CUCM Unrestricted or Restricted for Export-Controlled Function

[Sergey 1907]

Hey all!

I have permission to use an activation token with Export-Controlled Functionality. I need this for OAuth to work properly and CP-78xx/88xx via MRA. Should I switch to version CUCM Restricted from CUCM Unrestricted for use this activation token?

[b.winter]

Hi,

no, you don't need to switch from restricted to unrestricted.

[Sergey 1907]

Hey b.winter

That is, I just need to re-register it with a new token?

[b.winter · Accepted solution]

Hi,

I'm not sure about that, haven't had this situation up until now. I would say, yes.

To be sure, in my case, I would re-register it. Shouldn't be a problem in normal cases.

[Sergey 1907 · Accepted solution]

1) Generate new Tocken with Export-Controlled Function

2) On CUCM - System - License Management to the upper right corner and

3) Select from the drop-down list: Re-register

Thats All ))

[Nithin Eluvathingal]

Hope you are on version 14.

OAuth support for SIP registrations is extended for

• Cisco Jabber devices from Cisco Unified Communications Manager 12.5 release onwards

• SIP Phones from Cisco Unified Communications ManagerRelease 14 onwards

 

SIP OAuth Mode Prerequisites

This feature assumes that you have already completed the following:

• Ensure Mobile and Remote Access is configured and the connection is established between Unified Communication Manager and Expressway.

• Ensure Unified Communications Manager is registered to a Smart or Virtual account with allow export-controlled functionality.

• Ensure client firmware supports SIP OAuth.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/14_0/cucm_b_security-guide-1401/cucm_m_sip-oauth-mode-on-unified.html

[Sergey 1907]

Hey Nithin

Yes, I am using 14SU1. And precisely because of the options listed you above, I asked Cisco set Export-Controlled Function as Allowed in my Smart Account. I will it do now

[Sergey 1907]

And in the End:

VMware Installation:
2 vCPU: Intel(R) Xeon(R) CPU E5-2630 v3 @ 2.40GHz
Disk 1: 110GB, Partitions aligned
8192 Mbytes RAM

admin:utils sipOAuth-mode enable
Failed to set SIP OAuth mode.
SIP OAuth mode may not be enabled on an export unrestricted (XU) version of Cisco Unified CM

Executed command unsuccessfully

admin:

Epic fail.... interesting work ahead)))

[Nithin Eluvathingal]

Let me try this on my Lab. 

[Sergey 1907]

That's a good thought for Nitfin. I have 14SU1 unrestricted. I will wait for your answer

[Sergey 1907]

Hey Nithin

Have you any news for me?

[b.winter]

I don't know, if that answers your question, but regarding this discussion (https://community.cisco.com/t5/collaboration-voice-and-video/migration-from-unrestricted-to-restricted-cucm-version/ta-p/3160201) there is no way to change from unrestricted to restricted.

It seems, that you have to install a restricted version and configure / bulk everything in there.

[Sergey 1907]

I know there is no migration mechanism, but both versions support importing anything from CSV via Bulk Administrator. The main thing is to bind phones to users, the latter I will take from AD

[Nithin Eluvathingal]

You need to make use of Bulk  export/import method when migrating from unrestricted to restricted. 

[Roger Kallberg]

I thought it was possible to restore the DRS backup to do this?