ICE SERVER
NOTICE
Introduction
ICE 3.6.5 Upgrade Notes
ICE 3.6.0 Upgrade Notes
ICE Administrative Environments
Additional Resources
Requirements
Licensing ICE
Operation
Account Types and User Roles
Managing Assigned Channels
Assigned Channel Collectives
Creating an Assigned Channel
Editing Channel Assignments
Editing a Channel
Deleting a Channel
Channel Attributes
Bulk Importing Channels
Creating a Bulk Channel Import .CSV File
Importing Channels from a .CSV File
Managing People
Viewing People
Adding a Person Locally
Updating a Person
Deleting a Person
Bulk Importing People
Creating a Bulk User Import .CSV File
Importing People from a .CSV File
Managing People/Channel Groups
Using People/Channel Groups
People/Channel Group Rules
Creating a People/Channels Group
Editing a People/Channels Group
Deleting a People/Channels Group
ICE Desktop for Web
Updating ICE Desktop for Web
Managing Audio Alerts
Managing Archived Recordings
About Archived Recordings
Viewing System Health
Logging
Reviewing Audit Logs
Using the Ops Logs
Requirements for Ops Log Functionality
Understanding the Ops Log Window
Operating the Ops Log Window
Upper Controls
Middle Controls
Lower Controls
Creating an Ops Log
Ending an Ops Log
Reviewing an Ops Log
Extracting Ops Logs
Server Logs (Grafana)
Interacting with Server Logs
Obtaining ICE Desktop Build Information
Call Data Records (CDR)
Configuration
Understanding Failover Groups
Election Time Sensitivity
Editing Failover Server Groups
Setting a Group as Default:
Failover-Generated Audio Looping
Managing Your Organization
Managing Certificates
Configuring Client High Availability
Configuring Login Authentication
Managing Patches
Patching Requirements
Managing Patch Servers
Viewing Patch Servers
Creating Patch Server Groups
Adding a Patch Server
Editing a Patch Server Failover Group
Operating Patches
Creating a Patch
Editing a Patch
Managing Archiver Servers
Deploying an Archiver Server
Radio Interoperation
Codec Value Translation
Kenwood NEXEDGE
NEXEDGE Radio System
NEXEDGE Gateway
NEXEDGE – ICE Channel Association
P25 Interoperability
P25 Radio Systems
Creating a P25 Radio System
Associating Channels and P25 Radio Systems
ISSI Gateways
DFSI Gateways
P25 DFSI Fixed Stations
P25 Key Management
Viewing Encryption Keys
Creating a P25 encryption key
Managing Static Reflectors
Viewing Static Reflectors
Creating a Static Reflector and Group
Managing ICE Gateway
Understanding ICE Gateway
Supporting Air-Gapped Gateway Deployments
Adding a SIP PBX
Requirements
Running an ICE Gateway in a Docker Container
Logging in to Docker
Network Interface
API Key
USB License Dongle (Only for DFSI/ISSI)
Organizing Directories
Required ICE Gateway Data
Connecting to the Instant Connect Docker Repository
Running an ICE Telephony Gateway using Non-TLS/SRTP
ICE SIP Registrar / CUCM Configuration
ICE Telephony Calls in SIP Trunk mode
Call Manager Configuration
ICE Server Configuration
Enabling TLS/SRTP
Generating a Self-Signed Certificate File (.pem)
Uploading the Certificate File to CUCM
Creating a SIP Trunk Security Profile
Creating a SIP Trunk
Creating a Route Pattern for the SIP Trunk
Checking the SIP Trunk Status
Enabling CUCM Mixed-Mode Security
Running an ICE Telephony Gateway using TLS/SRTP
ICE Desktop
Establishing secure communication between a Cisco IP Phone and CUCM
Creating a Phone Security Profile
Creating a Phone Device using the Phone Security Profile
Running an ICE DFSI or ISSI Gateway
Commanding and Monitoring an ICE Telephony Gateway
Monitoring an ICE Gateway
Stopping an ICE Gateway
Removing an ICE Gateway
Managing Rallypoints
Critical Rallypoint Changes in 3.6.0
Rallypoint Components
Rallypoint Rules
Viewing Rallypoints
Creating a Rallypoint Group (Mesh)
Creating a Rallypoint Server (Physical Rallypoint)
Creating a Virtual IP
Supporting Georedundancy
Federating Rallypoints
Federation Rules
Federating Rallypoint Groups
Federating Channels
Rallypoint Meshing
Supporting Peering and Federation
Linguistics and Translation Configuration
Licensing Linguistic Services
Linguistic Service Configuration
Translation Configuration
Translation Requirements
Viewing existing translations
Creating a Translation
Deactivating or Deleting a Translation
Tactical Translation Configuration
Using Workflow Automation
Triggers
Actions
Creating a Workflow
Editing a Workflow
Geofencing
Webhooks
Additional Modifications
ICE Server API Key
Appendix A: Troubleshooting
Crash Reporting
Manual Server Backups
Georedundancy Outage Recovery
Appendix B: ElasticSearch
Additional Steps for Multi-node Setups
ElasticSearch Repair
Appendix C: Firewall Rules
Appendix D: ICE Agent Operation
Installing ICE Agent
ICE Agent Requirements
Installing ICE Agent as a Native Command-Line Application
Installing ICE Agent as a Docker Container
1. Interacting with prompts
2. Saving Data
3. Exposing Ports
4. Using Host-Local Networking for Reflectors
5. Specifying a Hostname
6. Automatically Restarting Failed Servers
7. Composing the Run Command
8. Shell Access to The Container
Installing ICE Agent as a Linux Systemd Service
Verifying ICE Agent Installation
Troubleshooting Issues Reported by Doctor
Commanding ICE Agent
Understanding the structure of ICE Agent commands
Using Environment Variables
Using an Environment File
Using a Command File
External Server Coasting
Deploying RP/SR/PS using Docker
Running Docker-Contained Server Components in the Background
Launching an External Patch Server via ICE Agent
Appendix E: Client Configuration File
File Specifications
Configuration File Settings
applicationAutoLaunch
audioSettingsAudioDevice
audioSettingsToneEnabled
audioSettingsToneLevels
audioSettingsVibration
audioSettingsWiredHeadsetType
channelMode
connectivitySettingsCheckInterval
connectivitySettingsNetworkInterface
connectivitySettingsTrellisware
desktopLocation
logBufferSizeInDays
loginUsername
monitoringSettingsCrashes
monitoringSettingsLocation
operatingModes
serverKey
telephonyAsAChannel
timelines
verboseLogging
Appendix F: Helm Chart Objects
Appendix G: Vector Logging Integration
Vector and Amazon CloudWatch
A. Create a Log Group on Amazon AWS.
B. Obtain the Access Key and AWS Region
C. Configure a Vector Agent for CloudWatch on ICE OS
D. Verify Log Reception
Vector and Azure Monitor Logs
Configuring Azure Log Monitoring
Configuring the Vector Agent
Verifying Log Reception
Appendix H: Database Operations
About Database Operations
Entra ID Troubleshooting 
Backing Up the Database
SCP/SFTP Backup
Azure Backup
AWS S3 Backup
Restoring a Backup
Viewing Backup Job Status
Appendix I: Single Sign-On Configuration
Entra ID SSO Configuration
Theory of Operation
Entra ID - Azure Configuration Instructions
Entra ID – ICE Server Configuration Instructions
LDAP Configuration
Configure CA certificates for LDAP
Configure ICE Server for LDAP
Group Membership Synchronization
Creating an LDAP Service Account
LDAP Bulk Import
LDAP PIV Smart Card Support
Understanding LDAP Search Filters
Appendix J: ICE Private Certificate Stores
Creating a Certstore
Validating a Certstore
Troubleshooting Rallypoint Certificates and Communication
Appendix K: Licensing
Desktop Activation
Desktop: Activating a License while Online
Desktop: Deactivating a License while Online
Desktop: Activating a License while Offline
Desktop: Deactivating a License while Online
Mobile Activation
Mobile: Activating a License while Online
Mobile: Deactivating a License while Online
Mobile: Activating a License while Offline
Mobile: Deactivating a License while Offline
Mobile: Activating a License in Tactical Mode
Enterprise Mode Licensing
Subordinate Licensing
Viewing Subordinate Licenses
Creating a Subordinate License
ICE Lite Subordinate Licenses
Creating an ICE Lite Subordinate License
Tactical License Blocks
Assigning License Blocks
Appendix L: Requirements Reference