static address for the  
virtual machine.  
To determine whether Service Monitor is licensed, see Verifying License Status, page B-1. If you do not  
have a license or you want to upgrade your license, see Licensing Scenarios, page B-2. For information  
about messages that are displayed during product evaluation, see Licensing Messages, page B-3.  
Verifying License Status  
Step 1  
Select Administration > Server Administration (Common Services) > Administration > Licensing.  
The Licensing Information page appears, displaying the information in the following table.  
Column  
Name  
Description  
Abbreviated product name—For Service Monitor, this is SM.  
Version  
Product version—A.b.c, where A is the major version number, b is the  
minor version number, and c is the service pack number. For  
example, SM Standard 8.6 indicates version 8.6 without service  
packs.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
B-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
             
Appendix B Licensing  
Licensing Overview  
Column  
Description  
Size  
Limit—Number of phones that Service Monitor is licensed to  
support, up to a maximum value.  
Note  
The licensing process permits you to install any valid  
licenses, even if, as a result, the number of phones exceeds  
the maximum value. To move a license from one Service  
Monitor server to another, you must open a service request.  
For more information, see Obtaining Documentation and  
Status  
One of the following:  
Purchased—You have a registered, licensed product.  
Evaluation—This license will expire on the expiration date;  
Service Monitor will stop running.  
Expiration Date  
Date on which Service Monitor stops running—Applies to evaluation  
licenses. The evaluation period lasts for 90 days.  
Note  
To view the installed software version, select the About link in the upper-right corner of the Service  
Monitor home page.  
Licensing Scenarios  
Table B-1 describes what to do in different scenarios if you do not have a licensed, registered copy of  
Service Monitor or if you want to increase the number of phones supported.  
Table B-1  
How to Obtain and Register a License  
Scenario  
What to Do  
Installing with a purchased license.  
1. Before installing, obtain a license file. See Licensing  
Note  
You can install Service Monitor without the license  
file. You can upgrade your license after installation.  
2. During installation, select License File Location, and  
provide the location of your license file.  
Installing with an evaluation license. During installation, select Evaluation Only. Evaluation  
versions are active for 90 days, after which you are required to  
Note  
The evaluation license is  
limited to monitoring 10,000  
phones.  
purchase a license.  
To upgrade to a purchased license after installation, obtain a  
PAK and license file for the Service Monitor software version.  
For information on the licensing process, see Licensing  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
B-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Appendix B Licensing  
Licensing Process  
Table B-1  
How to Obtain and Register a License (continued)  
Scenario  
What to Do  
Upgrading a license—Either of these: See Licensing Process, page B-3.  
Upgrading from an evaluation  
license to a purchased license  
Installing an incremental license  
to support additional phones  
Moving Service Monitor to another  
server.  
Call the Cisco Technical Assistance Center (TAC) for  
assistance. For more information, see Obtaining  
Licensing Messages  
If you have installed the evaluation version of Service Monitor, you must obtain the license file from  
Cisco.com to continue to use the product after the 90-day evaluation period. For details, see Licensing  
Before expiry of the evaluation license, you will see the following prompt:  
This software is provided for evaluation purposes only and will expire in XX days. If this  
is not an evaluation copy, please click this link for information about obtaining a valid  
purchase license. Click here for current licensing information. Otherwise, please contact  
your Cisco representative for purchasing information.  
This message is displayed as an alert after you log in and try to access Service Monitor. If you fail to  
upgrade your evaluation license, all Service Monitor processes will run, but access to Service Monitor  
functionality will be prohibited.  
Licensing Process  
The Service Monitor license file includes support for a set number of phones. You can purchase  
incremental licenses to support additional phones and monitor up to a maximum number of phones with  
a single Service Monitor. For each incremental license that you purchase, you will receive a PAK, and  
you must use that PAK to obtain a license file.  
This process applies to new installations and license upgrades:  
1. Obtain a Product Authorization Key (PAK)—The PAK is used to register Service Monitor, and any  
additional phone support that you might purchase for Service Monitor, on Cisco.com, and it contains  
resource limitations. See Obtaining a PAK, page B-4.  
2. Obtain a license file—A license file is sent to you after you register the PAK on Cisco.com. See  
3. Copy the license file to the server where Service Monitor is to be installed. If Service Monitor is  
already installed and you are upgrading your license file, you must register the license file with  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
B-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Appendix B Licensing  
Licensing Process  
Obtaining a PAK  
The PAK is located on the software claim certificate. The software claim certificate is available in one  
of these ways:  
If your order included hardware, a printed software claim certificate is included in the package.  
If your order did not include hardware, you can obtain the software claim certificate through the  
eDelivery system; for information on eDelivery, see  
Obtaining a License File  
Note  
If you plan to install Service Monitor on a VMware server, you must supply a static MAC address to  
obtain a license file. Service Monitor does not work when a dynamic MAC address is configured for the  
virtual machine. For more information, see VMware Guidelines, page 1-5.  
Step 1  
Register the PAK and the MAC address of the system where Service Monitor is installed with Cisco.com  
at http://www.cisco.com/go/license. You will be asked to log in. You must be a registered user of  
Cisco.com to log in.  
Note  
The MAC address is required because licensing uses node-locking technology. The license file  
can only be used with the MAC address that you supply.  
The license file will be e-mailed to you. After you obtain the license file, register the license with the  
Service Monitor server.  
Registering a License File with Service Monitor  
Caution  
This procedure registers a license even when, as a result, license size exceeds the maximum number of  
phones that Service Monitor supports on a single server. When the number of phones in Service Monitor  
exceeds the limit, data from additional phones is not collected or analyzed.  
Step 1  
Copy the license file to the Service Monitor server, into a directory with read permission for the  
username casuser or the user group casuser.  
Note  
If you copy a folder that contains the license file to the Service Monitor server, be sure to provide  
read permission for casuser on the folder as well as on the license file.  
Step 2  
Install the license:  
a. Select Administration > Server Administration (Common Services) > Administration >  
Licensing. The License Information page appears.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
B-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  
                 
Appendix B Licensing  
Licensing Process  
b. Click the Update button. The Select License File dialog box appears.  
c. Browse to and select the license file:  
Click the Browse button.  
Browse to the location where you copied the license file in Step 1.  
Select the license file.  
Click OK. The Licensing Information page is updated. For more information, see Table B-2.  
If you purchased more than one license, repeat Step 2 to install each additional license.  
If you encounter errors, ensure that the license file:  
Is in a directory with read permission for the username casuser or the user group casusers.  
Contains the correct MAC address in HOSTID=<MAC>. (Use a text editor to view the contents  
of the license file.) If the value of HOSTID is not correct, you must open a service request. See  
Table B-2  
License Registration Result  
License registered.…  
Expected Result on Licensing Information Page  
Upgrade from an evaluation license  
Entry in the Status column changes from Evaluation to  
Purchased.  
Increase number of phones supported  
Entry in the Size column increases per license size.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
B-5  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Appendix B Licensing  
Licensing Process  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
B-6  
Download from Www.Somanuals.com. All Manuals Search And Download.  
A P P E N D I X  
C
Security Configuration with Cisco Secure ACS  
To configure Service Monitor to use Cisco Secure ACS for authentication and authorization, work  
through these topics in order:  
Cisco Secure ACS Support  
Service Monitor supports the ACS mode of authentication and authorization. To use this mode, you must  
have a Cisco Secure Access Control Server (ACS), installed in your network on a server separate from  
the one where Service Monitor is installed. For the supported software version, see Table 1-1.  
Service Monitor Integration Notes  
Service Monitor (and Common Services) integrate with Cisco Secure ACS as shared profile components.  
Multiple instances of the same application—for example, Service Monitor—can use the same Cisco  
Secure ACS server for authentication and authorization.  
When you register Cisco Unified Service Monitor (and Common Services) with Cisco Secure ACS, the  
applications tasks—such as adding data source credentials to Service Monitor—and user roles—such as  
Network Administrator—for the application are imported into Cisco Secure ACS.  
You only need to register one instance of an application with Cisco Secure ACS for tasks and roles to be  
imported. If you register an application a second time, any changes that you have made to role settings,  
such as creating custom roles, are lost.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
C-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
           
Appendix C Security Configuration with Cisco Secure ACS  
Common Services Local Login Module Authentication Roles  
Note  
The Service Monitor integration with Cisco Secure ACS does not enable you to selectively filter out  
specific devices. For example, a user in a role that includes the task:  
Data Source Credentials: add, edit and verifyCan add, edit, or verify credentials in  
Service Monitor for any NAM or any Unified Communications Manager.  
Cisco 1040: view details—Can view details from Service Monitor for any Cisco 1040.  
Common Services Local Login Module Authentication Roles  
Common Services login modules enable you to use a source other than the native mechanism for  
authentication, that is the Common Services Local login module.  
After you authenticate, authorization is controlled by your role. A role is a set of tasks that you have the  
privilege to perform. By default, the Common Services Local login module authorization scheme has six  
roles. Roles are listed in Table C-1 from least privileged to most privileged.  
Table C-1  
Common Services User Roles and Privileges  
Role  
Description  
Non-ACS Mode—Common Services Local Login Module  
Help Desk  
Privileges to view some information in Service Monitor and Common  
Services.  
Example: Generate and view reports and view details for Cisco 1040.  
(Cannot perform modifications.)  
Network Operator  
Network Administrator  
Privilege to perform all Service Monitor tasks and some Common Services  
tasks.  
Example: Set up Service Monitor; add, modify, verify data source  
credentials.  
Privilege to perform all Service Monitor tasks and several Common  
Services tasks. User can also perform Network Operator tasks.  
Example: Same as Network Operator.  
System Administrator  
Super Admin  
Privilege to perform all system administration tasks.  
Example: Enable and disable debugging; set logging level.  
This role is not supported in Service Monitor.  
For tasks that are defined for Service Monitor and Common Services and the roles with privileges to  
perform the tasks, see the Permission Report in Common Services. (Select Administration > Server  
Administration (Common Services) > Reports > Permission Report > Generate Report.)  
Note  
For more information, see Common Services online help.  
We recommend that you do not modify the default Common Services roles. However, you can create  
your own custom roles for Service Monitor on Cisco Secure ACS.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
C-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Appendix C Security Configuration with Cisco Secure ACS  
Configuring the System Identity User in Common Services  
Configuring the System Identity User in Common Services  
Before you integrate the Service Monitor server with Cisco Secure ACS, ensure that you create and  
assign all privileges to a system identity user in Common Services. This topic explains how to set up a  
local user as the system identity user. (To use the Common Services admin user as the system identity  
user, see the topic Setting up system identity account in Common Services online help.)  
1. Create a local user and assign all roles to the user. (See Configuring Users Using the Common  
Note  
If the System Identity User is not configured with all Common Services Local login module  
roles (see Table C-1), authorization fails when you try perform certain tasks in Service  
Monitor and Common Services.  
2. Update the System Identity User, replacing the username with the one that you created in step 1.  
(Select Administration > Server Administration (Common Services) > Security > Multi-Server  
Trust Management > System Identity Setup.  
For more information, see Common Services online help.  
Setting Up the Cisco Secure ACS Server  
Perform these tasks in Cisco Secure ACS before you change the Common Services AAA mode to ACS:  
1. Configure ACS Administrators.  
Configure an administrator user with all privileges in Cisco Secure ACS.  
Note  
If you do not configure the administrator user with all privileges, Service Monitor  
registration with Cisco Secure ACS fails.  
Note the username and password for the administrator; you will need to enter them when you change  
the AAA mode to ACS in Common Services.  
2. Add the Service Monitor server to Cisco Secure ACS as a AAA Client.  
Configure the Service Monitor server as a AAA client in Cisco Secure ACS and do the following:  
Select authentication by TACACS + (CISCO IOS).  
Note the shared secret that you enter; you will need to enter it in Common Services when you  
change the AAA mode to ACS in Common Services.  
3. Add the System Identity User and Common Services users to Cisco Secure ACS.  
You can create a group and add users to it.  
4. Note whether the Service Monitor and Common Services applications are already registered with  
Cisco Secure ACS. To find out, select Shared Profile Components and look for:  
Cisco Unified Service Monitor  
Common Services  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
C-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
           
Appendix C Security Configuration with Cisco Secure ACS  
Changing the AAA Mode to ACS in Common Services  
For details about how to perform each of the previous tasks, see the Common Services online help.  
Changing the AAA Mode to ACS in Common Services  
Before you perform this procedure, complete the tasks in Configuring the System Identity User in  
Step 1  
Select Administration > Server Administration (Common Services) > Security > AAA Mode Setup.  
The AAA Mode Setup page appears.  
Step 2  
Step 3  
Step 4  
Next to Select a Type, select the ACS radio button. The page refreshes, displaying appropriate options.  
Under Server Details, enter an IP address for the Cisco Secure ACS server and enter a port.  
Under Login, enter:  
ACS Admin Name—Enter the name of the administrator you created in step 1. (See Setting Up the  
ACS Admin Password—Enter the password for the administrator you created in step 1. (See Setting  
ACS Shared Secret Key— Enter the shared secret you entered when you added the Service Monitor  
server to Cisco Secure ACS as a AAA client in step 2. (See Setting Up the Cisco Secure ACS Server,  
Step 5  
Decide whether to select Register all installed applications with ACS.  
Note  
If Service Monitor is registered with ACS and you register it again, you lose any custom roles  
that were previously configured in Cisco Secure ACS for Service Monitor. The same is true for  
Common Services. (To selectively register an application, see Registering an Application to  
Step 6  
Step 7  
Select the appropriate radio button (HTTP or HTTPS) under Current ACS Administrative Access  
Protocol.  
Click Apply to complete the mode change. An ACS verification status message is displayed; do one of  
the following:  
Click OK—Registers Service Monitor and Common Services tasks and users to ACS; overwrites  
any existing custom roles for Service Monitor and Common Services.  
Click Cancel—Prevents registration to ACS from occurring.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
C-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Appendix C Security Configuration with Cisco Secure ACS  
Assigning Roles to Users and User Groups in Cisco Secure ACS  
Step 8  
Restart the daemon manager for the changes to take effect. From the command line, enter these  
commands:  
net stop crmdmgtd  
net start crmdmgtd  
Registering an Application to Cisco Secure ACS from the Command Line  
A script, <NMSROOT>\bin\AcsRegCli.pl, enables you register applications to Cisco Secure ACS.  
Note  
NMSROOT is the directory where Service Monitor is installed. If you chose the default, it is  
C:\PROGRA~1\CSCOpx.  
Following are the available parameters when running the script from the CLI:  
AcsRegCli.pl -register <application name>  
Replace application name with any of the following:  
qovr—Registers Service Monitor only  
cmf—Registers Common Services only  
all—Registers all applications on the server (Cisco Unified Service Monitor and Common Services).  
Assigning Roles to Users and User Groups in Cisco Secure ACS  
You must ensure that the System Identity User in Cisco Secure ACS is assigned all roles and that  
Common Services users or user groups have been assigned the proper privileges.  
In Cisco Secure ACS, select Shared Profile Components > Cisco Unified Service Monitor. For more  
information, see these documents:  
User Guide for Cisco Secure Access Control Server 4.x  
Common Services online help. Look for these topics:  
Roles in ACS  
Assigning Roles to Users and User Groups in ACS  
Verifying the Service Monitor and Cisco Secure ACS  
Configuration  
After performing the tasks beginning with Assigning Roles to Users and User Groups in Cisco Secure  
configuration as follows:  
1. Log in to Service Monitor with a username defined in Cisco Secure ACS.  
2. Try to perform tasks, to ensure that you can perform only those tasks that you are entitled to perform  
based on the role assigned to you in Cisco Secure ACS.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
C-5  
Download from Www.Somanuals.com. All Manuals Search And Download.  
         
Appendix C Security Configuration with Cisco Secure ACS  
Verifying the Service Monitor and Cisco Secure ACS Configuration  
For example, if your privilege is Help Desk, then:  
You should be able to view the Cisco 1040s that are managed by Service Monitor.  
You should not be able to add Cisco 1040s for Service Monitor to manage, and you should not  
be able to delete them.  
If you encounter difficulties, see Authentication Failure in ACS Mode in Common Services online help.  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
C-6  
Download from Www.Somanuals.com. All Manuals Search And Download.  
I N D E X  
users 3-2  
A
AAA mode 3-1  
D
ACS mode  
authentication 3-1  
daemon manager, stopping and starting 2-8  
database backup 2-8  
user roles and privileges, configuring C-5  
audience for this document vii  
authentication  
data migration  
tool, downloading 2-9  
understanding 2-9  
ACS mode 3-1  
Local RBAC mode 3-1  
documentation viii  
audience for this vii  
typographical conventions in vii  
B
backup procedure 2-8  
E
eDelivery system, about B-4  
C
call classification  
I
data  
configuring in Service Monitor 3-3  
recording from Service Statistics Manager 2-9  
reporting  
installation preparation 2-2  
integrating CiscoWorks Server with ACS  
AAA mode setup C-4  
ACS support C-1  
CDR Call Report 3-3  
Service Statistics Manager reports 3-3  
call data, migrating 2-9  
cautions  
before you begin C-3  
roles  
assigning to users C-5  
CiscoWorks authentication C-2  
IP address, static 2-2  
license limit, surpassing B-4  
significance of viii  
Cisco Secure Access Control Server (ACS) 3-1  
Cisco Secure Agent, disabling 2-2  
Common Services, ports used by 1-9  
configuring  
L
license  
file  
SSL 3-2  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
IN-1  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Index  
obtaining B-4  
registering B-4  
security, Windows 2003 Server guidelines 2-2  
Service Statistics Manager  
PAK, obtaining B-4  
process B-3  
call categories 3-3  
call classification data, recording 2-9  
installation, order of 3-3  
scenarios B-2  
status, verifying B-1  
locale setting 2-2  
server, stopping 2-11  
upgrade, order of 2-11, 3-3  
software claim certificate, obtaining B-4  
SSL, enabling 3-2  
M
MAC address, importance of static B-4  
T
terminal services  
N
application mode 1-7  
remote desktop administration 1-7  
typographical conventions in this document vii  
non-ACS mode  
authentication 3-1  
CiscoWorks Local Login module 3-2  
users, configuring 3-2  
NTP configuration 2-3  
U
upgrade preparation 2-7  
users, configuring 3-1  
P
PAK, obtaining B-4  
Permission Report 3-1  
preparation  
V
verification, license status B-1  
virus scan, disabling 2-2  
VMware  
for installation 2-2  
for upgrade 2-7  
guidelines 1-5  
MAC address, static B-4  
software version 1-5  
R
regional settings 2-2  
registration, license B-4  
report data, migrating 2-9  
W
warnings  
significance of viii  
S
Windows 2003 Service security guidelines 2-2  
secure mode 3-2  
Secure Socket Layer 3-2  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
IN-2  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Index  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
IN-3  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Index  
Installation Guide for Cisco Unified Service Monitor  
OL-25111-01  
IN-4  
Download from Www.Somanuals.com. All Manuals Search And Download.  

Billy Goat Lawn Mower SC121H User Manual
Black Box Network Card Rackmount Remote Power Managers User Manual
Black Decker Trimmer 616081 00 User Manual
Bolens Tiller 12197 User Manual
Bowers Wilkins Speaker LCR3 User Manual
Braun Electric Shaver 1735 User Manual
Cadco Convection Oven XAF User Manual
Canon Camcorder 8063B002 User Manual
Canon Printer 6219B002 User Manual
Casio Calculator fx 55 Plus User Manual