CUCM Unrestricted or Restricted for Export-Controlled Function

[Sergey 1907]

Hey all!

I have permission to use an activation token with Export-Controlled Functionality. I need this for OAuth to work properly and CP-78xx/88xx via MRA. Should I switch to version CUCM Restricted from CUCM Unrestricted for use this activation token?

[Jaime Valencia]

You can restore the DRS backup from a restricted version only to a restricted version and the backup from
an unrestricted version can be restored only to an unrestricted version. Note that if you upgrade to the U.S.
export unrestricted version of Cisco Unified Communications Manager, you will not be able to later upgrade
to or be able to perform a fresh install of the U.S. export restricted version of this software

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/drs/10_0_1/CUCM_BK_D220A91D_00_disaster-recovery-system-cucm-100/CUCM_BK_D220A91D_00_disaster-recovery-system-cucm-100_chapter_011.html

[Nithin Eluvathingal]

With both methods, Unified CM mixed mode and SIP OAuth, the Export-Controlled functionality has to be allowed in Smart Licensing, and the Restricted version of Unified CM software is required. (Media and signaling encryption is not available with the Unrestricted version of Unified CM.)

Those two different methods can be used in the same deployment, for example if video endpoints, 7800/8800 Series phones, and Jabber clients are all present in the same deployment.

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Collaboration/enterprise/14/collbcvd/security.html?bookSearch=true

[Nithin Eluvathingal · Accepted solution]

You need CUCM Restricted versions for SiP oAuth.

[Jaime Valencia]

SIP OAuth with Jabber
To enable media and signaling encryption on Jabber, mixed-mode could be enabled and an LSC could
be installed on Jabber. The drawback of this approach is that installing an LSC and maintaining it can
require additional administrative overhead with Jabber. For example, if the Jabber endpoint is reset, a
new LSC would have to be installed. Instead of installing an LSC on Jabber, we recommend enabling
the OAuth token for SIP. In this mode, Jabber can perform media and signaling encryption without an
LSC and without the need to enable mixed-mode on Unified CM.
To enable the OAuth token to be used with SIP, the Export-Controlled functionality has to be allowed in
Smart Licensing, and the Restricted version of Unified CM software is required. (Media and signaling
encryption is not available with the Unrestricted version of Unified CM.)

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Collaboration/enterprise/12x/120/collbcvd.pdf

[Roger Kallberg]

AFAIK SIP OAuth has been improved in recent versions of CM so that mixed mode would not be required. Not sure if it’s the latest 12.5 versions or if it only related to 14.