Table of Contents

Preface

Introduction

Configure Basic Appliance Settings and Control Appliance Services

Back Up and Restore Appliance Configurations

Change Appliance Network Settings

Configure System Time

Recover Passwords

Manage Digital Certificates

Failover

Set Up and Configure a DMM Appliance

Set Up and Configure a Cisco Show and Share Appliance

Pair the Cisco DMS Appliances

null

Preface

Revised: March 2015

This chapter includes the following sections:

- Purpose

- Audience

- Document Conventions

- Change History

- Related Documentation

- Obtaining Documentation and Submitting a Service Request

Purpose

This guide describes how to set up, configure, and administer your Cisco Show and Share and Cisco Digital Media Manager (DMM) appliances. It also tells you how to use the Appliance Administration Interface (AAI), a text user interface for appliance administration.

Audience

The intended audience for this guide is systems or network administrators who install, configure, or troubleshoot Cisco DMS appliance hardware.

Document Conventions

This guide uses these text formatting conventions:

Item

Convention

Commands and keywords

boldface font

Variables for which you supply values

italic font

Displayed session and system information

screen font

Information you enter

boldface screen font

Variables you enter

italic screen font

Menu items and button names

boldface font

Selecting a menu item in paragraphs

Option > Network Preferences

Selecting a menu item in tables

Option > Network Preferences

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the publication.

Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.

Tip Means the following information will help you solve a problem. The tips information might not be troubleshooting or even an action, but could be useful information, similar to a Timesaver.

Change History

Added support for Cisco Show and Share and Cisco DMM Release 5.6.

Related Documentation

For a list of all Cisco Show and Share and Cisco DMM product documentation, see the Documentation Guide for Cisco Show and Share for this release on Cisco.com.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at:

http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html

Subscribe to What’s New in Cisco Product Documentation , which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.

Introduction

Revised: March 2015

Cisco Digital Media Suite (DMS) is a product family that consists of Cisco Digital Media Manager (DMM) and Cisco Show and Share appliances.

To set up and configure the Cisco DMM and Cisco Show and Share appliances, you need to access some basic settings and controls that are not a part of the Cisco DMS software. You access these settings and controls through the Cisco DMM and Cisco Show and Share Appliance Administrative Interface (AAI).

By using AAI you can configure the appliance network, time, logging, certificate, and failover settings. You can also start and stop specific services, reboot or shut down the appliance, and backup or restore configurations.

This chapter explains how to access and use the AAI interface. It includes the following sections:

- Supported Appliances and System Requirements

- Prepare to Set Up an Appliance

- Accessing and Navigating the AAI

Supported Appliances and System Requirements

This document describes how to set up and administer the following Cisco Digital Media System appliances:

- Cisco DMM Release 5.5 running on the Cisco MXA UCS M3 server with Cisco Show and Share Release 5.5 running on the Cisco MXA UCS M3 server.

- Cisco DMM Release 5.6 running on the Cisco MXA UCS M3 server with Cisco Show and Share Release 5.6 running on the Cisco MXA UCS M3 server.

Note This software release does not support Cisco Digital Signs, Cisco Digital Media Players, Cisco Cast, Cisco Digital Media Designer, or Cisco Digital Media Player Device Manager.

To understand the client system requirements to use Cisco DMS products or to learn about known issues and late-breaking information, see the Release Notes for Cisco Show and Share and Digital Media Manager on Cisco.com.

Prepare to Set Up an Appliance

Before you set up and configure an appliance, complete the following steps:

Procedure

Step 1 Decide which networked computer you will use to administer the appliance remotely.

Step 2 On that computer, install and set up the necessary client software according to the client system requirements in the Release Notes for Cisco Show and Share and Digital Media Manager on Cisco.com.

Step 3 Ensure that TCP port 22 is not blocked between the Show and Share appliance and the DMM appliance.

Step 4 Ensure that authorized users of your Cisco DMM appliance can send and receive packets through TCP port 8080.

Step 5 Ensure that authorized users of your Show and Share appliance can send and receive packets through TCP port 80 (Show and Share) and port 8080 (Show and Share Reports).

Step 6 Ensure that a DNS entry has been created and published for the Show and Share and DMM appliances.

Accessing and Navigating the AAI

You can access the AAI in one of the following ways:

- Keyboard and monitor attached to the appliance.

- SSH terminal session to the appliance.

To start the AAI from the appliance login prompt, enter the username admin and password that you specified for the admin account when you first configured the appliance.

When you log in, the IP address, server type (Cisco Show and Share or Cisco DMM) and version appear above the menu. (Cisco DMM 5.3.0 screen shown below; your screen might look different.)

To see options or change selections in AAI, do any of the following:

- To highlight an option, move between text input fields, or to navigate through the list of options, press the Up / Down arrow keys.

- To select or deselect a highlighted option, press Space.

- To highlight the buttons at the bottom of the screen, press Tab .

- To select the highlighted button, press Enter.

Configure Basic Appliance Settings and Control Appliance Services

Revised: March 2015

This chapter explains how to use the Appliance Administrative Interface (AAI) to administer a Cisco Show and Share or Cisco DMM appliance and includes the following sections:

- View Appliance System Information

- Manage System Log Information

- Configure the Java Cache

- Change the Appliance Administrator Password

- Update Appliance Software

- Restart the Appliance

- Restart the Web Services

- Restart the Database Services

- Restart the Streaming Server

- Shut Down the Appliance

View Appliance System Information

You can display the following system information for your Cisco DMS appliance:

- Device information: product ID, version ID, hardware model, and the appliance serial number.

- BIOS information: build and build date.

- Network information: hostname, IP address, subnet mask, default gateway, DNS server.

Procedure

Step 1 From the AAI Main Menu, choose SHOW_INFO and then press Enter.

Step 2 Press Enter to return to the main menu.

Manage System Log Information

This section contains the following topics:

- Change the Logging Level

- Save a Copy of the System Log to a USB Drive

- Transfer a Copy of the System Log to a Remote Server

- Clear the Logs

Change the Logging Level

Changing the logging level temporarily stops the appliance web services. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose APPLIANCE_CONTROL, and then press Enter.

Step 2 Choose LOGGING_OPTIONS, and then press Enter.

Step 3 Choose CHANGE_LOG_LEVEL , and then press Enter .

Step 4 Choose one of the following logging levels, and then press Enter :

- ERROR —To receive messages of only the greatest severity.

- WARN —To receive warning messages and error messages.

- INFO —To receive informational, warning, and error messages.

- DEBUG —To receive messages of every severity level.

Save a Copy of the System Log to a USB Drive

You can save a copy of the appliance log file to a USB drive that you attach directly to your appliance.

Before You Begin

Obtain access to the appliance and plug in your USB device.

Procedure

Step 1 Choose APPLIANCE_CONTROL, and then press Enter.

Step 2 Choose LOGGING_OPTIONS, and then press Enter.

Step 3 Choose GET_SYSLOG press Enter .

Step 4 Choose USB, and then press Enter.

A system message appears when the system log information is saved.

Step 5 Press Enter .

You are returned to the Main Menu.

Transfer a Copy of the System Log to a Remote Server

You can transfer a copy of the appliance log file to an FTP or SFTP server.

Before You Begin

- Verify you have permissions to write to the FTP or SFTP server.

- Verify your appliance can communicate with the FTP or SFTP server. See Use ping to Troubleshoot Connectivity.

Procedure

Step 1 Choose APPLIANCE_CONTROL, and then press Enter.

Step 2 Choose LOGGING_OPTIONS, and then press Enter.

Step 3 Choose GET_SYSLOG , press Enter.

Step 4 Choose one of the following, and then press Enter :

- FTP —To send the system log information to an FTP server.

- SFTP —to send system log information to a secure FTP server.

Step 5 Type the FTP or SFTP server address and press Enter .

Step 6 Type the username that you use when you log in to the FTP or SFTP server and press Enter .

Step 7 Type the password that you use when you log in to the FTP or SFTP server and press Enter .

A system message appears when the transfer is complete.

Step 8 Press Enter .

You are returned to the Main Menu.

Clear the Logs

Procedure

Step 1 Choose APPLIANCE_CONTROL, and then press Enter.

Step 2 Choose LOGGING_OPTIONS, and then press Enter.

Step 3 Choose CLEAN_LOGS , and then press Enter.

Step 4 Choose CLEAN_TOMCAT_LOGS , and then press Enter.

A message appears, warning you that all tomcat logs will be lost.

Step 5 Choose Yes .

It may take more than a minute to complete the process. When the process is complete, you are returned to the main menu.

Configure the Java Cache

The Java Cache option changes the Java cache policy for name lookup. The name lookup is used for Cisco Digital Media Encoders that are portable and that may change IP address when moved from location to location.

By default, the Java Cache timeout is set to 30 seconds. This should be sufficient for most usage. However, you can change the Java cache timeout value to cache name/IP address information forever (until the appliance is rebooted), for a specific amount of time, or never.

Changing this setting could have appliance security implications. You should not change this setting unless directed to by Cisco support personnel.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose CHANGE_JAVA_CACHE and press Enter .

Step 3 Type a value, in seconds, for the cache timeout press Enter .

- A positive value indicates the number of seconds an address is cached for.

- A negative values causes the address to be cached forever.

- A value of 0 (zero) disables address caching.

Change the Appliance Administrator Password

You can change the appliance administrator password. The appliance administrator user ID is “admin” (without the quotation marks). The password that you enter must contain at least 6 characters.

Note If you change the administrator password on a Cisco Show and Share appliance, you must also change the password for any file types that are hosted locally on the appliance. See the Administrator Guide for Cisco Show and Share for information about configuring the file hosting locations.

If you have forgotten the admin account password, you can change it using the pwadmin account that you created when you set up the appliance. See Chapter 6, “Recover Passwords”.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose RESET_PASSWORD and press Enter.

Step 3 Enter the new password and press Enter.

Step 4 Enter the password again and press Enter .

Step 5 Press Enter .

You are returned to the Main Menu.

Step 6 (Cisco Show and Share only) Log in as an administrator or as superuser to Cisco Show and Share and do the following:

a. Choose Show and Share from global navigation.

b. Choose Administration .

c. Update the Publish locally... password or the password for any file type that is hosted on the Cisco Show and Share appliance.

Update Appliance Software

For software upgrade instructions, see the Release Notes for Cisco Show and Share and Digital Media Manager on Cisco.com.

Restart the Appliance

You can reboot the appliance from the AAI interface. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose RESTART_OPTIONS and press Enter .

Step 3 Choose REBOOT and press Enter twice.

Restart the Web Services

You can restart the Tomcat web services from the AAI interface without rebooting the appliance. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose RESTART_OPTIONS and press Enter .

Step 3 Choose RESTART_WEB_SERVICES and press Enter twice.

Restart the Database Services

You can restart the database services from AAI without rebooting the appliance. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose RESTART_OPTIONS and press Enter .

Step 3 Choose RESTART_DATABASE_SERVER and press Enter twice.

Restart the Streaming Server

This procedure applies to appliances running Cisco Show and Share software only. This option does not appear on appliances running Cisco DMM. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose RESTART_OPTIONS and press Enter .

Step 3 Choose RESTART_STREAMING_SERVER and press Enter twice.

Shut Down the Appliance

You can shut down an appliance. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose APPLIANCE_CONTROL and press Enter.

Step 2 Choose SHUTDOWN and press Enter twice.

Back Up and Restore Appliance Configurations

Revised: March 2015

This chapter explains how you can use the Appliance Administrative Interface (AAI) to backup a Cisco DMS appliance or restore a previous backup. It includes the following sections:

- Guidelines and Limitations

- Back Up and Restore Your Appliance

Guidelines and Limitations

- Media stored on external hosting locations is not backed up. If you delete a video from Cisco Show and Share, it is removed from the external hosting location. If you restore a backup taken before the video was deleted, you will see the video listed in Cisco Show and Share but will receive a file not found error if you try to play the video because the video had previously been removed from the external hosting location.

- Backup and restore your entire system—Cisco Show and Share, Cisco DMM, and your external hosting locations—at the same time to ensure that the restored data matches across all three components.

- When restoring a backup to a replacement appliance, you must install the license on the appliance before restoring the data.

- You cannot restore a backup taken on one version of the software to another version of the software. Backups must be restored on an appliance running the same version of software as when the backup was taken. For example, you cannot restore a backup taken on an appliance running Cisco DMS 5.3 software to an appliance running Cisco DMS 5.5 software.

- Scheduled backup information is not retained in the backup file. When you restore your data you will need to reschedule any recurring backups.

Back Up and Restore Your Appliance

You can backup the appliance to a USB drive or to a remote rsync, SFTP, or FTP server. You have the option of backing up the configuration only or backing up the configuration and any locally stored media. Media stored on external servers is not backed up.

For backup and restore instructions, see the Release Notes for Cisco Show and Share and Digital Media Manager on Cisco.com.

Change Appliance Network Settings

Revised: March 2015

This chapter explains how to use the Appliance Administrative Interface (AAI) to change the network settings or troubleshoot connectivity issues for a Cisco Show and Share or Cisco DMM appliance.

Note • We recommend that you do not change the static IP address that you assign to your Cisco Show and Share and Cisco DMM appliances.

- If your network uses a DNS server, you must reassociate the resolvable DNS hostname for your Show and Share appliance each time that you change the appliance IP address.

This chapter includes the following sections:

- View Network Settings

- Change the Appliance Hostname

- Change the TCP/IP Settings

- Change the DNS Settings

- Disable Auto Negotiation on the Network Interface Card

- Enable Auto Negotiation on the Network Interface Card

- Troubleshoot Network Issues

View Network Settings

The Network Settings screen displays the hostname, network link status, IP address, subnet mask, default gateway, and primary and secondary DNS server.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

The Network Settings screen displays the network configuration of the appliance and options for changing the configuration.

Step 2 Choose Cancel and press Enter to return to the Main Menu.

Change the Appliance Hostname

You can change the appliance hostname from the AAI interface. In failover configurations, changing the appliance hostname causes the appliance to fail over.

Changing the hostname causes the appliance to regenerate a self-signed certificate. If you are using a certificate provided by a certificate authority, you will need to obtain a new certificate and install it on the appliance. See Chapter 7, “Manage Digital Certificates” for more information about obtaining and installing certificates.

If you are using both a Cisco Show and Share and a Cisco DMM appliance, you must re-pair the appliances after changing the hostname on either appliance.

If you change the hostname for a Cisco Show and Share appliance, you must change the hostname setting for any files that are hosted on the appliance.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose HOSTNAME and press Enter .

The current hostname appears on the Hostname Configuration screen.

Step 3 Enter a fully qualified domain name for the appliance, for example server.example.com. Press Enter .

Step 4 Press Enter to confirm the change.

Changing the hostname can take over a minute to complete. When it is finished, a results message appears.

Step 5 Press Enter to return to the Network Settings screen.

Step 6 If you are using Cisco DMM and Cisco Show and Share appliances, go to Chapter 11, “Pair the Cisco DMS Appliances”.

Step 7 If you change the hostname of a Cisco Show and Share appliance, you need to update the hostname for file types that are hosted on the local appliance. See the Administrator Guide for Cisco Show and Share for more information about setting the file hosting locations.

Change the TCP/IP Settings

You can use AAI to change the IP address of the appliance. If you change the IP address of a Cisco Show and Share appliance or of a Cisco DMM appliance that is paired with a Cisco Show and Share appliance, you will need to pair the appliances after performing this procedure.

Changing the IP address of your appliance causes the appliance to reboot. If you are connected to your appliance using SSH, you will lose your connection.

In failover configurations, changing the TCP/IP settings causes the appliance to fail over.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose TCP_IP and then press Enter.

Step 3 Use the Up/Down arrows to navigate between the fields and provide the following information:

- IP address and subnet mask of the appliance.

- IP address of the default gateway for the appliance.

Step 4 Press Tab to highlight the OK button. Press Enter to accept your changes.

A message appears warning you that the appliance will reboot and will need to be paired again.

Step 5 Press Enter .

The Static IP Configuration confirmation screen appears.

Step 6 Review your configuration. Press Enter to accept your configuration changes and reboot the appliance. Press Tab to highlight No and press Enter to change the settings again.

If you accepted the configuration changes, the appliance reboots.

What to do Next

If the appliances was part of a paired Cisco DMM/Cisco Show and Share configuration, you must re-pair the appliances. See Chapter 11, “Pair the Cisco DMS Appliances”.

Change the DNS Settings

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose DNS and press Enter .

Step 3 Type the primary DNS server IP address in the PRIMARY DNS field.

Step 4 (Optional) Use the Down arrow to move to the SECONDARY DNS field. Type the secondary DNS server IP address, if there is one.

Step 5 Press Tab to highlight the Ok button, and then press Enter .

The DNS Configuration confirmation screen appears.

Step 6 Press Enter to confirm the settings and return to the Network Settings screen.

Disable Auto Negotiation on the Network Interface Card

By default, the network interface card is set to auto-negotiate the speed and duplex settings for the network interface. You can turn off auto negotiation and manually configure these properties.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose AUTO_NEGOTIATION and press Enter .

The Auto Negotiation Configuration screen appears. If auto negotiation is enabled, the system asks if you want to disable it.

Step 3 Press Enter to disable auto negotiation.

The NIC Speed screen appears.

Step 4 Use the Up / Down arrows to highlight the desired NIC speed. Press the Spacebar to select the speed.

Step 5 Press Enter .

The NIC Duplex screen appears.

Step 6 Use the Up / Down arrows to highlight the desired duplex setting. Press the Spacebar to select the setting.

Step 7 Press Enter .

The Auto Negotiation Configuration screen displays your chosen settings.

Step 8 Press Enter to accept your changes and return to the Network Settings screen.

Enable Auto Negotiation on the Network Interface Card

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose AUTO_NEGOTIATION and press Enter .

The Auto Negotiation Configuration screen appears. If auto negotiation is disabled, the system asks if you want to enable it.

Step 3 Press Enter to enable auto negotiation and return to the Network Settings screen.

Troubleshoot Network Issues

This section contains the following topics:

- Start or Stop the Network Interface Card

- Restart the Network Interface Card

- Use ping to Troubleshoot Connectivity

- Use netstat to View Active Network Connections

- Use dig to Retrieve DNS Server Information

- Use nslookup to Retrieve DNS Server Information

- View Network Interface Traffic Statistics

Start or Stop the Network Interface Card

You can stop and start the network interface card from the AAI interface. If you are using SSH to access the AAI interface, you will lose connectivity to the appliance. You need to start the network interface card from a terminal connected to the appliance. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose START/STOP and press Enter .

Step 4 Choose Yes and press Enter .

The NIC will start up or stop, depending upon its previous state.

Restart the Network Interface Card

You can restart the network interface card (NIC) on the appliance through the AAI interface. If you are logged-in to the appliance through an SSH session, your connection will be dropped when you restart the NIC. You will need to log back in. In failover configurations, this causes the appliance to fail over.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose RESTART and press Enter .

You are asked to confirm that you want to restart the NIC.

Step 4 Choose Yes and press Enter .

If you are connected to the appliance through an SSH session, your session is dropped.

Use ping to Troubleshoot Connectivity

The AAI interface contains a front end to the ping utility. Use the ping utility to troubleshoot connectivity issues to other devices, for example to ensure the appliance can reach your FTP server for backup or system log.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose PING and press Enter .

Step 4 Type the IP address or hostname of the target device and press Enter .

Step 5 Press Enter to close the results screen.

You are returned to the Network Settings screen.

Use netstat to View Active Network Connections

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose NETSTAT and press Enter .

Step 4 Use the UP / DOWN arrows to scroll through the results.

Step 5 Press Enter to return to the Network Settings screen.

Use dig to Retrieve DNS Server Information

Domain information groper (dig) is a utility for querying DNS servers for DNS records.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose DIG and press Enter .

Step 4 Enter a hostname or IP address to query the DNS server with and press Enter .

Tip Enter -h and press Enter to see advanced information about using the dig utility.

The results screen appears with the DNS information for the IP address or hostname.

Step 5 Press Enter to return to the Network Settings screen.

Use nslookup to Retrieve DNS Server Information

nslookup is a utility for querying DNS servers for DNS details for a particular host.

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose NSLOOKUP and press Enter .

Step 4 Enter a hostname or IP address to query the DNS server with and press Enter .

The results screen appears with the DNS information for the IP address or hostname.

Step 5 Press Enter to return to the Network Settings screen.

View Network Interface Traffic Statistics

Procedure

Step 1 Choose NETWORK_SETTINGS and press Enter.

Step 2 Choose NETWORK_TOOLS and press Enter .

Step 3 Choose NIC_STATS and press Enter .

Step 4 Use the UP / DOWN arrows to scroll through the results.

Step 5 Press Enter to return to the Network Settings screen.

Configure System Time

Revised: March 2015

This chapter explains how to use the Appliance Administrative Interface (AAI) to configure the system time on a Cisco Show and Share or Cisco DMM appliance. This chapter includes the following sections:

- View Date and Time Settings

- Change the Time Zone

- Change the Date

- Set the System Time Manually

- Use NTP to Correct the System Clock

- Use NTP to Provide System Time

- Display the Current Time

View Date and Time Settings

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

The Date and Time Settings screen appears. The screen shows the currently configured time zone, if the hardware clock is set to UTC, and the date and time the screen was accessed.

Note The time does not update on this screen. To see the actual time, see Display the Current Time.

Step 2 Choose Cancel to return to the Main menu.

Change the Time Zone

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose TIME_ZONE and press Enter .

Step 3 Use the Up / Down arrows to select the time zone. Press Tab .

Step 4 Press Space to select or deselect System clock uses UTC .

Step 5 Press Tab to highlight the OK button and press Enter .

It may take a minute for the changes to take effect. When the changes are complete, the Date and Time Settings screen appears.

Change the Date

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose DATE and press Enter .

Step 3 Press Tab until the month is highlighted. Use the Up / Down arrows to change the month.

Step 4 Press Tab to highlight the year. Use the Up / Down arrows to change the year.

Step 5 Press Tab to highlight the day. Use the Up / Down and Left / Right arrows to change the day.

Step 6 Press Tab to highlight the OK button. Press Enter .

The Date and Time Settings confirmation screen appears.

Step 7 Press Enter to confirm the date and return to the Date and Time Settings screen.

Set the System Time Manually

You can manually enter the system time.

Note See Use NTP to Correct the System Clock for information about performing a one-time correction of the manually-entered system time against an NTP server.

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose TIME and press Enter .

Step 3 Press Tab until the hour is highlighted. Use the Up / Down arrows to change the hour.

Step 4 Press Tab to highlight the minutes. Use the Up / Down arrows to change the minutes.

Step 5 Press Tab to highlight the seconds. Use the Up / Down arrows to change the seconds.

Step 6 Press Tab to highlight the OK button. Press Enter .

The Time Configuration confirmation screen appears.

Step 7 Press Enter to confirm the settings and return to the Date and Time Settings screen.

Use NTP to Correct the System Clock

You can use NTP to perform a one-time correction of the system clock.

This procedure provides a one-time correction only; it does not enable NTP to keep the system clock synchronized with the NTP server. To enable NTP on the appliance, see Use NTP to Provide System Time.

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

Step 3 Choose CLOCK_CORRECTION and press Enter .

Step 4 Enter the IP address or name of the NTP server you want to use to correct the system clock.

Step 5 Press Enter .

A message displaying the status of the time correction appears.

Step 6 Press Enter .

You are returned to the Network Time Protocol Configuration screen.

Use NTP to Provide System Time

You must use NTP on the appliances if you are going to configure failover. This section contains the following topics:

- View NTP Settings

- Specify NTP Servers

- Start the NTP Service

- Stop the NTP Service

- Restart the NTP Service

- Check the NTP Service Status

View NTP Settings

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

The Network Time Protocol Configuration screen appears. The configured NTP servers, the date and time that the screen was accessed, and the status of the NTP service is displayed at the top of the screen.

Note The date and time do not update on this screen; it only displays the date and time you accessed the screen. To view a live display of the system time, see Display the Current Time.

If the STATUS field contains “Unable to talk to NTP daemon,” the NTP service is not started. See Start the NTP Service for information about starting the service. If you have not yet specified any NTP servers, see Specify NTP Servers.

Step 3 Choose Cancel and press enter to return to the Main Menu.

Specify NTP Servers

You can add up to three NTP servers for the appliance to use to synchronize its clock.

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

Step 3 Choose ADD/CHANGE and press Enter .

Step 4 Enter up to three servers, starting with the NTP SERVER 1: field:

a. Use the Up / Down arrows to highlight the server field.

b. Enter the server IP address or fully qualified domain name.

Step 5 Press Tab to highlight the OK button, and then press Enter .

The Network Time Protocol Client Configuration confirmation screen appears. You can review the servers that you specified.

Step 6 Press Enter to confirm your settings and return to the Network Time Protocol Configuration screen.

Start the NTP Service

The NTP service polls the server every 64 seconds.

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

Step 3 Choose NTP_SERVICE and press Enter .

Step 4 Choose START/STOP and press Enter .

The Start NTP confirmation screen appears.

Step 5 Press Enter to start the service.

The Network Time Protocol Configuration screen appears. When the appliance is synchronized with the NTP server, the status on this screen is “synchronized to NTP server ( server_ip_address )....” If the appliance has not yet synchronized with the NTP server, the status shows “unsynchronized”.

Stop the NTP Service

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

Step 3 Choose NTP_SERVICE and press Enter .

Step 4 Choose START/STOP and press Enter .

The Stop NTP confirmation screen appears.

Step 5 Press Enter to stop the service.

The Network Time Protocol Configuration screen appears. When the NTP service is stopped, the Status on this screen is “Unable to talk to NTP daemon”.

Restart the NTP Service

Restarting the NTP service stops and restarts the service if it is already running; it does not start the service if it is stopped.

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

Step 3 Choose NTP_SERVICE and press Enter .

Step 4 Choose RESTART and press Enter .

The Restart NTP confirmation screen appears.

Step 5 Press Enter to restart the service.

The Network Time Protocol Configuration screen appears.

Check the NTP Service Status

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose NTP and press Enter .

Step 3 Choose STATUS and press Enter .

The Network Time Protocol Client Status screen appears.

Step 4 Press Enter to close the Network Time Protocol Client Status screen and return to the Network Time Protocol Configuration screen.

Display the Current Time

Procedure

Step 1 Choose DATE_TIME_SETTINGS and press Enter.

Step 2 Choose SHOW_TIME and press Enter .

The Display Time screen displays the current time on the appliance.

Step 3 To return to the Date and Time Settings menu, press Enter .

Recover Passwords

Revised: March 2015

This chapter explains how to use the Appliance Administrative Interface (AAI) to recover forgotten passwords.

The procedures in this chapter require that you log in with the pwadmin account that you set up when you initially configured the appliance.

- Change the Admin Account Password

- Change the PWADMIN Account Password

- Reset the Superuser Account Password

Change the Admin Account Password

Procedure

Step 1 Log in to the AAI using the pwadmin username and password.

Step 2 Choose CHANGE_ADMIN_PASSWORD and press Enter .

Step 3 Enter the new password and press Enter. The password must contain at least 6 characters.

Step 4 Enter the password again and press Enter .

Step 5 Press Enter to return to the Main Menu.

Step 6 (Cisco Show and Share only) Log in as an administrator or as superuser to Cisco Show and Share and do the following:

a. Choose Show and Share from global navigation.

b. Choose Administration .

c. Update the Publish locally... password or the password for any file type that is hosted on the Cisco Show and Share appliance.

Change the PWADMIN Account Password

Procedure

Step 1 Log in to the AAI using the pwadmin username and password.

Step 2 Choose CHANGE_PWADMIN_PASSWORD and press Enter .

Step 3 Enter the new password and press Enter. The password must contain at least 6 characters.

Step 4 Enter the password again and press Enter .

Step 5 Press Enter to return to the Main Menu.

Reset the Superuser Account Password

You cannot change the superuser account password from the AAI. However, you can reset it to Cisco123. You should immediately log in to the Cisco DMM and change the superuser account password after performing a reset.

Procedure

Step 1 Log in to the AAI using the pwadmin username and password.

Step 2 Choose RESET_SUPERUSER_PASSWORD and press Enter .

Step 3 Press Enter to reset the password.

The password is changed to Cisco123.

Step 4 Press Enter to return to the Main Menu.

Get Testroot Access

Testroot access is used during troubleshooting sessions with Cisco support personnel. Do not use this option except under the guidance of Cisco support staff.

Manage Digital Certificates

Revised: March 2015

You can manage the digital certificates for a Cisco Show and Share and Cisco DMM appliances from the local instance of the Appliance Administration Interface (AAI). Furthermore:

- You can import multiple CA chain certificates simultaneously:

– Inside a single *.ZIP archive (CSCth65646).

– Inside a single certificate file (CSCti11768).

However, we do not support these methods for the import of identity certificates. All identity certificates must remain separate during import.

- You can import a certificate that includes an extra carriage return (CSCth53389).

- You can configure a Cisco DMS appliance to notify you daily that an imported CA certificate or identity certificate will expire soon. Such notifications begin 10 days before the actual expiration date. To access this feature in the web-based user interface for DMS-Admin, go to Alerts > Notification Rules > Certificate (CSCth18904).

- We support the P7B and the PEM certificate format.

- Subject Alternative Names (SANs) are supported in Cisco Show and Share and Cisco Digital Media Manager. To use a SAN name, you must generate a Certificate Signing Request (CSR) as described in the Generate and Submit Certificate Signing Requests (CSR) procedure. For the SAN option, when requesting the signing certificate from the certificate authority, the SAN name should be added at the same time and will be included in the certificate.

See these sections to manage Cisco Show and Share and Cisco DMM digital certificates:

- Concepts

- Procedures

- Reference

Concepts

- Glossary

- Restrictions

- Workflows for Certificate Management

Glossary

Timesaver Go to terms that start with... [ A | C | D | K | P | S | X ].

A

asymmetric key exchange

Asymmetric or public key cryptography is based on the concept of a key pair. Each half of the pair (one key) can encrypt information so that only the other half (the other key) can decrypt it. One part of the key pair, the private key, is known only by the designated owner; the other part, the public key, is published widely but is still associated with the owner.

C

Glossary

CA

certification authority . Authority in a network that issues and manages security credentials and public keys for message encryption and decryption. As part of a public key infrastructure (PKI), a CA checks with a registration authority (RA) to verify information provided by the requestor of a digital certificate. If the RA verifies the requestor’s information, the CA can then issue a certificate.

CA signature

Digital code that vouches for the authenticity of a digital certificate. The certification authority (CA) that issues a certificate also signs it.

certificate chain

Hierarchical list of public-key certificates, each signed by the subsequent certificate, ending with a Root CA certificate.

CSR

certificate signing request . A block of ciphertext that ( 1. ) describes an entity to a CA and ( 2. ) requests a digital identity certificate to authenticate the entity for SSL. The CSR includes encrypted information to identify the entity, such as its location, serial number, and public key. This example shows a CSR.

-----BEGIN NEW CERTIFICATE REQUEST-----

MIICrTCCAZUCAQAwaDEXMBUGA1UEAxMOZHN5cy5jaXNjby5jb20xDzANBgNVBAsTBmp5Z2podjEO

MAwGA1UEChMFaGd1eWcxDzANBgNVBAcTBnV5dHlnajEOMAwGA1UECBMFbWhoanYxCzAJBgNVBAYT

AlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz+sEkBbIoXTiE13O28FX558enM0

6tVdnNlWmySbtKulYJ+xvHlsdzbCLOPYJhOvr1JJIxaNjf2dT1fdQp4Qd1U/lk5+v9Nmqtlr9Fxl

bUkxkCaYr6H4RYrmqi0+YpLyUgMXqoQ+vFRDdKUGHD5lxQK9dggXvdJQNgylGawXkqG8WepC3XwK

Zyl9CS2S4CbnLs6yHcz86/VE1X4+DqnS3yvfko+Yyg/yUe151Hcwp97C0KtFrZnQcnIDYU4rEaV+

nqKWc52cQ0kuoJjJlzNSlVUGLGA+yPf+fz+0K5liqA6HnE22yA7SWlskcR668JCR9tjqyWnIC+yu

Cd13HUfSpwIDAQABoAAwDQYJKoZIhvcNAQEFBQADggEBAAVj0f6B6lmtVEvCaUxKAI7DDgFjBJhv

BRJMZA+3BVD6OOX8T2J8druEb18bloEX989f8l124KceO8Y037/a4RPdxhXM3eeVYTMnz4QcbI6G

MU58jdHgRM1pxmYweixNTmzFTLc3uhp8JHWk286pHOMNHX2OR+cL+Cbj/mYRnmf4hg4LD0oCTS9f

pVEDgmiOpZ/go9OfAZ4nu1SwnqCaNpV+k/hM2RnlAqtaQDR89B4K18IF6odnjc9TL0kXUrsK79BD

Qp1bZQS+MElgnEqHpFjzvaopwXnZSv4CFHi6IwN2HPALY24Bo3XGW85j71HYPbwoVnZtcqdN56X6

HM0lto8=

-----END NEW CERTIFICATE REQUEST-----

D

Glossary

DER

A certificate encoding format that we DO NOT SUPPORT in any Cisco DMS release. Instead, you can use PEM or P7B.

digital certificate

Digital representation of an entity (human or otherwise), as defined in International Organization for Standardization (ISO) standard X.509. A certificate is normally issued by a CA on behalf of an entity. Common fields within a certificate include distinguished names (DN) for the entity and CA, a serial number, expiration dates, a copy of the certificate holder’s public key (used for encrypting messages and digital signatures), and the digital signature of the certificate-issuing authority, so that a recipient can verify certificate legitimacy.

DN

distinguished name . A set of attributes that help a CA to authenticate an entity for SSL.

K

Glossary

keystore

An exported KEYSTORE.DAT file from your Cisco Show and Share appliance contains a backup copy of its digital certificates.

P

Glossary

P7B

An implementation of base64-encoded ASCII in X-509, used to protect identity certificates and CA certificates. P7B certificates must NOT use binary (DER) encoding. Instead, use Base64 (ASCII) encoding.

PEM

privacy enhanced email . An implementation of base64-encoded ASCII in X-509, used to protect identity certificates and CA certificates .

private key

A cryptographic value to decrypt messages and digital signatures upon receipt by one authenticated entity from another. Each private key is unique and confidential to one entity. As one half of an asymmetric key pair, each private key is bound to its opposite half, a public key.

public key

A cryptographic value to encrypt messages and digital signatures for delivery from one authenticated entity to another. Each public key is verifiably unique to one entity, which can reveal it widely without compromising the private key. As one half of an asymmetric key pair, each public key is bound to its opposite half, a private key.

S

Glossary

self-signed

Acknowledgement from an entity that its own digital certificate was not issued by, and is not signed by, any trusted certification authority. Instead, the entity issued and affixed its own signature to its digital certificate. In common practice, a self-signed digital certificate is not considered valid, authentic, or trustworthy until proven so.

signed

Endorsement from a trusted certification authority, affixed to another entity’s digital certificate. In common practice, a signed digital certificate is considered valid, authentic, and trustworthy unless proven otherwise.

X

Glossary

X-509

A standard for public key infrastructure. X.509 specifies, among other things, standard formats for public key certificates and a certification path validation algorithm.

Restrictions

- Expiration

- Encoding

- Subject CN Elements

- Concatenation

Expiration

Caution Show and Share appliances refuse web connections unless their certificates are current and valid. When they are not, you must import a new certificate. You can obtain and install one from your CA or — temporarily — you can generate and use a self-signed certificate.

Encoding

Caution Import of PEM-compliant certificates fails when their wrapper is a ZIP archive or any binary format.

Subject CN Elements

Caution Do not use any wildcards (*) in the common name (CN) element of a certificate’s subject. Certificate import fails when a wildcard is present. For example, we would reject a certificate with *.example.com as its subject.

Concatenation

Caution Import forgives merged CA certificates but prohibits any merging of identity certificates.

Workflows for Certificate Management

You are most likely to use the AAI certificate management features in the context of a workflow. See these sections:

- Workflow A: Obtain and install provider-signed certificates

- Workflow B: Your certificates expire or you do not have any certificates

- Workflow C: Back up and restore certificates

Workflow A: Obtain and install provider-signed certificates

This sequence represents the typical workflow to use digital certificates from a trusted certification authority.

1. Generate and Submit Certificate Signing Requests (CSR)

2. Import (Install) Provider-signed Certificates

3. View a Certificate Chain to Verify its Certificates

4. Export a Keystore to Back It Up

Workflow B: Your certificates expire or you do not have any certificates

This sequence represents the typical workflow to use self-signed digital certificates.

1. Generate Self-signed Certificates

2. View a Certificate Chain to Verify its Certificates

Workflow C: Back up and restore certificates

This sequence represents the typical workflow to back up your digital certificates and, later, restore them.

1. Export a Keystore to Back It Up

2. Import a Keystore to Restore It from a Backup

3. View a Certificate Chain to Verify its Certificates

Procedures

- Generate and Submit Certificate Signing Requests (CSR)

- Import (Install) Provider-signed Certificates

- Generate Self-signed Certificates

- View Identity Certificates

- View a Certificate Chain to Verify its Certificates

- Export a Keystore to Back It Up

- Import a Keystore to Restore It from a Backup

Generate and Submit Certificate Signing Requests (CSR)

Workflow Context

This topic is part of Workflow A: Obtain and install provider-signed certificates.

Before You Begin

- Contact a certification authority to learn about its process to receive a request. Many CAs will expect to receive your request through their FTP or SFTP server. Although you can use any CA, these four are among the best known.

– VeriSign — www.verisign.com

– GoDaddy — www.godaddy.com

– Comodo — www.comodo.com

– Network Solutions — www.networksolutions.com

- Subject Alternative Names (SANs) are supported in Cisco Show and Share and Cisco Digital Media Manager. To use a SAN name, you must generate a Certificate Signing Request (CSR) as described in this procedure. For the SAN option, when requesting the signing certificate from the certificate authority, the SAN names should be added at the same time and will be included in the certificate.

- Log in as admin to the Appliance Administration Interface (AAI).

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > MANAGE_SIGNED_CERTS > GENERATE_CSR .

Step 2 Enter values in the fields, as illustrated.

Note Do not use any of these characters.

, + = " “ ' ‘ < > # ;

a. Use the Department field to enter the name for your organizational unit — such as Finance Ministry , Taiwan Office , College of Engineering , or Publications Department . Then, press the Down key.

b. Use the Organization field to enter the full legal name for your entire organization, as it is known to your national government or intergovernmental authority — such as Cisco Systems , Cambridge University , or Médecins Sans Frontières . Then, press the Down key.

c. Use the Location field to enter the full and officially designated place name of your city, town, township, village, hamlet, civil parish, or settlement — such as Madrid or Tokyo . Then, press the Down key.

d. Use the State field to enter the full name of your state, province, commonwealth, territory, republic, periphery, dependency, or protectorate — such as Montserrat , California , Tamil Nadu , Chechnya , São Paulo, or Crete . Then, press the Down key.

e. Use the Country field to enter the 2-character country code, as managed by the Internet Assigned Names Agency (IANA).

- Even if this code is not part of your Internet domain name, it is a necessary attribute of your digital certificate.

- Even if this code is part of your Internet domain name, you must not prefix it here with a period.

Note Your IANA country code might differ from all country name abbreviations that you know. The “Internet Assigned Names Agency (IANA) Country Codes” section directs you to your country code.

f. Press the Down key.

Note The “Months Before Expiration” field is not useful in this procedure. You can safely ignore it.

Step 3 Choose OK .

Step 4 Use this checklist to prequalify a CA.

Does the CA use PEM or P7B, as appropriate?

Does the CA isolate each certificate in cases where it must do so?

Step 5 After you choose a CA, enter values that it provides to you, which identify its server specifically and you specifically. Then, choose OK .

OR

If your CA does not use an FTP or SFTP server to receive CSRs, enter values to identify a server that you control. Later, you can retrieve your encrypted CSR for delivery to your CA through its alternative process. For example, you might paste your CSR ciphertext into a form on the CA website.

Note Your CA might ask you to specify what server platform — such as Apache or Microsoft Internet Application Server (IIS) — will use your new certificate. You must choose Apache. Otherwise, your new certificate is not encoded correctly for Cisco DMS products to use it.

Import (Install) Provider-signed Certificates

Caution When you import certificates, they overwrite all others.

Workflow Context

This topic is part of Workflow A: Obtain and install provider-signed certificates.

Before You Begin

- Request and obtain a digital certificate from a trusted CA.

- Log in as admin to the Appliance Administration Interface (AAI).

- Consider certificate restrictions for:

– Expiration

– Encoding

– Subject CN Elements

– Subject CN Elements

– Concatenation

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > MANAGE_SIGNED_CERTS > IMPORT_CERTIFICATE .

Step 2 Choose Yes at the prompt to overwrite your active certificates with their replacements.

Step 3 Enter information about the FTP or SFTP server where you store your digital certificates.

a. Use the first field to enter a routable IP address or DNS-resolvable FQDN for the server.

b. Press the Down key.

c. Use the second field to enter a username that has sufficient permissions to read your certificates from the server.

d. Choose OK .

Step 4 Enter your password for the FTP or SFTP server, and then choose OK .

Step 5 Enter absolute file paths, as prompted.

a. Use the first field to specify the path to one or more PEM files. If you will specify more than one file, comma-separate the filenames.

Note Do not specify a ZIP archive that contains your PEM files. If you do, an error message will state that the certificate chain is damaged and at least one of your certificates is not formatted correctly.

b. Press the Down key.

c. Use the second field to specify the path to one or more CAchain files.

d. Choose OK .

Note An error message might state that AAI could not retrieve any CAchain files from the remote server. If so, several additional messages might load in sequence. In this case, you must choose OK after each message to dismiss it. For example, a sequence of messages might say:

- Failed to get file usage: from remote server.

- Failed to get file tokenize from remote server.

- Failed to get file [separator] from remote server.

- Failed to get file [string_to_tokneize] from remote server.

- 1 MISSING_CA_CERTIFICATE

If access failed after AAI exceeded that maximum number of retries, check that the server is running and reachable, and that you entered both paths correctly.

What to Do Next

- MANDATORY — The appliance identity has changed. You must now re-establish trust among your Cisco DMS appliances. Go to the “Pair Your Appliances” section.

- OPTIONAL — Would you like to verify any of your digital certificates? Go to the “View Identity Certificates” section.

Generate Self-signed Certificates

Workflow Context

This topic is part of Workflow B: Your certificates expire or you do not have any certificates.

Before You Begin

Log in as admin to the Appliance Administration Interface (AAI).

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > MANAGE_SELF_SIGNED_CERTS > GENERATE_NEW_CERT .

Step 2 Enter values in the fields, as illustrated.

Note Do not use any of these characters.

, + = " “ ' ‘ < > # ;

a. Use the Department field to enter the name for your organizational unit — such as Finance Ministry , Taiwan Office , College of Engineering , or Publications Department . Then, press the Down key.

b. Use the Organization field to enter the full legal name for your entire organization, as it is known to your national government or intergovernmental authority — such as Cisco Systems , Cambridge University , or Médecins Sans Frontières . Then, press the Down key.

c. Use the Location field to enter the full and officially designated place name of your city, town, township, village, hamlet, civil parish, or settlement — such as Madrid or Tokyo . Then, press the Down key.

d. Use the State field to enter the full name of your state, province, commonwealth, territory, republic, periphery, dependency, or protectorate — such as Montserrat , California , Tamil Nadu , Chechnya , São Paulo, or Crete . Then, press the Down key.

e. Use the Country field to enter the 2-character country code, as managed by the Internet Assigned Names Agency (IANA).

- Even if this code is not part of your Internet domain name, it is a necessary attribute of your digital certificate.

- Even if this code is part of your Internet domain name, you must not prefix it here with a period.

Note Your IANA country code might differ from all country name abbreviations that you know. The “Internet Assigned Names Agency (IANA) Country Codes” section directs you to your country code.

f. Press the Down key.

g. Use the Months Before Expiration field to count the months until your digital certificate should expire.

- Briefer durations improve security at the cost of convenience.

- Longer durations improve convenience at the cost of security.

- Permitted values range from 1 to 999 .

Step 3 Choose OK .

What to Do Next

- MANDATORY — The appliance identity has changed. You must now re-establish trust among your Cisco DMS appliances. Go to the “Pair Your Appliances” section.

- OPTIONAL — Would you like to verify any of your digital certificates? Go to the “View Identity Certificates” section.

View Identity Certificates

Workflow Context

This topic is not part of any workflow.

Before You Begin

- Log in as admin to the Appliance Administration Interface (AAI).

- Obtain and install certificates.

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > VIEW_CERTIFICATE .

Step 2 Examine the certificate.

Step 3 Choose EXIT when you are done.

Step 4 Stop. You have completed this procedure.

What to Do Next

- OPTIONAL — Would you like to back up your digital certificates? Go to the “Export a Keystore to Back It Up” section.

View a Certificate Chain to Verify its Certificates

Workflow Context

This topic is part of Workflow A , Workflow B , and Workflow C .

Before You Begin

- Log in as admin to the Appliance Administration Interface (AAI).

- Obtain and install certificates.

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > VIEW_CERT_CHAIN .

Step 2 Examine the certificate chain.

Step 3 Choose EXIT when you are done.

Step 4 Stop. You have completed this procedure.

What to Do Next

- OPTIONAL — Would you like to back up your digital certificates? Go to the “Export a Keystore to Back It Up” section.

Export a Keystore to Back It Up

Your certificates are included whenever you back up your appliance from its local instance of AAI.

Workflow Context

This topic is part of Workflow A: Obtain and install provider-signed certificates and Workflow C: Back up and restore certificates.

Before You Begin

- Log in as admin to the Appliance Administration Interface (AAI).

- Obtain and install certificates.

- Delete any old keystore *.DAT file from your FTP or SFTP server before you export a new one.

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > EXPORT_KEYSTORE .

Step 2 Enter the passphrase from which your private key was derived.

Step 3 Press Enter .

Step 4 Use the first field to enter a routable IP address or DNS-resolvable FQDN for the FTP or SFTP server where you will transfer an exported copy of your digital certificates.

Step 5 Press the Down key.

Step 6 Use the second field to enter a username that has read-write permissions on the server that you specified. Then, press Enter .

Step 7 Enter the password that authenticates the username. Then, press Enter .

Step 8 Enter the full pathname where to save your keystore file on the remote server. Then, press Enter .

What to Do Next

- OPTIONAL — Would you like to restore certificates from a backup? Go to the “Import a Keystore to Restore It from a Backup” section.

Import a Keystore to Restore It from a Backup

Workflow Context

This topic is part of Workflow C: Back up and restore certificates.

Before You Begin

- Log in as admin to the Appliance Administration Interface (AAI).

- Export a keystore.

Procedure

Step 1 Choose CERTIFICATE_MANAGEMENT > IMPORT_KEYSTORE .

Step 2 Enter the passphrase from which your private key was derived.

Step 3 Press Enter .

Step 4 Use the first field to enter a routable IP address or DNS-resolvable FQDN for the FTP or SFTP server where you store your digital certificates.

Step 5 Press the down key.

Step 6 Use the second field to enter a username that has sufficient permissions to read your certificates from the server that you specified. Then, press Enter .

Step 7 Enter the password that authenticates the username. Then, press Enter .

Step 8 Enter the full pathname that points to your keystore file on the remote server. Then, press Enter .

Step 9 Stop. You have completed this procedure.

What to Do Next

- MANDATORY — The appliance identity has changed. You must now re-establish trust among your Cisco DMS appliances. Go to the “Pair Your Appliances” section.

- OPTIONAL — Would you like to verify any of your digital certificates? Go to the “View Identity Certificates” section.

Reference

- Internet Assigned Names Agency (IANA) Country Codes

- Troubleshooting

Internet Assigned Names Agency (IANA) Country Codes

Digital certificates use one standard set of codes to describe the international locations of entities whose identities are certified. IANA assigns these codes. IANA closely derives almost all of its codes from “A2” country and region codes, which the ISO 3166-1 alpha-2 standard defines. However, the set of IANA-assigned codes is not perfectly identical to the set of A2 codes. In some cases, IANA has defined new country and region codes for its own purposes. Some of these, in turn, were then added to ISO 3166.

Furthermore, geopolitical changes over time cause governmental federations to develop and dissolve. Lands are conquered, colonized, reapportioned, renamed, and so on. Slow but continual changes like these can create confusion about which country and region code to use in a certificate signing request (CSR). And while there are precedents for deleting country codes from ISO 3166, removal there does not result in immediate removal also from the country code top-level domains (ccTLDs) that exist in DNS.

Table 7-1 sorts countries and regions alphabetically by their names in English. Its cross-references redirect you in cases where geopolitical events, shared governance, or other factors might lead to confusion about which code to use.

Table 7-1 IANA Country and Region Codes

Code

Country or Region

A

AF

Afghanistan, Islamic State of

AX

Åland Islands

see also Finland

AL

Albania

DZ

Algeria, Democratic Popular Republic of

AS

American Samoa, Territory of

see also Guam, Territory of; Northern Mariana Islands, Commonwealth of the; Puerto Rico, Commonwealth of; Samoa, Independent State of; United States of America, Federal Union of the; and Virgin Islands, U.S. Territory of the

For Andaman , see India

AD

Andorra, Principality of

AO

Angola

AI

Anguilla

AQ

Antarctica

AG

Antigua and Barbuda

For Aosta Valley , see Italy

AR

Argentina

AM

Armenia

AW

Aruba

For Ascension , see Saint Helena, Ascension and Tristan da Cunha

AC

Ascension Island

see also Saint Helena, Ascension and Tristan da Cunha

For Assam , see India

AU

Australia

AT

Austria

AZ

Azerbaijan

B

BS

Bahamas, Commonwealth of

BH

Bahrain, Emirate of

For Bali , see Indonesia

BD

Bangladesh

For Bangui , see Central African Republic

BB

Barbados

For Barbuda , see Antigua and Barbuda

BY

Belarus

BE

Belgium, Kingdom of

BZ

Belize

For Bengal , see Bangladesh and India

BJ

Benin

BM

Bermuda

BT

Bhutan, Kingdom of

For Bodoland Territory , see India

BO

Bolivia

For Bolzano-Bozen (Alto Adige-South Tyrol) , see Austria; Germany, Federal Republic of; Hungary; and Italy

For Borneo , see Indonesia

BA

Bosnia and Herzegovina

BW

Botswana

For Bougainville , see Papua New Guinea, Independent State of

BV

Bouvet Island, Territory of

BR

Brazil, Federative Republic of

For Britain , see Ireland and United Kingdom of Great Britain and Northern Ireland

IO

British Indian Ocean Territory

BN

Brunei Darussalam, Sultanate of

For Brussels , see Belgium, Kingdom of

For Buenos Aires , see Argentina

BG

Bulgaria

BF

Burkina Faso

For Burma , see Myanmar

BI

Burundi

C

For Caicos Islands , see Turks and Caicos Islands, Territory of

KH

Cambodia, Kingdom of

CM

Cameroon

CA

Canada

CV

Cape Verde

KY

Cayman Islands

CF

Central African Republic

For Ceuta , see Spain

For Ceylon , see Sri Lanka

TD

Chad

For Chakma Autonomous District , see India

For Channel Islands , see Guernsey, Bailiwick of and Jersey, Bailiwick of

For Chiapas , see Mexico

CL

Chile

CN

China, People’s Republic of

see also Hong Kong; Macau, Special Administrative Region of; and Taiwan, Republic of China

CX

Christmas Island, Territory of

CC

Cocos (Keeling) Islands

CO

Colombia

KM

Comoros

CG

Congo

see also Congo, the Democratic Republic of the

CD

Congo, the Democratic Republic of the

see also Congo

CK

Cook Islands

For Corsica, Territorial Collectivity of , see France, Metropolitan

CR

Costa Rica

CI

Cote d’Ivoire

HR

Croatia

CU

Cuba

CY

Cyprus

For Czechoslovalia , see Czech Republic

CZ

Czech Republic

see also Slovakia

D

For Darjeeling Gorkha Hills , see India

DK

Denmark, Kingdom of

see also Faroe Islands and Greenland

DJ

Djibouti

DM

Dominica, Commonwealth of

see also Dominican Republic

DO

Dominican Republic

see also Dominica, Commonwealth of

E

For East Bengal , see Bangladesh and Pakistan, Islamic Republic of

For East Indies , see Indonesia; Malaysia, Kingdom of; Philippines; and Solomon Islands

For East Timor , see Timor-Leste

EC

Ecuador

EG

Egypt, Arab Republic of

SV

El Salvador

GQ

Equatorial Guinea

For Ghana , see Ghana

For Guiana , see French Guiana, Overseas Department of

For Guinea , see Guinea

For Guyana , see Guyana, Cooperative Republic of

ER

Eritrea

EE

Estonia

ET

Ethiopia, Federal Democratic Republic of

EU

European Union

F

FK

Falkland Islands (Malvinas Islas), Colony of

FO

Faroe Islands

FJ

Fiji

FI

Finland

see also Åland Islands

FR

France

FX

France, Metropolitan

GF

French Guiana, Overseas Department of

For Equatorial Guinea , see Equatorial Guinea

For Ghana , see Ghana

For Guinea , see Guinea

For Guyana , see Guyana, Cooperative Republic of

PF

French Polynesia, Overseas Territory of

TF

French Southern Territories

For Friuli-Venezia Giula , see Croatia; Italy; and Slovenia

G

GA

Gabon

GM

Gambia

For Garo Hills Autonomous District , see India

GE

Georgia

see also South Georgia and the South Sandwich Islands

DE

Germany, Federal Republic of

GH

Ghana

For Equatorial Guinea , see Equatorial Guinea

For Guiana , see French Guiana, Overseas Department of

For Guinea , see Guinea

For Guyana , see Guyana, Cooperative Republic of

GI

Gibraltar

For Gilbert Islands , see Kiribati

For Great Britain , see United Kingdom of Great Britain and Northern Ireland

GR

Greece

GL

Greenland

see also Denmark, Kingdom of and Faroe Islands

GD

Grenada

see also Saint Vincent and the Grenadines

For Grenadines , see Saint Vincent and the Grenadines

GP

Guadeloupe and Dependencies, Overseas Department of

GU

Guam, Territory of

see also American Samoa, Territory of; Northern Mariana Islands, Commonwealth of the; Puerto Rico, Commonwealth of; United States of America, Federal Union of the; and Virgin Islands, U.S. Territory of the

For Guangxi Zhung Autonomous Region , see China, People’s Republic of

GT

Guatemala

GG

Guernsey, Bailiwick of

see also Jersey, Bailiwick of

For Guiana , see French Guiana, Overseas Department of

GN

Guinea

see also Guinea-Bissau

GW

Guinea-Bissau

see also Guinea

GY

Guyana, Cooperative Republic of

For Equatorial Guinea , see Equatorial Guinea

For Ghana , see Ghana

For Guiana , see French Guiana, Overseas Department of

For Guinea , see Guinea

H

HT

Haiti

HM

Heard and McDonald Islands, Territory of

For Herzegovina , see Bosnia and Herzegovina

VA

Holy See, State of Vatican City

see also Italy

HN

Honduras

HK

Hong Kong

see also China, People’s Republic of; Macau, Special Administrative Region of; and Taiwan, Republic of China

HU

Hungary

I

IS

Iceland

IN

India

ID

Indonesia

For Inner Mongolia Autonomous Region , see China, People’s Republic of

IR

Iran, Islamic Republic of

IQ

Iraq

For Iraqi Kurdistan , see Iraq

IE

Ireland

IM

Isle of Man, Territory of

IL

Israel, State of

see also Palestine, Occupied Territory of

IT

Italy

see also Holy See, State of Vatican City

For Ivory Coast , see Cote d’Ivoire

J

For Jaintia Hills Autonomous District , see India

JM

Jamaica

For Jammu , see India

For Jan Mayen , see Svalbard and Jan Mayen Islands, Territory of

JP

Japan, Imperial State of

For Java , see Indonesia

For Jeju-do , see Korea, Republic of

JE

Jersey, Bailiwick of

see also Guernsey, Bailiwick of

For Jewish Autonomous Oblast , see Russia, Federation of

JO

Jordan, Hashemite Kingdom of

K

For Kampuchea , see Cambodia, Kingdom of

For Karbi Anglong Autonomous Council , see India

For Kashmir , see China, People’s Republic of; India; and Pakistan, Islamic Republic of

KZ

Kazakhstan

For Keeling Islands , see Cocos (Keeling) Islands

KE

Kenya

For Khasi Hills Autonomous District , see India

KI

Kiribati

see also Marshall Islands; Micronesia, Federated States of; and Nauru

KP

Korea, Democratic People’s Republic of

see also Korea, Republic of

KR

Korea, Republic of

see also Korea, Democratic People’s Republic of

For Kosovo , see Serbia

For Kurdistan , see Armenia; Iran, Islamic Republic of; Iraq; Syria, Arab Republic of; and Turkey

KW

Kuwait, Emirate of

KG

Kyrgyzstan

L

For Ladakh Autonomous Hill Development , see India

For Lai Autonomous District , see India

LA

Lao People’s Democratic Republic

LV

Latvia

LB

Lebanon

LS

Lesotho, Kingdom of

LR

Liberia

LY

Libyan Arab Jamahiriya, Socialist People’s

LI

Liechtenstein, Principality of

LT

Lithuania

LU

Luxembourg, Grand Duchy of

For Luzon , see Philippines

M

MO

Macau, Special Administrative Region of

see also China, People’s Republic of; Hong Kong; and Taiwan, Republic of China

MK

Macedonia, the former Yugoslav Republic of

MG

Madagascar

For Madeira , see Portugal

MW

Malawi

For Malay Archipelago , see Malaysia, Kingdom of and Philippines

For Malay Peninsula , see Malaysia, Kingdom of; Myanmar; Philippines; Singapore; and Thailand, Kingdom of

MY

Malaysia, Kingdom of

see also Singapore

MV

Maldives

ML

Mali

MT

Malta

For Malvinas , see Falkland Islands (Malvinas Islas), Colony of

For Mara Autonomous District , see India

MH

Marshall Islands

see also Kiribati and Micronesia, Federated States of

For Mariana Islands , see Northern Mariana Islands, Commonwealth of the

MQ

Martinique, Overseas Department of the

MR

Mauritania, Islamic Republic of

see also Mauritius

MU

Mauritius

see also Mauritania, Islamic Republic of

YT

Mayotte, Territorial Collectivity of

For McDonald Islands , see Heard and McDonald Islands, Territory of

For Meghalaya , see India

For Melilla , see Spain

MX

Mexico

FM

Micronesia, Federated States of

see also Kiribati; Marshall Islands; and Northern Mariana Islands, Commonwealth of the

For Mindanao , see Philippines

For Miquelon , see Saint Pierre and Miquelon, Overseas Territorial Collectivity of

For Mizoram , see India

For Moldavia , see Moldova, Republic of

MD

Moldova, Republic of

MC

Monaco, Principality of

MN

Mongolia

ME

Montenegro

MS

Montserrat, Territory of

MA

Morocco, Kingdom of

For Mount Athos , see Greece

MZ

Mozambique

MM

Myanmar

N

NA

Namibia

see also South Africa

NR

Nauru

see also Kiribati; Marshall Islands; and Micronesia, Federated States of

NP

Nepal, Kingdom of

NL

Netherlands, Kingdom of the

see also Netherlands Antilles

AN

Netherlands Antilles

see also Netherlands, Kingdom of the

For Nevis , see Saint Kitts and Nevis

NC

New Caledonia and Dependencies, Overseas Territory of

For New Guinea , see Papua New Guinea, Independent State of

For New Hebrides , see Vanuatu

NZ

New Zealand

see also Cook Islands; Niue; and Tokelau

NI

Nicaragua

For Nicobar Islands , see India

NE

Niger

see also Nigeria, Federal Republic of

NG

Nigeria, Federal Republic of

see also Niger

For Ningxia Hui Autonomous Region , see China, People’s Republic of

NU

Niue

see also Cook Islands; New Zealand; and Tokelau

NF

Norfolk Island, Territory of

For North Cachar Hills Autonomous District , see India

For North Korea , see Korea, Democratic People’s Republic of

For North Sentinel Island , see India

MP

Northern Mariana Islands, Commonwealth of the

see also American Samoa, Territory of, Guam, Territory of, Puerto Rico, Commonwealth of, United States of America, Federal Union of the, and Virgin Islands, U.S. Territory of the

NO

Norway, Kingdom of

O

OM

Oman, Sultanate of

P

PK

Pakistan, Islamic Republic of

PW

Palau

PS

Palestine, Occupied Territory of

see also Israel, State of

PA

Panama, Unified Republic of

PG

Papua New Guinea, Independent State of

PC

Paracel Islands, Territory of

PY

Paraguay

For Peninsular Malaysia , see Malaysia, Kingdom of

PE

Peru

PH

Philippines

PN

Pitcairn

PL

Poland

For Polynesia , see French Polynesia, Overseas Territory of

PT

Portugal

TP

Portuguese Timor (being phased out)

For Principe , see Sao Tome and Principe

PR

Puerto Rico, Commonwealth of

see also American Samoa, Territory of, Guam, Territory of, Northern Mariana Islands, Commonwealth of the, United States of America, Federal Union of the, and Virgin Islands, U.S. Territory of the

Q

QA

Qatar, Emirate of

R

RE

Reunion, Overseas Department of the

For Rhodesia , see Zambia and Zimbabwe

For Rodrigues , see Mauritius

RO

Romania

RU

Russia, Federation of

RW

Rwanda

S

For Sahara , see Western Sahara

BL

Saint Barthelemy
, and exists as a country code top-level domain in DNS, it does not contain any subdomains.

SH

Saint Helena, Ascension and Tristan da Cunha

see also Ascension Island

KN

Saint Kitts and Nevis

LC

Saint Lucia

MF

Saint Martin
, and exists as a country code top-level domain in DNS, it does not contain any subdomains.

PM

Saint Pierre and Miquelon, Overseas Territorial Collectivity of

VC

Saint Vincent and the Grenadines

see also Grenada

WS

Samoa, Independent State of

see also American Samoa, Territory of

SM

San Marino

For Sandwich Islands , see South Georgia and the South Sandwich Islands

ST

Sao Tome and Principe

For Sardinia , see Italy

SA

Saudi Arabia, Kingdom of

For Scotland , see United Kingdom of Great Britain and Northern Ireland

SN

Senegal

RS

Serbia

SC

Seychelles

For Siam , see Thailand, Kingdom of

For Sicily , see Italy

SL

Sierra Leone

SG

Singapore

see also Malaysia, Kingdom of

SK

Slovakia

see also Czech Republic

SI

Slovenia

see also Macedonia, the former Yugoslav Republic of

SB

Solomon Islands

SO

Somalia

ZA

South Africa

see also Namibia

GS

South Georgia and the South Sandwich Islands

For South Korea , see Korea, Republic of

For South Sandwich Islands , see South Georgia and the South Sandwich Islands

For South Yemen , see Yemen

For Southern Sudan , see Sudan

SU

Soviet Union (being phased out)

ES

Spain

LK

Sri Lanka

SD

Sudan

For Sulawesi , see Indonesia

For Sumatra , see Indonesia

SR

Suriname

SJ

Svalbard and Jan Mayen Islands, Territory of

SZ

Swaziland

SE

Sweden, Kingdom of

CH

Switzerland

SY

Syria, Arab Republic of

T

TW

Taiwan, Republic of China

see also China, People’s Republic of, Hong Kong, and Macau, Special Administrative Region of

TJ

Tajikistan

For Tanganyika , see Tanzania, United Republic of

TZ

Tanzania, United Republic of

For Tashkent , see Uzbekistan

TH

Thailand, Kingdom of

For Tibet Autonomous Region , see China, People’s Republic of

TL

Timor-Leste

For Tobago , see Trinidad and Tobago

TG

Togo

TK

Tokelau

see also Cook Islands; New Zealand; and Niue

TO

Tonga, Kingdom of

For Trento (Trentino) , see Austria; Germany, Federal Republic of; Hungary; and Italy

TT

Trinidad and Tobago

For Tripura Tribal Areas Autonomous District , see India

For Tristan da Cunha , see Saint Helena, Ascension and Tristan da Cunha

TN

Tunisia

TR

Turkey

TM

Turkmenistan

TC

Turks and Caicos Islands, Territory of

TV

Tuvalu

U

UG

Uganda

UA

Ukraine

AE

United Arab Emirates

GB

United Kingdom of Great Britain and Northern Ireland

UK

US

United States of America, Federal Union of the

see also American Samoa, Territory of, Guam, Territory of, Northern Mariana Islands, Commonwealth of the, Puerto Rico, Commonwealth of, and Virgin Islands, U.S. Territory of the

UM

United States Minor Outlying Islands

UY

Uruguay

UZ

Uzbekistan

V

VU

Vanuatu

For Vatican , see Holy See, State of Vatican City

VE

Venezuela, Bolivarian Republic of

VN

Viet Nam, Socialist Republic of

VG

Virgin Islands, British Territory of the

VI

Virgin Islands, U.S. Territory of the

see also American Samoa, Territory of, Guam, Territory of, Northern Mariana Islands, Commonwealth of the, Puerto Rico, Commonwealth of, and United States of America, Federal Union of the

For Visayas , see Philippines

For Vojvodina , see Serbia

For Volta , see Burkina Faso

W

For Wales , see United Kingdom of Great Britain and Northern Ireland

WF

Wallis and Futuna Islands, Overseas Territory of

For West Bengal , see Bangladesh and India

EH

Western Sahara

X

For Xinjiang Uyghur Autonomous Region , see China, People’s Republic of

Y

YE

Yemen

YU

Yugoslavia, Federation of

For Yugoslav Republic , see Bosnia and Herzegovina; Croatia; Macedonia, the former Yugoslav Republic of; Montenegro; Serbia; Slovenia; and Yugoslavia, Federation of

Z

For Zaire , see Congo, the Democratic Republic of the

ZM

Zambia

For Zanzibar , see Tanzania, United Republic of

For Zelaya , see Nicaragua

ZW

Zimbabwe

Troubleshooting

Error Messages

Error messages guide you if problems affect your digital certificates. These messages describe a problem and suggest possible ways to solve it.

Error Message Cannot process CA certificate.

Explanation < exception message >

Recommended Action Cause unknown. We cannot recommend any workaround.

Error Message Cannot unpack < archive file path >.

Explanation The archive is corrupted or its source was not valid.

Recommended Action Cause unknown. We cannot recommend any workaround.

Error Message Certificate import failed.

Explanation An internal error occurred.

Recommended Action Please contact Cisco technical support.

Error Message Certificate import failed.

Explanation At least one parameter is not valid.

Recommended Action Cause unknown. We cannot recommend any workaround.

Error Message Certificate is not readable or does not exist.

Explanation < absolute file path >

Recommended Action Cause unknown. We cannot recommend any workaround.

Error Message Certificate not yet valid.

Explanation It takes effect in the future, on < date in YYYY-MM-DD format >.

Recommended Action Please check that it is correct.

Error Message Certificate rejected.

Explanation It does not match the newest certificate signing request (CSR) for < FQDN >.

Recommended Action Please generate a new certificate signing request (CSR), and then contact your certification authority (CA).

Error Message Certificate rejected.

Explanation It has expired and is no longer valid.

Recommended Action Please generate a new certificate signing request (CSR), and then contact your certification authority (CA).

Error Message Certificate rejected.

Explanation Its subject does not match < FQDN >.

Recommended Action Please confirm that you imported the correct identity certificate. Alternatively, please generate a new certificate signing request (CSR), and then contact your certification authority (CA).

Error Message Internal Error.

Explanation Cannot build certificate chain.

Recommended Action Confirm that no CA certificates are missing.

Error Message The certificate chain is broken.

Explanation An identity certificate is missing for < FQDN >.

Recommended Action Please edit the certificate chain to include all digital certificates that your certification authority (CA) has issued to you.

Error Message Warning! Browsers will reject this certificate.

Explanation It is self-signed.

Recommended Action We recommend that you use certificates from a valid certification authority (CA).

Failover

Revised: March 2015

The failover area in the AAI enables you to revert a failover configuration to a standalone configuration, recover from a situation known as “split-brain mode”, or check the failover status.

These topics are covered in detail in the Failover Configuration Guide for Cisco Digital Media Suite on Cisco.com:

http://www.cisco.com/c/en/us/td/docs/video/digital_media_systems/5_x/5-5/showandshare/failover/guide/dmsfailover.html

Set Up and Configure a DMM Appliance

Revised: March 2015

See the Quick Start Hardware Installation Guide for Cisco Show and Share and Digital Media Manager on Cisco.com for installation and set up instructions. Also:

- Ensure that a DNS entry has been created and published for the Cisco DMM appliance.

- Ensure that you have obtained the license keys to unlock the software features on your Cisco DMM appliance. For information about obtaining license keys, see the “Licenses” chapter of the User Guide for Cisco Digital Media Manager on Cisco.com.

- Verify that at least one computer on your network is configured for access to other networked devices through TCP ports 80 and 8080.

- Enable popup windows in your browser if they are disabled.

- Determine if your network uses dynamic (DHCP) or static IP addresses. If your network uses static IP addresses, obtain the following information:

– Learn what IP address to assign to the DMM appliance.

– Learn what subnet mask (netmask) to use.

– Learn what IP addresses are assigned to the default network gateway, the primary DNS server, and the secondary DNS server.

Set Up and Configure a Cisco Show and Share Appliance

Revised: March 2015

See the Quick Start Hardware Installation Guide for Cisco Show and Share and Digital Media Manager on Cisco.com for installation and set up instructions. Also:

- Ensure that a DNS entry has been created and published for the Cisco Show and Share appliance.

- Ensure that you have obtained the license keys to unlock the software features on your Cisco Show and Share appliance. For information about obtaining license keys, see the “Licenses” chapter of the User Guide for Cisco Digital Media Manager on Cisco.com.

- Verify that at least one computer on your network is configured for access to other networked devices through TCP ports 80 and 8080.

- Enable popup windows in your browser if they are disabled.

- Determine if your network uses dynamic (DHCP) or static IP addresses. If your network uses static IP addresses, obtain the following information:

– Learn what IP address to assign to the DMM appliance.

– Learn what subnet mask (netmask) to use.

– Learn what IP addresses are assigned to the default network gateway, the primary DNS server, and the secondary DNS server.

Pair the Cisco DMS Appliances

Revised: March 2015

This chapter explains how to use Appliance Administrative Interface (AAI) to pair a Cisco Show and Share appliance with a Cisco Digital Media Manager (DMM) appliance. You must pair your Cisco DMM appliance and your Cisco Show and Share appliance after initial configuration, after performing a software recovery on one or both appliances, or after changing the hostname of one or both appliances.

This chapter contains the following sections:

- Avoid Pairing Failures

- Pair Your Appliances

Avoid Pairing Failures

To avoid pairing failures:

- Pairing fails when you complete these steps in the wrong order. You must use AAI on your Cisco Show and Share appliance before you use AAI on your Cisco DMM appliance. Do not reverse this order or try to use AAI simultaneously on both appliances.

- Do not use the POP option on the pairing menu. Doing so may cause Cisco Show and Share to fail. If you accidentally choose the POP option, you will need to re-pair the Cisco Show and Share and Cisco DMM appliances.

Pair Your Appliances

Procedure

Step 1 From the appliance that runs Cisco Show and Share:

a. Log in as admin to the Appliance Administration Interface (AAI).

b. Choose APPLIANCE_CONTROL > PAIR APPLIANCE .

c. Choose DMM .

Caution Do not choose any other option than DMM.

d. Enter the fully-qualified domain name (FQDN) for your Cisco DMM appliance.

This is the DNS name. Do not enter an IP address.

e. Press Enter .

Your Cisco Show and Share appliance receives and successfully imports a digital certificate from your Cisco DMM appliance.

Step 2 From the appliance that runs Cisco Digital Media Manager:

a. Log in as admin to the Appliance Administration Interface (AAI).

b. Choose APPLIANCE_CONTROL > PAIR APPLIANCE .

c. Choose SHOW_AND_SHARE .

Caution Do not choose any other option than SHOW_AND_SHARE.

d. Enter the fully-qualified domain name (FQDN) for your Cisco Show and Share appliance.

This is the DNS name. Do not enter an IP address.

e. Press Enter .

Your Cisco DMM appliance receives and successfully imports a digital certificate from your Cisco Show and Share appliance.

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

Administration Guide for Cisco Digital Media Suite 5.5 and 5.6 Appliances

© 2002 – 2015 Cisco Systems, Inc. All rights reserved.