Training disclaimer This is a point of time view This session was recorded in July 2017 The features and functionality describe are current as of this date O365 is ongoing innovation We innovate on a constant basis New features and functionality are added frequently Always refer to latest trainings Go to http://aka.ms/sa-cce-wnv2 for the latest version of this training Go to http://aka.ms/SkypeAcademy for more trainings Training from July 2017

Skype Academy presents: What’s New in Cloud Connector Edition V2 (CCE) Skype for Business 11/12/2017 1:41 AM Skype Academy presents: What’s New in Cloud Connector Edition V2 (CCE) Carolyn Blanding Training from July 2017 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Key learnings Support for Media Bypass in CCE V2 Skype for Business 11/12/2017 1:41 AM Key learnings Support for Media Bypass in CCE V2 Support for 16 CCE appliances in one site Additional improvements How to upgrade to V2 Deep dive training on Media Bypass For more details on Media Bypass, please see our training session Media Bypass in Cloud Connector Edition V2 http://aka.ms/sa-cce-mp Training from July 2017 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Scope Cloud Connector Version 2 Prior Experience Understand to deploy and manage Cloud Connector For more training on Cloud Connector, please see http://aka.ms/sa-cce Training from July 2017

What’s New in CCE V2 Training from July 2017 Skype for Business 11/12/2017 1:41 AM What’s New in CCE V2 Training from July 2017 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Listing of what’s new in CCE V2 Media Bypass Support for 16 Cloud Connector Editions per one PSTN Site Ability to manipulate SIP headers for billing or interoperability Hybrid Voice flag in Mediation Server Agent for Call Quality Dashboard Disable SSL 3.0 by default Automatic installation of .NET framework 4.5.2 which is dependency of current SfB New Cmdlets Training from July 2017

Media Bypass in CCE V2 Why did we include support for Media Bypass? Top ask Improve voice quality and reliability Reduce number of CCE appliances Training from July 2017

Media Bypass Requirements What are the pre-requisites for media bypass? Cloud Connector V2 is deployed Tenant Administrator enabled media bypass in Office 365 Media bypass settings replicated to Cloud Connector Mediation servers DNS configured for client resolution of media bypass service URL CCE Media Bypass supported clients are deployed. 32 or 64 bit of Skype for Business as part of Microsoft Office 365 ProPlus 16.0.7870.2020 (Click-2-Run) or later. Microsoft Office 365 MSI is not supported. Note: All Office 365 update channels have supported builds https://aka.ms/c2rupdatechannels Training from July 2017

16 Cloud Connector Appliances Per Site Why did we add support for 16 appliances in one PSTN Site? Support large number of users in one PSTN Site. Reduce or remove need to assign users to different PSTN sites. Previously up to 1,500 simultaneous calls were supported in N+1 deployment. Support up to 7,500 simultaneous calls without Media bypass in N+1 deployment. Training from July 2017

Modify Sip Headers in CCE V2 Persistent Customized Trunk Settings To allow customized trunk configurations to persist through CCE updates, we added these trunk settings in the CloudConnector.msi: Enable Fast Failover Timer: Default is True. Set to False when network or gateway responses are > 10 seconds. Forward Call History: Default is False. Set to True to turn on following SIP headers: History-Info (Sim Ring/Call Forwarding) Referred by (Call Transfer) Forward PAI: Default is False. Set to True to forward PAI headers with SIP & Tel URI’s from CCE to SIP Trunk. (Used when Call History not available) For more details about Call History and Forward PAI, please see: https://aka.ms/sfbsipheadersdoc Training from July 2017

Hybrid Voice Flag in Mediation Server Agent Unique Hybrid Voice Flag To enable the online call reporting to distinguish CCE calls from calls placed by other trunks. The user agent was previously reported as Mediation Server which was indistinguishable from other Skype for Business trunks. Now the user agent for Cloud Connector is unique. Example of current version agent: <LocalUserAgent>RTCC/6.0.0.0 CCE-MediationServer/6.0.9319.398</LocalUserAgent> Training from July 2017

Demo of CCE User Agent in Online Reports Training from July 2017

Disable SSL 3.0 by default Cloud Connector does not use SSL, therefore we are disabling the SSL 3.0 protocol to remove a potential attack vulnerability. https://aka.ms/ssl30securityadvisory Training from July 2017

.Net Framework 4.5.2 Automatic installation of this dependency The Skype for Business version in CCE V2 has a dependency on .Net Framework 4.5.2. Start-CcDownload, which is run automatically as part of auto-update, will download this update for use when deploying CCE Skype for Business VM’s. If the installation fails, the CCE Management service will retry the installation. Note: The CCE Host must always have Internet connectivity to install and manage CCE. Prepare VHD with .Net 4.5.2 To reduce deployment times in large deployments, customers can use the PauseBeforeUpdate switch when creating a new base VHD with Convert-CcIsoToVhdx and manually update the Base VM as follows: Install Windows Updates Download and install .Net 4.5.2 from: https://aka.ms/netframework452 Training from July 2017

New Cmdlets – Online Manage Media Bypass The following cmdlets were added to Skype for Business Online to manage Media Bypass settings: New-CsNetworkMediaBypassConfiguration Get-CsNetworkConfiguration Set-CsNetworkConfiguration Training from July 2017

New Cmdlet – CCE Host Update Configuration The following CCE on-premises cmdlet was added to import administrative changes to the Cloud Connector configuration file to CCE: Import-CcConfiguration Note: This cmdlet will automatically run as part of Install-CcAppliance, and Register-CcAppliance to insure changes to the configuration file are imported automatically. Example: You decide to use a Windows Update Server (WSUS) to provide updates to CCE and modify the CloudConnector.ini file with the WSUS information. CCE won’t use the WSUS server for updates until you run this cmdlet. Training from July 2017

What’s Changed in CCE V2 Training from July 2017 Skype for Business 11/12/2017 1:41 AM What’s Changed in CCE V2 Training from July 2017 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Listing of what’s changed in CCE V2 Skype for Business administrator role instead of global administrator Reduce number of passwords needed when deploying CCE Use corporate network switch instead of management switch for most tasks Improvements to auto detection Changed cmdlets Training from July 2017

Skype for Business Administrator Role O365 Tenant Admin Account CCE requires an O365 Tenant admin account to manage CCE services online: Prior to V2, we required this account to be a Global Administrator. In V2, it’s supported to use a tenant admin account with Skype for Business Administrator Role. If using expiring passwords for this account, be sure to use Set-CcCredential –AccountType TenantAdmin whenever the tenant admin credentials are changed. Training from July 2017

Reduce number of passwords required for CCE CCE Passwords To reduce complexity and number of passwords managed in new V2 deployments, the following passwords will be requested when registering an appliance: CCEService – Used for CCEService account and Domain Admin, VM Admin CABackupFile – Used to import Root CA when deploying appliances ExternalCert – Used to import Edge certificate when deploying appliances Tenant Admin – Used to deploy and manage CCE online Note – that the CCEService and CABackupFile passwords must be the same for all appliances deployed within one site. Training from July 2017

Corporate Management Switch Host to CCE VM Connections To reduce the number of connect/disconnects to the CCE Management Switch when connecting to VM’s , CCE V2 has been updated as follows: The CCE Management switch used only during deployment. The corporate network switch, “SfB CCE Corpnet Switch”, used for all other connections. Note: The network adapter on the host bound SfB CCE Corpnet switch must have an IP address assigned in the same subnet as the CCE corporate network. This can be an alternate IP address. Training from July 2017

Improvements to Auto Detection CCE Auto Recovery To avoid call failures, auto recovery detection will detect the following conditions and mark the appliance down until resolved: VM’s are not connected to the CCE Corporate or Internet virtual switches VM’s are in a saved or stopped status Services are stopped on (Bolded are previously monitored services) CMS: REPLICA, MASTER MS: REPLICA, RTCSRV, RTCMEDSRV Edge: REPLICA, RTCSRV, RTCDATAPROXY, RTCMRAUTH, RTCMEDIARELAY Inbound firewall rules disabled for: CS RTCSRV on Edge CS RTCMEDSRV on MS Note: HA detection occurs over the corpnet virtual switch instead of the management switch thus avoiding constant connect/disconnect of the management switch. Training from July 2017

Cmdlet Updates – Online Administrative Experience Changes Set-CsHybridConfiguration: UseOnPremDialPlan can only be set from true to false. Get-CsHybridPSTNAppliance has following new properties: ConfigurationReplicatedOn ConfigurationSnapshot ConfigurationSnapshotUpdateOn Training from July 2017

Cmdlet Updates – CCE Host Supported PowerShell Verbs From: Renew-CcCACertificate To: Update-CcCACertificate From: Renew-CcServerCertificate To: Update-CcServerCertificate Set Domain Admin or VMAdmin Passwords Change Domain Admin or VMAdmin using Set-CcCredential –AccountType <DomainAdmin>, <VMAdmin>, <TenantAdmin> Will update cached credential after verifying old password provided Will update passwords on VM’s Training from July 2017

Upgrading to V2 Training from July 2017

Upgrading to Cloud Connector V2 Supported Upgrade Path In place upgrade from version 1.4.2 -> Version 2 Automatic based on BitsUpdate time window. https://aka.ms/cceautoupdate Manual update process https://aka.ms/ccemanualupdate In place upgrade from versions < 1.4.2 is NOT supported. To upgrade from CCE prior to 1.4.2: Unregister appliance with – Unregister-CcAppliance, or Unregister-CcInstance Uninstall appliance with – Uninstall-CcAppliance, or Uninstall-CcInstance Follow instructions for deploying new CCE Appliance – https://aka.ms/CloudConnector Confirm CCE Version CCE Host: Hyper-V Console CCE Host PS: Get-CcVersion –VersionType All Remote PS: Get-CsHybridPSTNAppliance Skype for Business Admin Center: on premises PSTN tab in the Voice section Training from July 2017

Update Cloud Configuration File Add new sip header settings to CloudConnector.msi Export sample configuration Export-CcConfigurationSampleFile Open existing CloudConnector.msi from root of the Appliance Directory Copy sip header settings from sample file to production file Save the CloudConnector.msi Import the configuration changes: Import-CcConfiguration Note: If modifying after installation of V2, you will need to manually update Mediation server trunk configuration one more time. Training from July 2017

Upgrade from 1.4.2 – Modify Sip Headers Prepare for Upgrade Add following text with desired settings to Trunk Configuration section in your CloudConnector.ini file: ;Indicates whether outbound calls that are not answered by the gateway within 10 seconds will be routed to the next available trunk. ;If there are no additional trunks then the call will automatically be dropped. ;The value can be "true" or "false". Default value is "true". EnableFastFailoverTimer=true ;Indicates whether call history information will be forwarded through the trunk. ;The value can be "true" or "false". Default value is "false". ForwardCallHistory=false ;Indicates whether the P-Asserted-Identity (PAI) header will be forwarded along with the call. ForwardPAI=false Training from July 2017

Upgrade from 1.4.2 – CABackup Password Domain Admin password assigned to CABackup password Used to encrypt Root CA password Must be the same for all appliances Confirm Domain Admin Password Run Get-CcCredential –AccountType DomainAdmin –DisplayPassword on each appliance in the site Resolve if different: Delete two credentials… files in C:\ProgramData\CloudConnector Run Register-CcAppliance –Local to generate new credential files with consistent passwords Training from July 2017

Upgrade from 1.4.2 – CCE Service Password VMAdmin password assigned to the CCEService Used to connect to shared Site Directory Must be the same for all appliances Confirm VM Admin Password Run Get-CcCredential –AccountType VMAdmin –DisplayPassword on each appliance in the site Resolve if different: Delete two credentials… files in C:\ProgramData\CloudConnector Run Register-CcAppliance –Local to generate new credential files with consistent passwords Training from July 2017

Summary Training from July 2017

Key learnings Support for Media Bypass in CCE V2 Skype for Business 11/12/2017 1:41 AM Key learnings Support for Media Bypass in CCE V2 Support for 16 CCE appliances in one site Additional improvements How to upgrade to V2 Deep dive training on Media Bypass For more details on Media Bypass, please see our training session Media Bypass in Cloud Connector Edition V2 http://aka.ms/sa-cce-mp Training from July 2017 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Resources Skype Operations Framework Trainings, trainings, trainings https://www.skypeoperationsframework.com/ Trainings, trainings, trainings https://www.skypeoperationsframework.com/academy Skype Feedback http://www.skypefeedback.com Skype Preview http://www.skypepreview.com Training from July 2017

Community & Blog Community Blog Training from July 2017 Discuss, ask and provide feedback https://aka.ms/sofcommunity Blog Stay up to date with latest training releases https://aka.ms/sfbblog https://aka.ms/sfbhv Training from July 2017