Live Communications Server 2005: Architecture, Deployment and Telephony Integration Sandra Lee-Joe Brendan Carius Microsoft Corporation MSG310

Agenda What is RTC Collaboration Landscape Vision & Products ArchitectureFederation Telephony Integration Deployment Active Directory Case study Development Office ToolKit

Developer Value IT Manager/ Service Operator Value End-User Value Standards-based platform Rich APIs and Web Services Developer tools Standards-based platform Rich APIs and Web Services Developer tools Infrastructure simplification Consolidation Consolidation Intuitive and contextual Rich-presence; multimodal Any device, any place Intuitive and contextual Rich-presence; multimodal Any device, any place Integrated Communications

By 2008 enterprise users will increase to 80% 2 IM will surpass use by % of enterprise users use IM now Enterprise Web conferencing use is expected to increase by 175% by Source: 1 - Frost & Sullivan; World Web Conferencing Markets Radicati Growth in Real-Time Collaboration

Real-Time Collaboration Solutions Microsoft Office Communicator Microsoft Office Live Communications Server Microsoft Office Live Meeting

A Simplified View SIP IM/Presence and telephony infrastructures side-by-side LCS 2005 Sam Alice AD LDAP SIP Proxy PBX Directory Telephone Presence Store PBX PSTN Gateway SIP/CSTA Gateway Service Provider Network PSTN Conference Bridge/CENT REX Branches Remote Users Federated Users Public IM Connectivity

Integration with desktop and LOB applications Extensible platform built on industry standards Federation support and AOL, Yahoo, MSN connectivity Enterprise-grade scalable and secure IM solution Live Communications Server 2005

Presence, IM, and Web Conferencing in Outlook, Word, SharePoint, etc. Enabling higher productivity from users favorite applications Adding “Real-Time” to Microsoft Office Enabling contextual collaboration

An Amazing Phone Call….. WiFi access 30,000 feet over the Atlantic Ocean IM/Audio/Video connection Voice quality better than cell

No gateways required Sharing of presence info On/off switch per Public IM network Logging and archiving Corporate identity management Rich Admin Controls Encryption of all messages Single Client Experience Icon/graphics support Internal & Public IM Contacts Public IM Connectivity (PIC) Allowing LCS users to conduct business with MSN, AOL and Yahoo IM users

What’s Going on Today? Usage of IM solutions has become “viral” Admins forced to allow it Enterprises are dependant on it Corporations have mixture of Presence/IM clients Different clients (both Enterprise and Consumer) Multiple protocols/ports for admin to open Different protocols don’t interoperate Using public clouds to bridge boundaries Varying levels of security available

What are the Problems With This? Existing communication is INSECURE! Can’t confirm identity Messages can’t be retained Nothing going over a public cloud is secure Messages can be spoofed/sniffed No control over links to public clouds Viruses, IP/Customer loss, content No patch management for the admin

Support for Communicator 2005 Enhanced Federation IM, Audio, Video, Telephony Enhanced SPIM control Simplified Admin Controls Encryption of messages Per user controls Enhanced presence Support for Public IM Access Proxy Scale Live Communications Server 2005 SP1 Extending the reach of IM and presence to partners, suppliers and customers

Agenda What is RTC Collaboration Landscape Vision & Products ArchitectureFederation Telephony Integration Deployment Active Directory Case study Development Office ToolKit

Remote Users Users Access Proxy LCS Clients LCS 2005 SE Logging/ArchivingServer SQL LCS 2005 Standard Edition Environnent LCS 2005 Standard Edition Environnent Live Communications Server SE Standard edition basic topology Single server architecture Supports up to 15k users User’s data stored in MSDE Authenticated identity in AD Add logging & archiving SQL Server Remote user access No VPN required Federate outside firewall Via access proxy

SQL Remote Users Users Access Proxy LCS 2005 EE LCS 2005 EE Load Balancer LCS 2005 EE LCS 2005 EE SQL SQL Cluster (optional) Live Communications Server EE Enterprise edition topologies Two-tiered architecture Over 120k users in single pool SQL database stores user info Authenticated identity via AD Scale out With additional EE servers Remote user access No VPN required Federate outside firewalls With access proxy For higher availability Front end fail-over support Optional SQL clustering

Enterprise B Enterprise A LCS 2005 Communicator Clients LCS 2005 Communicator Clients LCS 2005 Access Proxy LCS 2005 Access Proxy LCS Federation Overview Access from outside the firewall Remote user Direct route federation (enterprise to enterprise) Define one destination for one domain Clearinghouse federation Restricted or default route Key component: LCS 2005 access proxy

Enhanced Federation with SP1 Federation pain points in LCS 2005 Define direct federation rules Requires the LCS admin to obtain info from federated partner admin – manual process Not scaleable if you have many partners (admin time and cost) For 300 partners, you need 300 federation rules! How SP1 addresses these issues: Simplify admin process for enterprise to enterprise federation Use DNS SRV records to dynamically discover servers

Go from this in LCS 2005 to this with SP1 Enhanced Federation with SP1 (cont’d)

And from this in LCS 2005…to this with SP1! Enhanced Federation with SP1 (cont’d)

LCS Federation Overview Access from outside the firewall Remote user access Direct route federation (enterprise to enterprise) Define one destination for one domain Enhanced federation Define allow and block lists Clearinghouse federation Restricted or default route Key component: LCS 2005 access proxy Enterprise B Enterprise A LCS 2005 Communicator Clients LCS 2005 Communicator Clients LCS 2005 Access Proxy LCS 2005 Access Proxy

1. Is Supplier.com in the block list? NO 2. Look-up SIPFederationTLS._TCP.supplier.com Verify that AP name matches domain name 3. Establish MTLS connection and verify certificate SN Supplier DNS Contoso MTLS LCS 2005 Enhanced Federation with SP1 How it works

DEMO LCS 2005 SP1 Access Proxy Configuration

DEMO Show Access Proxy UI and config Show My Communicator

Address Book Service AD ABS syncs from LCS User Replicator (UR) UR syncs from AD

Putting it all Together – don’t like the picture, but something list this UK Asia Director AD Archiving Service

LCS AD SIP Proxy PBX Directory Telephone Presence Store PBX PSTN Gateway SIP Proprietary Signaling LDAP SIP/CSTA Gateway Service Provider Network PSTN Conference Bridge/CENT REX Telephony Integration SIP IM/Presence and telephony infrastructures side-by-side

Infrastructure Pieces Live Communications Server 2005 SIP-PSTN gateway PBX RCC Gateway (CSTA over SIP) ‘Alice’ ‘Bob’ (external party) Conferencing MCU PSTN Conferencing provider PSTN Network Internet

DEMO Office Communicator and LCS Telephony Integration

Agenda What is RTC Collaboration Landscape Vision & Products ArchitectureFederation Telephony Integration Deployment Active Directory Case study Development Office ToolKit

Case Study BHP Billiton Live Communications Server 2005 with SP1 Office Communicator LCS Architecture Active Directory Preparation Piloting LCS DNS Requirements Certificate Requirements

BHP Billiton LCS 2005 Architecture

Active Directory Preparation Forest Prep Run once per forest Run on the root domain Creates global settings Domain Prep Run on every domain hosting LCS Creates new domain groups RTCDomainServerAdminsRTCDomainUserAdminsRTCHSDomainServices Sets permissions for these accounts at the root domain DomainAdd Prep Cross domain administration Child domain access to Enterprise Objects Hosting users from other domains Run on: Root domain User-only domains Gives permissions to the following groups RTCDomainServerAdmins to home users RTCHSDomainServices to read user attributes

Piloting Live Communications Server Corporate Forest msRTCSIP-OriginatorSID objectSID

DNS SRV (Auto-Configuration) _sip._tls.<domain> Used for TLS access (MOC assumes external) _sipinternaltls._tcp.<domain> Used for internal TLS access Not used by Windows Messenger _sip._tcp.<domain> Used for TCP access (internal assumed) _sipinternal._tcp.<domain> Used for internal TCP access Not used by Windows Messenger _sipfederationtls._tcp.<domain> Used for Enhanced Federation by Access Proxy’s

Certificates Subject Name (SN) represents the authoritative name of the server Matches the pool fqdn for front-end servers Matches the published DNS name for Access Proxies Used to determine the identity of the server that is connecting TO your server Subject Alternate Name (SAN) allows a certificate to identify the server with multiple names Note: the SN should be the first name listed in the SAN field Used (in addition to the SN) to validate the server hostname you are connecting to

Building Custom Applications Show the presence toolkit Show a custom application

Building Custom Applications Office Presence Toolkit Presence indicator to drop into apps includes hover behavior & right click menu ActiveX Control with extensibility Fully integrated with Visual Studio (control appears in toolbar for drag & drop capability) Control for presence of individuals and list Call control through Communicator automation Available July, 2005 Free download:

Office RTC Presence Toolkit RTC Controls Presence icon inserted onto a form Active form with current presence Right- click Menu

RTC Controls Presence icon inserted onto a form Active form with current presence Right- click Menu

We invite you to participate in our online evaluation on CommNet, accessible Friday only If you choose to complete the evaluation online, there is no need to complete the paper evaluation Your Feedback is Important!

RTC Client APIs 3 rd Party Client 3 rd Party Application (SIP) Real-Time Signaling Infrastructure 3 rd Party Application 3 rd Party Manifest 3 rd Party Script Platform Overview

Documentation – Planning guide LCS quick start guides LCS deployment guide Window messenger resource center 120-day trial download available Customer case studies Resource kit tools (compliments documentation) Tool to request certificates Federation configuration wizard Configuration & connection validation tool Diagnostics tool Block list manager tool LCS 2005 Resources

© 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.