¶ Prerequisite
- Windows server 2022
- set ip address
- set hostname
- join domain
- disable screen saver
- set power option : performance
- set page file : 12288 MB
- create domain user: acra.management
¶ Datacenter Server
Gunakan windows server 2022
Untuk spec server mengikuti guide dari avaya
Buat VM dengan kapasitas sebagai berikut:
Spec detail:
- CPU minimum 8 core
- Memory minimum 8GB
- HDD bikin 2, 120GB dan 700GB
- boleh menggunakan thin provisioning di HDD
¶ Install Windows Server 2022
Install Windows Server 2022, pada pilihan OS type pilih Windoes Server 2022 Standard (Dekstop Experience)
Pada pilihan disk partition, install windows di partisi yang 120GB
Tunggu proses install sampai selesai, VM akan otomatis restart setelah instalasi selesai
tergantung kecepatan server, proses install windows kira-kira 10 menit
Saat pertama kali windows start, berikan password Administrator
¶ Configurasi Windows Server
¶ Set IP Address
Dari Server Manager pilih IP Address
klik kanan pada ethernet0, pilih properties
pilih IPv4, lalu pilih properties
Set IP Address untuk Server Datacenter
Penting:
Datacenter server harus Join ke domain, dan DNS Server harus tertuju pada IP Domain Controller, salah ngasih DNS Server disini bisa bikin join domain nya gagal
¶ Enable Remote Desktop
Selanjutnya enable remote desktop, masih dari server manager, klik pada link Disabled di bagian remote desktop
Pilih Allow remote connection to this computer, Uncheck Allow connection only from computers running with Network Level Authentication, lalu OK
NLA atau Network Level Authentication detail bisa di baca disini : https://www.paubox.com/blog/what-is-network-level-authentication-nla
¶ Set TimeZone
Selanjutnya setting TimeZone, sesuaikan dengan TimeZone dimana Server di Install
Klik link pada bagian Time zone
Pilih Change time zone, lalu pilih UTC+7 (Bangkok, Hanoi, Jakarta), lalu pilih OK dan OK lagi
¶ Set Computer Name dan Join Domain
Klik pada link Computer Name
Pilih Change, lalu masukkan computer name, lalu OK
Windows akan restart untuk apply changes
Confirm Restart Now, tunggu restart
Setelah windows restart, login kembali dan buka lagi link Computer Name
Masukkan nama domain yang ingin di join
Windows akan menanyakan username dan password Administrator Domain
dan akan restart sekali lagi untuk apply changes
setelah restart kita bisa cek kembali dari server manager, Windows sudah berhasil join ke domain
¶ Set Page File (virtual memory)
Dari Server Manager, klik Server Name.
Kemudian dalam dialog System Properties, pilih tab Advanced
Dibagian Performance, klik button Settings
Kemudian Dalam Performance Option pilih tab Advanced, pada bagian virtual memory, klik tombol change
Unchec Automatically manage, pilih custom size dan input 12288 pada initial dan maximum size
Klik tombol Set, kemudian OK
System akan restart untuk apply changes, klik restart now
¶ Set Disk Partition
¶ Create Domain User
From Domain Controller Server, create domain user (acra.management)
Set password never expire
Set User cannot change password
¶ Assign Local policy user right for domain user acra.management
Dari Server Manager, pilih menu Tools, kemudian pilih Local Security Policy
Enable policy untuk user acra.management policy di bawah ini:
- Access this computer from network
- Adjust memory quotas for process
- Allow log on locally
- Backup files and directories
- Bypass traverse checking
- Lock pages in memory
- Log on as a service
- Log on as batch job
also do for IIS_IUSRS - Perform volume maintenance tasks
- Replace a process-level token
hasil nya seperti di bawah:
policy ini harus di assign di setiap server baik database, datacenter, recording dll
¶ Datacenter Server
Khusus untuk datacenter Server, kita perlu lakukan install SQLSERVER dan beberapa aplikasi pendukung SQL Server
¶ Install SQLSERVER
Install SQL Server versi 2019, biasanya instalasi SQL Server di lakukan customer. akan tetapi kita perlu kasih arahan beberapa parameter yang di butuhkan oleh aplikasi acra, berikut ini sebagai gambaran:
Jalankan Setup MSSSQL Server, pilih New SQL Server Stand-alone installation
Pada bagian Feature Selection aktifkan:
- Database engine service
- Full-Text Extraction for fast text search
- Client Tools Connectivity
- Integration services
Pada bagian SQLSERVER instance, pilih default
Pada bagian service accounts:
- SQLSERVER Agent : Automatic
- SQLSERVER Database engine : Automatic
- SQLSERVER Integration service : Automatic
- Grant perform volume : enable
Pada bagian Collation, set collation = Latin1_General_CI_AS
Pada bagian Server Configuration
- Authentication mode : mixed
- set sa password
- set sql server administrators
- add domain user
selanjutnya next, next, Install
Tunggu sampai proses instalasi MSSQLSERVER selesai
¶ Configure SQLSERVER
Dari SQLSERVER Configuration, pilih SQLServer Service, properties, startup parameter
tambahkan parameter -T9481
¶ Install SQLSERVER Management Studio
connect to SQLSERVER, system database, model DB
- modeldev --> 5MB --> 1MB --> Unlimited
- modellog --> 2MB --> 10% --> Unlimited
¶ Install ClearType & SMO
Install ClearType dan SMO both x86 and x64
¶ Install SQL Server Reporting Service
Install SQLServerReportingServices
¶ Configure SQL Server Report Service
- Connect
- Web service URL :
- IP Address : 127.0.0.1
- port : 29283
- Database
- Change database, create new report database
- authentication type : SQL authentication
- user : sa
- Test Connection
- Database name : ReportServer
- Credential authentication type : Service Credential
- Web portal URL :
- Virtual directory : Reports
Connect to SQLSERVER, select reportserver db, new query, execute:
DECLARE @sql NVARCHAR(MAX) = N'', @row_count INT;
SELECT @sql = REPLACE(REPLACE([definition],
'IIF( Catalog.LinkSourceID IS NULL, Catalog.Property, Linked.Property)',
'Catalog.Property'),
'CREATE PROCEDURE','ALTER PROCEDURE')
FROM sys.sql_modules
WHERE [object_id] = OBJECT_ID(N'GetAllProperties', N'P');
EXEC (@sql); UPDATE [dbo].[Keys]
SET [SymmetricKey] = (SELECT [SymmetricKey] FROM [dbo].[Keys]
WHERE [InstanceName] <> 'SSRS') WHERE [InstanceName] = 'SSRS' AND [SymmetricKey] IS
NULL; SET @row_count = @@ROWCOUNT;
IF CAST(SERVERPROPERTY('EngineEdition') AS INT) = 2 AND @row_count > 0 BEGIN DELETE
[dbo].[Keys] WHERE [InstanceName] <> 'SSRS';
END;
EXEC sp_recompile N'GetAllProperties';
¶ Install Datacenter Server Application
¶ Server Readiness Validation Tool
pastikan semua centah hijau, next
click validate
¶ Install ACRA Rev_D00AvayaAura_v15.2_Installation_2846d
Next, lalu Install
Server akan beberapa kali restart otomatis
Tunggu sampai proses install selesai
estimasi waktu install 1 jam
copy file CDSAlarms.xml and TCCAlarms.xml to E:\AvayaAura\Software\Conf\Alarm (datacenter)
ada bug di installer dari avaya, dimana file CDSAlarms.xml and TCCAlarms.xml tidak terinstall. jadi harus di copy manual
setelah instalasi berhasil, login ke web address http://ipserver/wfo/control/signin
user default
username : wsuperuser
password : pumpkin1
¶ Install License
¶ Install patch:
- Install Verint_WFO_15.2_2022R1_RevB_15.2.10.3368b
- Install Hotfix_Deploy_Tool-15.2.0.112
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/Hotfix Deployment Tool/KB226613/15.2.0.112/Hotfix_Deploy_Tool-15.2.0.112.zip
-- include KB225905-15.2.11.136.msi on 3_Hotfix for datacenter (application server)
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/Interaction Applications Role Meta Data/KB225905/15.2.11.136/KB225905-15.2.11.136.msi
-- include KB226437-15.2.11.938.msi on 1_Hotfix for Recorder (content server)
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/ContentServer/KB226437/15.2.11.938/KB226437-15.2.11.938.msi
-- include KB226205-15.2.11.1643.msi on 3_Hotfix for Recorder (Consolidator)
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/Consolidator/KB226205/15.2.11.1643/KB226205-15.2.11.1643.msi
¶ To Latest:
- Install App Libraries Update Package (Build 15.2.0.12)-15.2.0.12.zip
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/Applications Libraries Kit/KB226222/15.2.0.12/App Libraries Update Package (Build 15.2.0.12)-15.2.0.12.zip - Install WFO15.2_24.1.1110
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/WFO package/WFO15.2_24.1.1110/15.2.1110.1110/WFO15.2_24.1.1110-15.2.1110.1110.zip - Install Tomcat Upgrade Kit KB226416
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/Tomcat Upgrade Kit/KB226416/15.2.0.26/KB226416-15.2.0.26.zip - Install KB Update Package - Mandatory KB226476
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/KB Update Package - Mandatory/KB226476/15.2.10.1024/15.2_2022R1_Published_Mandatory_KBs-15.2.10.1024.zip - Install KB Update Package - Published KB226702
https://af1.verintconnect.com/artifactory/T3-Passed-QA/com/verint/WFO/KB Update Package - Published/KB226702/15.2.10.1027/15.2_2022R1_Published_KBs-15.2.10.1027.zip
¶ Server Access
http://172.30.2.15/wfo/ui/signin
wsuperuser
pumpkin1
¶ Local Server configure
http://localhost/RM
superuser
pumpkin1
¶ Configuration
add groupsite
add site
add installation
(tcp port 5060) or (tcp port 5061) or (udp and not udp port 0)
¶ Install Screen capture client
msiexec /i KB193272-15.2.7.1004.msi INSTALLDIR="C:\CaptureService\Screen Capture Module" CONN_INTG_SVC=TRUE INTG_SERVERS=172.30.2.13:29435 CONN_INTG_CLD=TRUE INTG_CLOUD=172.30.2.13:29435 VALUE_SERVER_ENABLED=1 VALUE_MAX_CLIENT=1 VALUE_SERVER_PORT=8787 ASC=0 FQDN=FALSE SENDFQDN=0 /passive /lv logs.log /promptrestart
¶ ENABLE HTTPS
copy smgr ca to E:\AvayaAura\Software\Conf\Security\LABSMGRCA.crt
open cmd with administrator privileges
navigate to folder E:\AvayaAura\Software\Conf\Security
command: installRootCACert.cmd LABSMGRCA.crt
generate p12 certificate from smgr :
- create end entity, with p12 token profile
- go to public web -- create keystore
- enter user and password, 2048bits key size, enroll
- download p12 certificate and upload to corresponding server
- save to E:\AvayaAura\Software\Conf\Security\
- rename p12 file to svr_cert_key.p12
- command : installI360Certs.cmd password
do for other servers. if there is database and recorders
go to System Management -- Enterprise -- Security -- enable HTTPS
HTTPS Protocol and Cipher Configuration : intermediate2022
Primary Key Management Server : 172.30.2.121
¶ DISABLE UNSECURED HTTP
edit file : K:\AvayaAura\Data\SecureGateway\conf\i360_local.conf
add line : Define RestrictSSLOnly true
save file
restart i360 secure web gateway