Cisco SX10 User Manual

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Collaboration Endpoint software version 9.0 APRI L 2017

Administrator guide

for Cisco TelePresence SX10 Quick Set

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Thank you for choosing Cisco!

Your Cisco product has been designed to give you many years of safe, reliable operation.

This part of the product documentation is aimed at administrators working with the setup and configuration of the video system.

Our main objective with this Administrator guide is to address your goals and needs. Please let us know how well we succeeded!

May we recommend that you visit the Cisco web site regularly for updated versions of this guide.

The user documentation can be found on

► http://www.cisco.com/go/sx-docs

How to use this guide

The top menu bar and the entries in the Table of contents are all hyperlinks. You can click on them to go to the topic.

Table of contents

Introduction ....................................................................................................................... 4

User documentation and software ....................................................................................... 5

What’s new in CE9 ................................................................................................................ 6

SX10 Quick Set at a glance ................................................................................................... 9

Power On and Off ............................................................................................................... 10

LED indicators ......................................................................................................................11

How to administer the video system ....................................................................................12

Configuration .................................................................................................................. 16

User administration ..............................................................................................................17

Change the system passphrase ......................................................................................... 18

Set a PIN code for the Settings menu ................................................................................ 19

System configuration .......................................................................................................... 20

Add a sign in banner ........................................................................................................... 21

Manage the service certificates of the video system ......................................................... 22

Manage the list of trusted certificate authorities (CAs) ...................................................... 23

Set up secure audit logging ................................................................................................ 24

Manage pre-installed certificates for CUCM via Expressway provisioning ........................ 25

Delete CUCM trust lists....................................................................................................... 26

Change the persistency mode............................................................................................ 27

Set strong security mode ................................................................................................... 28

Set up Intelligent Proximity for content sharing .................................................................. 29

Adjust the video quality to call rate ratio ............................................................................. 34

Packet loss resilience - ClearPath ...................................................................................... 35

Choose wallpaper ............................................................................................................... 36

Choose a ringtone and set the ringtone volume ................................................................ 37

Manage local contacts ........................................................................................................ 38

Peripherals ...................................................................................................................... 39

Extend the number of input sources ................................................................................... 40

Real-time communication requirements for displays ..........................................................41

Connect the Touch 10 controller ........................................................................................ 42

Maintenance ................................................................................................................... 44

Upgrade the system software ............................................................................................ 45

Add option keys .................................................................................................................. 47

System status ..................................................................................................................... 48

Run diagnostics ................................................................................................................... 49

Download log files ............................................................................................................... 50

Create a remote support user .............................................................................................51

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Backup or restore a configuration....................................................................................... 52

Revert to the previously used software image ................................................................... 53

Factory reset the video system .......................................................................................... 54

Factory reset the Touch 10 ................................................................................................. 57

Capture user interface screenshots ................................................................................... 58

System settings .............................................................................................................. 59

Overview of the system settings ........................................................................................ 60

Audio settings ..................................................................................................................... 64

CallHistory settings ............................................................................................................. 66

Cameras settings ................................................................................................................ 67

Conference settings ........................................................................................................... 69

FacilityService settings ....................................................................................................... 73

H323 settings .......................................................................................................................74

Logging settings ................................................................................................................. 77

Network settings ................................................................................................................. 78

NetworkServices settings ................................................................................................... 85

Peripherals settings ............................................................................................................ 90

Phonebook settings ............................................................................................................ 92

Provisioning settings ........................................................................................................... 93

Proximity settings................................................................................................................ 96

RTP settings ........................................................................................................................ 97

Security settings ................................................................................................................. 98

SerialPort settings ............................................................................................................. 100

SIP settings ........................................................................................................................101

Standby settings ............................................................................................................... 105

SystemUnit settings .......................................................................................................... 106

Time settings .................................................................................................................... 107

UserInterface settings ........................................................................................................110

UserManagement settings ................................................................................................. 112

Video settings .................................................................................................................... 114

Experimental settings ........................................................................................................121

Appendices ................................................................................................................... 122

How to use the remote control and the on-screen user interface ................................... 123

How to use Touch 10 .........................................................................................................124

Set up remote monitoring ................................................................................................. 125

Access call information while using the web interface ..................................................... 126

Place a call using the web interface ..................................................................................127

Share content using the web interface ............................................................................. 129

Local layout control ........................................................................................................... 130

Control a local camera .......................................................................................................131

Control a far end camera .................................................................................................. 132

Add in-room controls to Touch 10 ................................................................................... 133

Manage startup scripts ..................................................................................................... 13 4

Access the video system’s XML files .............................................................................. 135

Execute API commands and configurations from the web interface ............................... 136

Serial interface .................................................................................................................. 137

Technical specification ...................................................................................................... 13 8

Supported RFCs ............................................................................................................... 140

User documentation on the Cisco web site .......................................................................141

Cisco contacts ...................................................................................................................142

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

Chapter 1

Introduction

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

User documentation and software

Products covered in this guide

• Cisco TelePresence SX10 Quick Set

User documentation

This guide provides you with the information required to administrate the video system.

The guide primarilly addresses capabilities and configurations of on-premise registered video systems (CUCM, VCS), but a sub-set of the capabilities and configurations also applies to devices that are registered to our cloud service (Cisco Spark).

Refer to the ► User documentation on the Cisco web site appendix for more information about the guides for this product.

Documentation on the Cisco web site

Visit the Cisco web site regularly for updated versions of the guides:

► http://www.cisco.com/go/sx-docs

Documentation for cloud registered devices

For more information on Cisco Spark room devices, visit:

► https://help.webex.com/community/cisco-cloud- collab-mgmt

Cisco Project Workplace

Explore the Cisco Project Workplace to find inspiration and guidelines when preparing an office or meeting room for video conferencing:

► http://www.cisco.com/go/projectworkplace

Software

Download software for the endpoint from the Cisco web site:

► http://www.cisco.com/cisco/software/navigator. html

We recommend reading the Software release notes (CE9):

► http://www.cisco.com/c/en/us/support/ collaboration-endpoints/telepresence-quick-setseries/tsd-products-support-series-home.html

Converting to CE software

Before upgrading from TC software to CE software, it is impor tant to consider the upgrade requirements; otherwise upgrading to CE software can leave you with a non-functional deployment that requires you to downgrade.

Refer to the software release notes, and the

► Upgrade the system software cha pte r.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

What’s new in CE9

This chapter provides an overview of the new and changed system settings, and the new features and improvements in the Cisco Collaboration Endpoint software version 9 (CE9) compared to CE8.

For more details, we recommend reading the Software release notes:

► http://www.cisco.com/c/en/us/support/collaboration- endpoints/telepresence-quick-set-series/tsd-productssupport-series-home.html

New features and improvements in CE9.0

Updated user interface

The user interfaces on the Touch 10, on screen, and on integrated touch screens have been updated. The main menu items on the home screen have been replaced with more prominent activities.

Some of the settings have been removed from the Touch 10 advanced settings menu to align with the on-screen display menu.

Wakeup on motion detection

Wakeup on motion detection senses when a person walks into the conference room and the video system wakes up automatically. You need to enable the following setting for this feature to work:

xConfiguration Standby WakeupOnMotionDetection

You can’t manually set the video system in standby when this feature is enabled.

Updated In-Room Control editor

The In-Room Control editor is updated with a new look, improved logic and usability for producing a control interface more efficiently. In addition, a new directional pad widget and an In-Room Control simulator is added.

Added language support

We have added support for Potuguese (Portugal) to the on-screen display and Touch controller menus.

Other changes

• Support for HTTPS client certificates has been added.

• Unplugging the presentation cable stops the presentation sharing instantly.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

System configuration changes in CE9.0

New configurations

NetworkServices HTTPS Server MinimumTLSVersion

NetworkServices HTTPS StrictTransportSecurity

Peripherals Pairing CiscoTouchPanels EmcResilience

Standby WakeupOnMotionDetection

Configurations that are removed

UserInterface UserPreferences

Conference VideoBandwidth PresentationChannel Weight

Standby AudioMotionDetection

Configurations that are modified

Cameras Camera [n] *

OLD: User role: ADMIN, USER NEW: User role: ADMIN, INTEGRATOR

UserInterface Language

NEW: Portuguese added to value space

Configurations with the new INTEGRATOR user role

A new user role - INTEGRATOR - is introduced in CE9.0. It has been added to the following configurations:

Audio DefaultVolume

Audio Input Microphone [n] *

Audio Microphones Mute Enabled

Audio Output Line [n] *

Audio SoundsAndAlerts *

CallHistory Mode

Cameras Camera [n] *

Conference DefaultCall Rate

Conference DoNotDisturb DefaultTimeout

FacilityService *

Peripherals Pairing Ultrasound Volume MaxLevel

Peripherals Pairing Ultrasound Volume Mode

Peripherals Profile *

SerialPort Mode

Standby *

SystemUnit Name

Time Zone

UserInterface OSD Output

UserInterface Wallpaper

Video ActiveSpeaker DefaultPIPPosition

Video Input Connector [n] *

Video Monitors

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

Video Output Connector [n] CEC Mode

Video Output Connector [n] Resolution

Video Output Connector [n] RGBQuantizationRange

Video Presentation DefaultPIPPosition

Video Selfview Default *

Video Selfview OnCall *

<path> * means that the change applies to all configurations starting with <pat h>.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

SX10 Quick Set at a glance

The Cisco TelePresence SX10 Quick Set is an all-in-one unit designed to video-enable small collaboration spaces.

It is a high quality unit that combines camera and codec into a compact device that is mounted over a standard flat-panel display. It can be connected to power and LAN through a single cable for both power and Ethernet (PoE).

The camera has a wide-angle field of view, and provides good overview even in small spaces. High-definition video is enabled with 1080p30 resolution.

Features and benefits

• Optimal definition up to 1080p30 with content sharing at WXGAp5.

• Wide angle 83° horizontal field of view with 5x zoom (optical and digital).

• Ready-to-use unit with Power over Ethernet (PoE).

• Integrated microphone, and optional external Cisco TelePresence Table Microphone 20.

• Operation using TRC6 remote control (default), or 10 inch Touch controller (optional).

• Energy efficient with low power consumption (EU Class B).

• Registers with Cisco Unified Communications Manager (UCM), Cisco TelePresence Video Communication Server (VCS), and Cisco Spark.

SX10 Quick Set is delivered with a TRC6 remote control. You may order the Cisco TelePresence Touch 10 controller as an option

SX10 Quick Set mounted on top

of a standard flat-panel display

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

Power On and Off

Power On/Off with the Power button

The power button, with LED indicator, is placed on the front as shown in the illustration.

Power button with LEDs

encircling the button

Restart and standby using the user interface

Restart the system

1. Select the settings icon (cogwheel) in the status bar of the user interface.

2. Select System Information > Restart.

3. Select Restart again to confirm your choice.

Enter/exit standby mode

1. Select the settings icon (cogwheel) in the status bar of the user interface.

2. Select Standby.

Power Off or restart the system remotely

Restart.

Restart the system

Click Restart device... and confirm your choice.

It takes a few minutes before the system is ready for use.

Switch on

If the video system does not start automatically, press the power button gently.

The LED is lit while the video system starts up.

Switch off

Press the power button gently and hold until the light goes out.

Enter/exit standby mode

Press the power button briefly. It takes a few seconds before the unit enters standby.

Power Off the system

Click Shutdown device... and confirm your choice.

You cannot power the system on again remotely.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

LED indicators

Camera LED

Status LED around the power button

Status LED

The status LED is a circle around the power button. The normal LED color is white. A red light indicates hardware failure.

Normal operation (not standby):

Steady light.

In standby mode:

The LED pulsates slowly.

No network connection:

The LED repeatedly flashes twice.

During startup (boot):

The LED flashes.

Camera LED

The camera LED is just above the camera lens.

Incoming call:

The LED flashes.

In call:

Steady light.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

How to administer the video system

In general, we recommend you to use the web interface to administer and maintain the video system, as described in this administrator guide.

Alternatively, you can access the API of the video system by other methods:

• HTTP or HTTPS (also used by the web interface)

• SSH

• Tel n et

• Serial interface (RS-232)

If you want more information about the different access methods, and how to use the API, refer to the API guide for the video system.

Tip

If the configuration or status is available in the API, the web interface setting or status translates into an API configuration or status as follows:

Set X > Y > Z to Value (we b)

is the same as

xConfiguration X Y Z: Value

Check X > Y > Z status (web)

is the same as

xStatus X Y Z

(API)

Access method Notes How to enable/disable the methods

HTTP/HTTPS • Used by the web interface of the video system

Tel net • Non-secure TCP/IP connection

SSH • Secure TCP/IP connection

Serial interface (RS-232) • Connect to the video system with a cable. IP-

(page 1 of 4)

NetworkServices > HTTP > Mode

• Non-secure (HTTP) or secure (HTTPS) communication

• HTTP: Enabled by default HTTPS: Enabled by default

• Disabled by default

• Enabled by default

address, DNS, or a network is not required

• Enabled by default

• For security reasons, you are asked to sign in by default (SerialPort > LoginRequired)

If all access methods are disabled (set to Off), you can no longer configure the video system. You are not able to reenable (set to On) any of the access methods, and you must factory reset the video system to recover.

Restart the video system for changes to take effect

NetworkServices > Telnet > Mode

You do not need to restart the video system. It may take some time for changes to take effect

NetworkServices > SSH > Mode

You do not need to restart the video system. It may take some time for changes to take effect

SerialPort > Mode

Restart the video system for changes to take effect

For example:

Set SystemUnit > Name to MySystem

is the same as

xConfiguration SystemUnit Name: MySystem

Check SystemUnit > Software > Version status

is the same as

xStatus SystemUnit Software Version

More settings and statuses are available in the web interface than in the API.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

How to administer the video system (page 2 of 4)

The web interface of the video system

The web interface is the administration portal for the video system. You can connect from a computer and administer the system remotely. It provides full configuration access and offers tools and mechanisms for maintenance.

Note: The web interface requires that HTTP or HTTPS

is enabled (refer to NetworkServices > HTTP > Mode setting).

We recommend that you use the latest release of one of the major web browsers.

Connect to the video system

Open a web browser and enter the IP address of the video system in the address bar.

How to find the IP address

1. Select the settings icon (cogwheel) in the status bar of the user interface.

2. Select System Information.

Enter user name and passphrase for the endpoint and click Sign In.

The system is delivered with a default user named admin with no passphrase. Leave the

Passphrase field blank when signing in for the

first time.

It is mandatory to set a password for the admin us er.

Sign out

Hover the mouse over the user name and choose Signout from the drop-down list.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

How to administer the video system (page 3 of 4)

How the web interface is organized

The web interface is organized in sub-pages. All sub-pages shown below are available if the video system is registerd to an on-premise service (CUCM, VCS); the pages shown in grey color are not available if the video system is registered to the Cisco cloud service (Cisco Spark).

In both cases, a user that is signed in, sees only the pages that he has access rights for.

Read more about user administration, user roles and access rights in the ► User administration ch apt er.

Main menu

Call ControlHome Security

Setup

Configuration

Status

Peripherals

Personalization

Favorites

Users

Access PIN

Server Certificates

CUCM Certificates

Certificate Authorities

Strong Security Mode

Non-persistent Mode

Maintenance

Diagnostics

System Logs

Call Logs

User Interface Screenshots

Software Upgrade

Option Keys

Backup and Restore

System Recovery

Restart

Integration

In-Room Control

Startup Scripts

Developer API

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Introduction

How to administer the video system (page 4 of 4)

Settings available on the user interface

You have access to some basic configurations and system tests on the video system’s user interface. Some of the configurations and tests may be unavailable due to the actual system setup.

• Change the language

• Change the time zone

• Adjust the screen (overscan compensation)

• Change the network settings for the video system

• Change the network settings for the Touch controller

• Select and activate a ser vice (Cisco’s cloud service, or Cisco UCM, VCS or Expressway on-premise services)

• Check the microphone level

• Run a sytem volume check, and set the default volume

• Set the default camera position

• Check the connection to a presentation source

• View system diagnostics for troubleshooting

• Unpair the Touch controller from the video system, and select another system to pair with

• Factory reset the video system

• Enable extended logging

Most of these settings and tests are also part of the Setup assistant that is launched when the video system is powered up for the first time. The Setup assistant is described in the Getting Started Guide for systems running CE software.

Access Settings

1. Select the settings icon (cogwheel) in the status bar of the user interface.

2. Select System information > Settings.

You may set a PIN code to protect the Settings menu, refer to the ► Set a PIN code for the Settings menu ch apt er.

3. Select the button next to the setting you want to change or the test you want to run.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Chapter 2

Configuration

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

User administration

You have to sign in to get access to the web and command line interfaces. You can assign different roles to users, to determine what they should have access to.

The default user account

The video system comes with a default administrator user account with full access rights. The user name is admin and no passphrase is initially set.

It is mandatory to set a passphrase for the admin us er.

Read how to set the passphrase in the ► Change the system

passphrase ch apter.

Create a new user account

1. Sign in to the web interface, and navigate to Security > Users.

2. Click Add new user....

3. Fill in the Username, Passphrase and Repeat passphrase fields.

As a default, the user has to change the passphrase when he signs in for the first time.

Fill in the Client Certificate DN (Distinguished Name) field only if you use client certificates for authentication.

4. Check the appropriate Roles check boxes.

If you assign the ADMIN role to a user, enter your own passphrase in the Your passphrase input field for verification.

5. Set the Status to Active to activate the user.

6. Click Create User.

Use the Back button to leave without making any changes.

input

Edit an existing user account

If you make changes to a user that holds the Admin role, you must always enter your own passphrase in the Your passphrase input field for verification.

Change the user privileges

1. Sign in to the web interface, and navigate to

Security > Users.

2. Click the appropriate user in the list.

3. Choose user roles, set the status to Acitve or Inactive, and decide if the user has to change the passphrase on the next sign in.

Fill in the Client Certificate DN (Distinguished Name) field only if you use certificate login on HTTPS.

4. Click Edit User to save the changes.

Use the Back button to leave without making any changes.

Change the passphrase

1. Sign in to the web interface, and navigate to Security > Users.

2. Click the appropriate user in the list.

3. Enter the new passphrase in the appropriate input fields.

4. Click Change passphrase to save the change.

Use the Back button to leave without making any changes.

Delete the user account

1. Sign in to the web interface, and navigate to Security > Users.

2. Click the appropriate user in the list.

3. Click Delete user... and confirm when prompted.

About user roles

A user account may hold one or a combination of user roles. A user account with full access rights, like the default admin user, should possess the ADMIN, USER and AUDIT roles.

These are the user roles:

ADMIN: A user with this role can create new users, change most settings, make calls, and search the contact lists. The user cannot upload audit certificates and change the security audit settings.

USER: A user with this role can make calls and search the contact lists. The user can modify a few settings, for example adjust the ringtone volume and set the time and date format.

AUDIT: A user with this role can change the security audit settings and upload audit certificates.

ROOMCONTROL: A user with this role can create in-room controls. The user has access to the In-room control editor and corresponding developement tools.

INTEGRATOR: A user with this role has access to settings, commands and status that are required to set up advanced AV scenarios, and to integrate our video systems with 3 user can also create in-room controls.

Cisco Spark registered systems

If a video system is registered to Cisco’s could service (Cisco Spark), only local users with the INTEGRATOR and ROOMCONTROL user roles are available.

party equipment. Such a

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Change the system passphrase

You need to know the system passphrase in order to:

• Sign in to the web interface

• Sign in and use the command line interfaces

The default user account

The video system is delivered with a default user account with full access rights. The user name is admin, and initially, no passphrase is set.

It is mandatory to set a passphrase for the default admin user in order to restrict access to system configuration. It is also mandatory to set a passphrase for any other user with ADMIN rights.

A warning, saying that the system passphrase is not set, is shown on screen until a passphrase is set for the admin us er.

Other user accounts

You can create many user accounts for the video system.

Read more about how to create and manage user accounts in the

► User administration ch a pter.

Change your passphrase

1. Sign in to the web interface, hover the mouse over the user name, and choose Change Passphrase in the drop down list.

2. Enter the current passphrase and new passphrase in the input fields, and click Change passphrase.

The passphrase format is a string with 0–64 characters.

If the passphrase currently is not set, leave the Current

passphrase field blank.

Change another user’s passphrase

If you have administrator access rights, you can change the password of any user.

1. Sign in to the web interface, and navigate to Security > Users.

2. Click the appropriate user in the list.

3. Enter the new passphrase in the Passphrase and Repeat passphrase input fields.

If the user holds the Admin role, you must enter your own passphrase in the Your passphrase input field for verification.

4. Click Change passphrase to save the change.

Use the Back button to leave without making any changes.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Set a PIN code for the Settings menu

When you use the TRC6 remote control, you have access to an on-screen Settings menu.

We recommend that you set a PIN code for the Settings menu, to prevent unauthorized users from changing the configuration of the video system.

Set a PIN code

1. Sign in to the web interface, and navigate to

Security > Access PIN.

2. Enter a PIN code in the input field, and click Set PIN.

The PIN can only contain numbers.

Clear the PIN code

1. Sign in to the web interface, and navigate to

Security > Access PIN.

2. Click Clear PIN.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

System configuration

Configuration.

Find a system setting

Search for settings

Enter as many letters as needed in the search field. All settings that contain these letters are shown in the right pane. Settings that have these letters in their value space are also shown.

Select a category and navigate to settings

The system settings are grouped in categories. Choose a category in the left pane to show the associated settings.

Change a system setting

Check the value space

A settings’s value space is specified either by text following the input field or in a drop-down list that opens when you click the arrow.

Change a value

1. Choose the preferred value from the drop-down list, or enter new text in the input field.

2. Click Save for the change to take effect.

Use the Undo or Cancel buttons if you do not want to make any changes.

About system settings

All system settings can be changed from the web interface.

Each system setting is described in the

► System settings chap ter.

Different settings may require different user credentials. In order to be sure that an administrator is able to change all system settings, an administrator user must possess all user roles.

You can read more about user administration and user roles in the

► User administration ch a pter.

Categories with unsaved changes are marked with an edit symbol (

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Add a sign in banner

1. Enter the message that you want to present to the user when he signs in.

2. Click Save to activate the banner.

About sign in banner

If a system administrator wants to provide initial information to all users, he can create a sign in banner. The message is shown when the user signs in to the web interface or the command line interface.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Manage the service certificates of the video system

Certificates.

Enable or disable, view or delete a certificate

Use the On and Off buttons to enable or disable a certificate for the different services.

Use the corresponding button to view or delete a certificate.

Add a certificate

You need the following files:

• Certificate (file format: .PEM)

• Private key, either as a separate file or included in the same file as the certificate (file format: .PEM format)

• Passphrase (required only if the private key is encrypted)

The certificate and the private key will be stored in the same file on the video system.

About the service certificates of the video system

Certificate validation may be required when using TLS (Transport Layer Security).

A server or client may require that the video system presents a valid certificate to them before communication can be set up.

The video system’s certificates are text files that verify the authenticity of the system. These certificates may be issued by a certificate authority (CA).

Certificates are used for the following services: HTTPS server, SIP, IEEE 802.1X and audit logging.

You can store many certificates on the video system, but only one certificate can be enabled for each service at a time.

If authentication fails, the connection will not be established.

1. Browse to find the Certificate file and Private key file (optional) on your computer.

2. Fill in the Passphrase if required.

3. Click Add certificate... to store the certificate on the video system.

The cer tificates and certificate issuers in the illustration are examples. Your system has other certificates.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Manage the list of trusted certificate authorities (CAs)

Authorities, and open the Custom CAs tab.

View or delete a certificate

Use the corresponding button to view or delete a certificate.

Upload a list of certificate authorities

1. Browse to find the file containing a list of CA certificates on your computer (file format: .PEM).

2. Click Add certificate authority... to store the new CA certificates on the video system.

The cer tificates and certificate issuers in the illustration are examples. Your system has other certificates.

Previously stored certificates are not deleted automatically.

The entries in a new file with CA certificates are appended to the existing list.

You need the following file:

• CA certificate list (file format: .PEM).

About trusted CAs

Certificate validation may be required when using TLS (Transport Layer Security).

The video system may be set up to require that a server or client presents its certificate to the video system before communication can be set up.

The certificates are text files that verify the authenticity of a server or client. The certificates must be signed by a trusted CA.

In order to verify the signature of the certificates, a list of trusted CAs must reside on the video system.

The list must include all CAs needed in order to verify certificates for both audit logging and other connections.

If authentication fails, the connection will not be established.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Set up secure audit logging

Sign in to the web interface, navigate to Setup > Configuration. The certificate authority (CA) that verifies the certificate

of the audit server must be in the video system’s list of trusted certificate authorities. Otherwise, logs will not be sent to the external server.

Refer to the ► Manage the list of trusted certificate

authorities (CAs) chapter how to update the list.

1. Open the Security category.

2. Find the Audit > Server settings, and enter the

Address of the audit server.

If you set PortAssignment to

Manual, you must also enter

a Port number for the audit server.

Click Save for the changes to take effect.

3. Set Audit > Logging > Mode to ExternalSecure.

Click Save for the change to take effect.

About secure audit logging

When audit logging is enabled, all sign in activity and configuration changes on the video system are recorded.

Use the Security > Audit > Logging >

Mode setting to enable audit logging.

Audit logging is disabled by default.

In ExternalSecure audit logging mode the video system sends encrypted audit logs to an external audit server (syslog server), which identity must be verified by a signed certificate.

The signature of the audit server is verified using the same CA list as other servers/clients.

If the audit server authentication fails, no audit logs are sent to the external server.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Manage pre-installed certificates for CUCM via Expressway provisioning

Authorities, and open the Preinstalled CAs tab.

View or disable certificates

Use the Details... and Disable buttons respectively, to view or disable certificates.

The cer tificates and certificate issuers in the illustration are examples. Your system has other certificates.

As an alternative to using the pre-installed certificates, you can append the certificates you need to the certificate list manually.

Refer to the ► Manage the list of trusted certificate

authorities (CAs) chapter how to update the list of trusted

certificates.

About pre-installed certificates

The pre-installed certificates in this list are only used when the video system is provisioned by Cisco Unified Communications Manager (CUCM) via Expressway (Edge).

Only Cisco Expressway infrastructure certificates are checked against this list.

If the validation of the Cisco Expressway infrastructure certificate fails, the video system will not be provisioned and registered.

Factory resetting the video system does not delete the list of pre-installed certificates.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Delete CUCM trust lists

The information in this chapter is only relevant for video systems that are registered to a Cisco Unified Communications Manager (CUCM).

CUCM Certificates.

Delete the CUCM trust lists

Click Delete CTL/ITL to remove the trust lists.

As a general rule, you should not delete old CTL (Certificate Trust List) and ITL (Initial Trust List) files.

In these cases, you must still delete them:

• When you change the CUCM IP address.

• When you move the endpoint between CUCM clusters.

• When you need to re-generate or change the CUCM certificate.

Overview of trust list fingerprints and certificates

The trust lists’ fingerprints and an overview of the certificates in the lists are displayed on the web page.

This information may be useful for troubleshooting.

More information about trust lists

For more information about CUCM and trust lists, read the Deployment guide for TelePresence endpoints on CUCM that is available on the Cisco web site.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Change the persistency mode

Non-persistent Mode.

Check the persistency status

The active radio buttons show the current persistency status of the video system.

Alternatively, you can navigate to Setup > Status, and then open the Security category to see the Persistency status.

Change the persistency settings

All persistency settings are set to Persistent by default. You only have to change these settings if you want to make them Non- persistent.

1. Click the radio buttons to set the persistency for configurations, call history, internal logging, local phonebook (local directory and favorites) and IP connectivity (DHCP) information.

2. Click Save and re bo ot....

The video system restarts automatically. After the restart, the behavior changes according to the new persistency settings.

Logs, configurations, and other data that was stored before you switched to Non-persistent mode, are NOT cleared or deleted.

Persistency mode

Configurations, call history, internal logs, local phonebook (local directory and favorites list), and IP connectivity information are stored by default. Because all persistency settings are set to Persistent, a system restart does not delete this information.

Generally, we recommend you NOT to change the persistency settings. Only change to Non-persistent mode if you have to prevent users from being able to see or traceback to any logged information from the previous session

In Non-persistent mode, the following information is lost or cleared each time the system restarts:

• System configuration changes

• Information about placed and reveived calls (call history)

• Internal log files

• Changes to the local contacts or favorites list

• All IP related information (DHCP) from the last session

Information that was stored before changing to Non-persistent mode is not automatically cleared or deleted. You must factory reset the video system to delete such information.

There is more information about performing a factor y reset in the

► Factory reset the video system

ch apter.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Set strong security mode

Strong Security Mode.

Set strong security mode

Read carefully about the consequences of strong security mode before you continue.

1. If you want to use strong security mode, click

Enable Strong Security Mode.... and confirm

your choice in the dialog box that appears.

The video system restarts automatically.

2. Change the passphrase when you are prompted. The new passphrase must meet the strict criteria as described.

How to change the system passphrase is described in the ► Change the system

passphrase ch apter.

About strong security mode

Use strong security mode only when compliance with DoD JITC regulations is required.

Strong security mode sets very strict passphrase requirements, and requires all users to change their passphrase on the next sign in.

Return to normal mode

Click Disable Strong Security Mode... in order to restore the video system to normal mode. Confirm your choice in the dialog box that appears.

The video system restarts automatically.

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Set up Intelligent Proximity for content sharing (page 1 of 5)

Cisco Proximity allows users to see, control, capture and share content directly on their own mobile devices (smartphone, tablet, or laptop), when the device is near a video system.

The mobile device can automatically pair with the video system when it comes within range of ultrasound transmitted by the video system.

The number of simultaneous Proximity connections depends on the type of video system. The client warns new users if the maximum number of connections has been reached.

Video system Maximum number of connections

Spark Room Kit 7

SX80 10

SX20 7

SX10 7

MX700, MX800 10

MX200 G2, MX300 G2 7

DX70, DX80 3

Proximity services

Place calls and control the video system:

• Dial, mute, adjust volume, hang up

• Available on smartphones and tablets (iOS and Android)

View shared content on a mobile device:

• View shared content, review previous slides, save selected slides

• Available on smartphones and tablets (iOS and Android)

• For DX70 and DX80, this service is available only when in a call

Wireless share from a desktop client:

• Share content without connecting a presentation cable

• Available on laptops (OS X and Windows)

Place calls and control the video system

View shared content on a mobile device

Wireless share from a mobile device

Cisco TelePresence SX10 Quick Set Administrator Guide

Introduction

Configuration

Peripherals

Maintenance

System settings

Appendices



Configuration

Set up Intelligent Proximity for content sharing (page 2 of 5)

Install a Cisco Proximity client

Where to find the clients

You can download the Cisco Proximity clients for smartphones and tablets (Android and iOS), and laptops (Windows and OS X) free of charge from ► http://proximity.cisco.com

Clients for smartphones and tablets are also available directly through Google Play (Android) and Apple App Store (iOS).

End-user license agreement

Read the end-user license agreement carefully,

► http://www.cisco.com/c/en/us/td/docs/general/warranty/ English/EU1KEN_.html

Supported operating systems

• iOS 7 and above

• Android 4.0 and above

• Mac OS X 10.9 and above

• Windows 7 and above The tile based interface introduced with Windows 8 is not

supported.

+ 112 hidden pages

Cisco SX10 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Introduction

User documentation and software

What’s new in CE9

SX10 Quick Set at a glance

Power On and Off

LED indicators

How to administer the video system

Configuration

User administration

Change the system passphrase

Set a PIN code for the Settings menu

System configuration

Add a sign in banner

Manage the service certificates of the video system

Manage the list of trusted certificate authorities (CAs)

Set up secure audit logging

Manage pre-installed certificates for CUCM via Expressway provisioning

Delete CUCM trust lists

Change the persistency mode

Set strong security mode

Set up Intelligent Proximity for content sharing (page 1 of 5)