UCMA 3.0: How to Create a Trusted Application Pool Using Microsoft Lync Server 2010

UCMA 3.0: How to Create a Trusted Application Pool and Trusted Application EndPoint Using Microsoft Lync Server 2010


UCMA 3.0 SDK Installation

1. Download UcmaSdkSetup.exe.
2. Launch UcmaSdkSetup.exe and follow the instructions on the screens that are displayed to accept the EULA and choose an installation location.
   
   
   By default, UCMA 3.0 SDK is installed in the %Program Files%\Microsoft UCMA 3.0 directory.
3. Follow the instructions on the screen to complete the installation.
   
   
    Installer verifying that you have all the required prerequisites. Click Install
   
   
   
   
   
   The installer also installs the Windows Media Format Runtime and prompts you to reboot before continuing.
   
   
   Install the SDK to the default location and continue.
   
   
   
   
   
   Installation is Success.
   
   
   
   
   

   Create a Trusted Application Pool Using PowerShell Cmdlets

   Open a command prompt at C:\Program Files\Microsoft Lync Server 2010\Deployment>
   
   
   Run Bootstrapper.exe /BootstrapLocalMgmt /MinCache to install the local management store components and database on the server.
   
   
   
   
   

   Create a New Trusted Application Pool

   
   

   Run Get-CsSite to get the SiteId.

   
   

   Run Get-CsService -Registrar to get the name of the Registrar.

   1. 
      

   1. Run the following PowerShell to create the trusted application pool:

   1. New-CsTrustedApplicationPool –Identity –Registrar –Site
      Example: 
      New-CsTrustedApplicationPool –Identity ts2.fabrikam.com –Registrar cs-se.fabrikam.com –Site fabrikam.com
      
      
      
      
      
      
      
      
      
      
      
      As prompted, run Enable-CsTopology to complete the operation.
      Run (Get-CsTopology -AsXml).ToString() > Topology.xml and examine its contents to see the new trusted application pool in the Lync topology

      Configure CS Management Store Replication

      Run the following PowerShell command to enable the Replica service on the new server:
      
      
      Enable-CSReplica
      The Replica service is enabled, but hasn’t done anything yet. This can be verified by running the following PowerShell command to check the replication status for the various servers in the topology:
      Get-CSManagementStoreReplicationStatus
      You can see in the screenshot below that the UpToDate property of the new server is still False
      
      
      
      
      
      
      
      
      
      
      
      
      
      Run the following PowerShell command to force the replication to run:
      Invoke-CSManagementStoreReplication
      Run Get-CSManagementStoreReplicationStatus again to verify that the new service is now up to date:
      
      
      
      
      
      
      
      
      

      1. 
         

      1. Request and Set a New Certificate

      Request a new certificate from the domain”s CA and assign it to the server. 
      Run the following PowerShell command to request a new cert:
      Request-CSCertificate -New -Type default -CA -Verbose
      In my environment, this was:
      Request-CSCertificate –New –Type default –CA dc.fabrikam.comFabrikamCA –Verbose
      Setting the –Verbose switch outputs the certificate”s thumbprint into the console, you will use this in the next step
      
      
      
      
      
      
      
      
      
      
      
      Run the following PowerShell command to set the certificate:
      Set-CsCertificate -Type Default -Thumbprint E67CB1C27750129E7DD0BC83B208FB5A2D212D1F
      
      
      
      
      
      
      
      
      
      Add a Trusted Service Port for the Application
      New-CsTrustedApplication -ApplicationId lyncadapter -TrustedApplicationPoolFqdn rtclab.example.com -Port 8008
      
      
      WARNING: The following changes must be made in order for the operation to be
      complete.
      Enable-CsTopology must still be run for all changes to take effect.
      Identity: rtclab.example.com/urn:application:lyncadapter
      ComputerGruus : {rtclab2.rtc.ca.oracle.com sip:rtclab.example.com@example.com;gruu;opaque=srvr:lyncadapter:0fA41INgRFmNiECWa340qgAA}
      
      
      ServiceGruu : 
      sip:rtclab.example.com@example.com;gruu;opaque=srvr:lyncadapter:0fA41INgRFmNiECWa340qgAA
      
      
      Protocol : Mtls
      ApplicationId : urn:application:lyncadapter
      TrustedApplicationPoolFqdn : rtclab.example.com
      Port : 8008
      LegacyApplicationName : lyncadapter
      
      
      C:\Users\Administrator.RTC>Get-CsTrustedApplication -Identity rtclab.example.com/urn:application:lyncadapter
      
      
      Identity : rtclab.example.com/urn:application:lyncadapter
      ComputerGruus : {rtclab.example.com sip:rtclab.example.com@example.com;gruu;opaque=srvr:lyncadapter:0fA41IN
      gRFmNiECWa340qgAA}
      ServiceGruu : 
      sip:rtclab.example.com@example.com;gruu;opaque=srvr:lyncadapter:0fA41INgRFmNiECWa340qgAA
      
      
      Protocol : Mtls
      ApplicationId : urn:application:lyncadapter
      TrustedApplicationPoolFqdn : rtclab.example.com
      Port : 8008
      LegacyApplicationName : lyncadapter
      C:\Users\Administrator.RTC> New-CsTrustedApplicationEndpoint -ApplicationId urn:application:lyncadapter -TrustedApplicationPoolFqdn rtclab.example.com
       -SipAddress sip:appuser@example.com -DisplayName "Application Endpoint 8008"
      
      
      Identity : CN={e34f48d5-4b44-4028-b1cf-243dae6731ca},CN=Application Contacts,CN=RTC Service,CN=Services,CN=Configuration,DC=rtc,DC=ca,DC=oracle,DC=com
      
      
      RegistrarPool : 81500797
      HomeServer : CN=Lc Services,CN=Microsoft,CN=1:1,CN=Pools,CN=RTC Service,CN=Services,CN=Configuration,DC=rtc,DC=ca,DC=oracle,DC=com
      OwnerUrn : urn:application:lyncadapter
      SipAddress : sip:appuser@example.com
      DisplayName : Application Endpoint 8008
      DisplayNumber  :
      LineURI :
      PrimaryLanguage : 0
      SecondaryLanguages : {}
      EnterpriseVoiceEnabled : True