1. Training disclaimer This is a point of time view
This session was recorded in July 2017
The features and functionality describe are current as of this date
O365 is ongoing innovation
We innovate on a constant basis
New features and functionality are added frequently
Always refer to latest trainings
Go to for the latest version of this training
Go to for more trainings
Training from July 2017

2. Skype Academy presents: What’s New in Cloud Connector Edition V2 (CCE)
Skype for Business
11/12/2017 1:41 AM
Skype Academy presents: What’s New in Cloud Connector Edition V2 (CCE)
Carolyn Blanding
Training from July 2017
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Key learnings Support for Media Bypass in CCE V2
Skype for Business
11/12/2017 1:41 AM
Key learnings
Support for Media Bypass in CCE V2
Support for 16 CCE appliances in one site
Additional improvements
How to upgrade to V2
Deep dive training on Media Bypass
For more details on Media Bypass, please see our training session Media Bypass in Cloud Connector Edition V2
Training from July 2017
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Scope Cloud Connector Version 2 Prior Experience
Understand to deploy and manage Cloud Connector
For more training on Cloud Connector, please see
Training from July 2017

5. What’s New in CCE V2 Training from July 2017 Skype for Business
11/12/2017 1:41 AM
What’s New in CCE V2
Training from July 2017
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Listing of what’s new in CCE V2
Media Bypass
Support for 16 Cloud Connector Editions per one PSTN Site
Ability to manipulate SIP headers for billing or interoperability
Hybrid Voice flag in Mediation Server Agent for Call Quality Dashboard
Disable SSL 3.0 by default
Automatic installation of .NET framework which is dependency of current SfB
New Cmdlets
Training from July 2017

7. Media Bypass in CCE V2 Why did we include support for Media Bypass?
Top ask
Improve voice quality and reliability
Reduce number of CCE appliances
Training from July 2017

8. Media Bypass Requirements
What are the pre-requisites for media bypass?
Cloud Connector V2 is deployed
Tenant Administrator enabled media bypass in Office 365
Media bypass settings replicated to Cloud Connector Mediation servers
DNS configured for client resolution of media bypass service URL
CCE Media Bypass supported clients are deployed.
32 or 64 bit of Skype for Business as part of Microsoft Office 365 ProPlus (Click-2-Run) or later.
Microsoft Office 365 MSI is not supported.
Note: All Office 365 update channels have supported builds
Training from July 2017

9. 16 Cloud Connector Appliances Per Site
Why did we add support for 16 appliances in one PSTN Site?
Support large number of users in one PSTN Site.
Reduce or remove need to assign users to different PSTN sites.
Previously up to 1,500 simultaneous calls were supported in N+1 deployment.
Support up to 7,500 simultaneous calls without Media bypass in N+1 deployment.
Training from July 2017

10. Modify Sip Headers in CCE V2
Persistent Customized Trunk Settings
To allow customized trunk configurations to persist through CCE updates, we added these trunk settings in the CloudConnector.msi:
Enable Fast Failover Timer: Default is True. Set to False when network or gateway responses are > 10 seconds.
Forward Call History: Default is False. Set to True to turn on following SIP headers:
History-Info (Sim Ring/Call Forwarding)
Referred by (Call Transfer)
Forward PAI: Default is False. Set to True to forward PAI headers with SIP & Tel URI’s from CCE to SIP Trunk. (Used when Call History not available)
For more details about Call History and Forward PAI, please see:
Training from July 2017

11. Hybrid Voice Flag in Mediation Server Agent
Unique Hybrid Voice Flag
To enable the online call reporting to distinguish CCE calls from calls placed by other trunks.
The user agent was previously reported as Mediation Server which was indistinguishable from other Skype for Business trunks.
Now the user agent for Cloud Connector is unique. Example of current version agent:
<LocalUserAgent>RTCC/ CCE-MediationServer/ </LocalUserAgent>
Training from July 2017

12. Demo of CCE User Agent in Online Reports
Training from July 2017

13. Disable SSL 3.0 by default
Cloud Connector does not use SSL, therefore we are disabling the SSL 3.0 protocol to remove a potential attack vulnerability.
Training from July 2017

14. .Net Framework 4.5.2 Automatic installation of this dependency
The Skype for Business version in CCE V2 has a dependency on .Net Framework
Start-CcDownload, which is run automatically as part of auto-update, will download this update for use when deploying CCE Skype for Business VM’s.
If the installation fails, the CCE Management service will retry the installation.
Note: The CCE Host must always have Internet connectivity to install and manage CCE.
Prepare VHD with .Net 4.5.2
To reduce deployment times in large deployments, customers can use the PauseBeforeUpdate switch when creating a new base VHD with Convert-CcIsoToVhdx and manually update the Base VM as follows:
Install Windows Updates
Download and install .Net from:
Training from July 2017

15. New Cmdlets – Online Manage Media Bypass
The following cmdlets were added to Skype for Business Online to manage Media Bypass settings:
New-CsNetworkMediaBypassConfiguration
Get-CsNetworkConfiguration
Set-CsNetworkConfiguration
Training from July 2017

16. New Cmdlet – CCE Host Update Configuration
The following CCE on-premises cmdlet was added to import administrative changes to the Cloud Connector configuration file to CCE:
Import-CcConfiguration Note: This cmdlet will automatically run as part of Install-CcAppliance, and Register-CcAppliance to insure changes to the configuration file are imported automatically.
Example:
You decide to use a Windows Update Server (WSUS) to provide updates to CCE and modify the CloudConnector.ini file with the WSUS information. CCE won’t use the WSUS server for updates until you run this cmdlet.
Training from July 2017

17. What’s Changed in CCE V2 Training from July 2017 Skype for Business
11/12/2017 1:41 AM
What’s Changed in CCE V2
Training from July 2017
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Listing of what’s changed in CCE V2
Skype for Business administrator role instead of global administrator
Reduce number of passwords needed when deploying CCE
Use corporate network switch instead of management switch for most tasks
Improvements to auto detection
Changed cmdlets
Training from July 2017

19. Skype for Business Administrator Role
O365 Tenant Admin Account
CCE requires an O365 Tenant admin account to manage CCE services online:
Prior to V2, we required this account to be a Global Administrator.
In V2, it’s supported to use a tenant admin account with Skype for Business Administrator Role.
If using expiring passwords for this account, be sure to use Set-CcCredential –AccountType TenantAdmin whenever the tenant admin credentials are changed.
Training from July 2017

20. Reduce number of passwords required for CCE
CCE Passwords
To reduce complexity and number of passwords managed in new V2 deployments, the following passwords will be requested when registering an appliance:
CCEService – Used for CCEService account and Domain Admin, VM Admin
CABackupFile – Used to import Root CA when deploying appliances
ExternalCert – Used to import Edge certificate when deploying appliances
Tenant Admin – Used to deploy and manage CCE online
Note – that the CCEService and CABackupFile passwords must be the same for all appliances deployed within one site.
Training from July 2017

21. Corporate Management Switch
Host to CCE VM Connections
To reduce the number of connect/disconnects to the CCE Management Switch when connecting to VM’s , CCE V2 has been updated as follows:
The CCE Management switch used only during deployment.
The corporate network switch, “SfB CCE Corpnet Switch”, used for all other connections.
Note:
The network adapter on the host bound SfB CCE Corpnet switch must have an IP address assigned in the same subnet as the CCE corporate network.
This can be an alternate IP address.
Training from July 2017

22. Improvements to Auto Detection
CCE Auto Recovery
To avoid call failures, auto recovery detection will detect the following conditions and mark the appliance down until resolved:
VM’s are not connected to the CCE Corporate or Internet virtual switches
VM’s are in a saved or stopped status
Services are stopped on (Bolded are previously monitored services)
CMS: REPLICA, MASTER
MS: REPLICA, RTCSRV, RTCMEDSRV
Edge: REPLICA, RTCSRV, RTCDATAPROXY, RTCMRAUTH, RTCMEDIARELAY
Inbound firewall rules disabled for:
CS RTCSRV on Edge
CS RTCMEDSRV on MS
Note: HA detection occurs over the corpnet virtual switch instead of the management switch thus avoiding constant connect/disconnect of the management switch.
Training from July 2017

23. Cmdlet Updates – Online
Administrative Experience Changes
Set-CsHybridConfiguration: UseOnPremDialPlan can only be set from true to false.
Get-CsHybridPSTNAppliance has following new properties:
ConfigurationReplicatedOn
ConfigurationSnapshot
ConfigurationSnapshotUpdateOn
Training from July 2017

24. Cmdlet Updates – CCE Host
Supported PowerShell Verbs
From: Renew-CcCACertificate To: Update-CcCACertificate
From: Renew-CcServerCertificate To: Update-CcServerCertificate
Set Domain Admin or VMAdmin Passwords
Change Domain Admin or VMAdmin using Set-CcCredential –AccountType <DomainAdmin>, <VMAdmin>, <TenantAdmin>
Will update cached credential after verifying old password provided
Will update passwords on VM’s
Training from July 2017

25. Upgrading to V2
Training from July 2017

26. Upgrading to Cloud Connector V2
Supported Upgrade Path
In place upgrade from version > Version 2
Automatic based on BitsUpdate time window.
Manual update process
In place upgrade from versions < is NOT supported. To upgrade from CCE prior to 1.4.2:
Unregister appliance with – Unregister-CcAppliance, or Unregister-CcInstance
Uninstall appliance with – Uninstall-CcAppliance, or Uninstall-CcInstance
Follow instructions for deploying new CCE Appliance –
Confirm CCE Version
CCE Host: Hyper-V Console
CCE Host PS: Get-CcVersion –VersionType All
Remote PS: Get-CsHybridPSTNAppliance
Skype for Business Admin Center: on premises PSTN tab in the Voice section
Training from July 2017

27. Update Cloud Configuration File
Add new sip header settings to CloudConnector.msi
Export sample configuration Export-CcConfigurationSampleFile
Open existing CloudConnector.msi from root of the Appliance Directory
Copy sip header settings from sample file to production file
Save the CloudConnector.msi
Import the configuration changes: Import-CcConfiguration
Note: If modifying after installation of V2, you will need to manually update Mediation server trunk configuration one more time.
Training from July 2017

28. Upgrade from 1.4.2 – Modify Sip Headers
Prepare for Upgrade
Add following text with desired settings to Trunk Configuration section in your CloudConnector.ini file:
;Indicates whether outbound calls that are not answered by the gateway within 10 seconds will be routed to the next available trunk.
;If there are no additional trunks then the call will automatically be dropped.
;The value can be "true" or "false". Default value is "true".
EnableFastFailoverTimer=true
;Indicates whether call history information will be forwarded through the trunk.
;The value can be "true" or "false". Default value is "false".
ForwardCallHistory=false
;Indicates whether the P-Asserted-Identity (PAI) header will be forwarded along with the call.
ForwardPAI=false
Training from July 2017

29. Upgrade from 1.4.2 – CABackup Password
Domain Admin password assigned to CABackup password
Used to encrypt Root CA password
Must be the same for all appliances
Confirm Domain Admin Password
Run Get-CcCredential –AccountType DomainAdmin –DisplayPassword on each appliance in the site
Resolve if different:
Delete two credentials… files in C:\ProgramData\CloudConnector
Run Register-CcAppliance –Local to generate new credential files with consistent passwords
Training from July 2017

30. Upgrade from 1.4.2 – CCE Service Password
VMAdmin password assigned to the CCEService
Used to connect to shared Site Directory
Must be the same for all appliances
Confirm VM Admin Password
Run Get-CcCredential –AccountType VMAdmin –DisplayPassword on each appliance in the site
Resolve if different:
Delete two credentials… files in C:\ProgramData\CloudConnector
Run Register-CcAppliance –Local to generate new credential files with consistent passwords
Training from July 2017

31. Summary
Training from July 2017

32. Key learnings Support for Media Bypass in CCE V2
Skype for Business
11/12/2017 1:41 AM
Key learnings
Support for Media Bypass in CCE V2
Support for 16 CCE appliances in one site
Additional improvements
How to upgrade to V2
Deep dive training on Media Bypass
For more details on Media Bypass, please see our training session Media Bypass in Cloud Connector Edition V2
Training from July 2017
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Resources Skype Operations Framework Trainings, trainings, trainings
Trainings, trainings, trainings
Skype Feedback
Skype Preview
Training from July 2017

34. Community & Blog Community Blog Training from July 2017
Discuss, ask and provide feedback
Blog
Stay up to date with latest training releases
Training from July 2017