INTRODUCTION
ICE 3.6.6 Upgrade Notes
ICE Administrative Environments
Additional Resources
REQUIREMENTS
LICENSING ICE
OPERATION
Account Types and User Roles
Managing Assigned Channels
Assigned Channel Collectives
Creating an Assigned Channel
Configuring Assigned Channel Defaults
Editing Channel Assignments
Editing a Channel
Deleting a Channel
Channel Attributes
Bulk Importing Channels
Creating a Bulk Channel Import .CSV File
Importing Channels from a .CSV File
Codec Value Translation
Managing User Accounts (People)
Viewing People
Adding a Person
Updating a Person
Deleting a Person
Bulk Importing People
Creating a Bulk User Import .CSV File
Importing People from a .CSV File
Managing People/Channel Groups
Using People/Channel Groups
People/Channel Group Rules
Creating a People/Channels Group
Editing a People/Channels Group
Deleting a People/Channels Group
ICE Desktop for Web
Updating ICE Desktop for Web
Managing Audio Alerts
Managing Archived Recordings
About Archived Recordings
Viewing System Health
Logging
Reviewing Audit Logs
Using the Ops Logs
Requirements for Ops Log Functionality
Understanding the Ops Log Window
Operating the Ops Log Window
Upper Controls
Middle Controls
Lower Controls
Creating an Ops Log
Ending an Ops Log
Reviewing an Ops Log
Extracting Ops Logs
Server Logs (Grafana)
Interacting with Server Logs
Obtaining ICE Desktop Build Information
Viewing Call Data Records (CDR)
CONFIGURATION
Understanding Failover Groups
Election Time Sensitivity
Editing Failover Server Groups
Setting a Group as Default:
Failover-Generated Audio Looping
Managing Your Organization
Managing Certificates
Configuring Client High Availability
Configuring Login Authentication
Managing Patches
Patching Requirements
Managing Patch Servers
Viewing Patch Servers
Creating a Patch Server Group
Adding a Patch Server to a Group
Editing a Patch Server Failover Group
Operating Patches
Creating a Patch
Editing a Patch
Managing Static Reflectors
Viewing Static Reflectors
Creating a Static Reflector and Group
Managing Archiver Servers
Deploying an Archiver Server
Managing Rallypoints
Rallypoints Functions in ICE
Critical Rallypoint Changes in 3.6.0
Rallypoint Components
Rallypoint Rules
Viewing Rallypoints
Creating a Rallypoint Group (Mesh)
Creating a Rallypoint Server (Physical Rallypoint)
Creating a Virtual IP
Supporting Georedundancy
Federating Rallypoints
Federation Rules
Federating Rallypoint Groups
Federating Channels
Rallypoint Meshing
Supporting Peering and Federation
Linguistics and Translation Configuration
Licensing Linguistic Services
Accessing Linguistic Services
Linguistic Service Configuration
Translation Configuration
Translation Requirements
Viewing existing translations
Creating a Translation
Deactivating or Deleting a Translation
Tactical Translation Configuration
Using Workflow Automation
Triggers
Actions
Creating a Workflow
Editing a Workflow
Geofencing
Webhooks
Additional Modifications
ICE Server API Key
APPENDICES
Appendix A: Troubleshooting
Crash Reporting
Manual Server Backups
Restarting Patch Servers
Georedundancy Outage Recovery
Appendix B: ElasticSearch
Additional Steps for Multi-node Setups
ElasticSearch Repair
Appendix C: Firewall Rules
Appendix D: ICE Agent Operation
Installing ICE Agent
ICE Agent Requirements
Installing ICE Agent as a Native Command-Line Application
Installing ICE Agent as a Docker Container
1. Interacting with prompts
2. Saving Data
3. Exposing Ports
4. Using Host-Local Networking for Reflectors
5. Specifying a Hostname
6. Automatically Restarting Failed Servers
7. Composing the Run Command
8. Shell Access to The Container
Installing ICE Agent as a Linux Systemd Service
Verifying ICE Agent Installation
Troubleshooting Issues Reported by Doctor
Commanding ICE Agent
Understanding the structure of ICE Agent commands
ICE Agent Help Switch
Using Environment Variables
Using an Environment File
Using a Command File
‘For Engineering Use’ Warning
Determining your Installation ID
External Server Coasting
Deploying RP/SR/PS using Docker
Running Docker-Contained Server Components in the Background
Deploying an External Patch Server using ICE Agent
Appendix E: Client Configuration File
File Specifications
Configuration File Settings
applicationAutoLaunch
audioSettingsAudioDevice
audioSettingsToneEnabled
audioSettingsToneLevels
audioSettingsVibration
audioSettingsWiredHeadsetType
channelMode
connectivitySettingsCheckInterval
connectivitySettingsNetworkInterface
connectivitySettingsTrellisware
desktopLocation
logBufferSizeInDays
loginUsername
monitoringSettingsCrashes
monitoringSettingsLocation
operatingModes
serverKey
telephonyAsAChannel
timelines
verboseLogging
Appendix F: Helm Chart Objects
Appendix G: Vector Logging Integration
Vector and Splunk
Vector and Amazon CloudWatch
A. Create a Log Group on Amazon AWS.
B. Obtain the Access Key and AWS Region
C. Configure a Vector Agent for CloudWatch on ICE OS
D. Verify Log Reception
Vector and Azure Monitor Logs
Configuring Azure Log Monitoring
Configuring the Vector Agent
Verifying Log Reception
Appendix H: Database Operations
About Database Operations
Backing Up the Database
Backup Requirements
SCP/SFTP Backup
Azure Backup
AWS S3 Backup
Restoring a Backup
Viewing Backup Job Status
Viewing Status Using the ICE OS Wizard
Appendix I: Single Sign-On Configuration
Entra ID SSO Configuration
Theory of Operation
Entra ID - Azure Configuration Instructions
Entra ID – ICE Server Configuration Instructions
Entra ID Troubleshooting
LDAP Configuration
Configure CA certificates for LDAP
Configure ICE Server for LDAP
Group Membership Synchronization
Creating an LDAP Service Account
LDAP Bulk Import
LDAP PIV Smart Card Support
Understanding LDAP Search Filters
Appendix J: ICE Security
ICE Private Certificate Stores
Manually Creating a Certstore
Validating a Certstore
Troubleshooting Rallypoint Certificates and Communication
Deploying Self-Signed Certificates
Self-sign certificates for ICE Mobile login
Converting a .crt File to a .pem File
Loading the Root CA Certificate to ICE Mobile
Deploying TLS Certs
Telephony Certs
Georedundancy Certs
Vector configuration for ICE Server
Appendix K: ICE 3.6.6 Requirements Reference
Appendix L: Licensing ICE
Desktop Activation
Desktop: Activating a License while Online
Desktop: Deactivating a License while Online
Desktop: Activating a License while Offline
Desktop: Deactivating a License while Online
Mobile Activation
Mobile: Activating a License while Online
Mobile: Deactivating a License while Online
Mobile: Activating a License while Offline
Mobile: Deactivating a License while Offline
Mobile: Activating a License in Tactical Mode
Enterprise Mode Licensing
Child Licensing
Viewing Child Licenses
Creating a Child License
Creating an ICE Lite Child License
Tactical License Blocks
Assigning License Blocks
Appendix M: Documentation Change Reference
ICE SERVER
INTRODUCTION
ICE 3.6.6 Upgrade Notes
ICE Administrative Environments
Additional Resources
REQUIREMENTS
LICENSING ICE
OPERATION
Account Types and User Roles
Managing Assigned Channels
Creating an Assigned Channel
Configuring Assigned Channel Defaults
Editing Channel Assignments
Editing a Channel
Deleting a Channel
Channel Attributes
Bulk Importing Channels
Creating a Bulk Channel Import .CSV File
Importing Channels from a .CSV File
Codec Value Translation
Managing User Accounts (People)
Viewing People
Adding a Person
Updating a Person
Deleting a Person
Bulk Importing People
Creating a Bulk User Import .CSV File
Importing People from a .CSV File
Managing People/Channel Groups
Using People/Channel Groups
People/Channel Group Rules
Creating a People/Channels Group
Editing a People/Channels Group
Deleting a People/Channels Group
ICE Desktop for Web
Updating ICE Desktop for Web
Managing Audio Alerts
Managing Archived Recordings
About Archived Recordings
Viewing System Health
Logging
Reviewing Audit Logs
Using the Ops Logs
Requirements for Ops Log Functionality
Understanding the Ops Log Window
Operating the Ops Log Window
Upper Controls
Middle Controls
Lower Controls
Creating an Ops Log
Ending an Ops Log
Reviewing an Ops Log
Extracting Ops Logs
Server Logs (Grafana)
Interacting with Server Logs
Obtaining ICE Desktop Build Information
Viewing Call Data Records (CDR)
CONFIGURATION
Understanding Failover Groups
Election Time Sensitivity
Editing Failover Server Groups
Setting a Group as Default:
Failover-Generated Audio Looping
Managing Your Organization
Managing Certificates
Configuring Client High Availability
Configuring Login Authentication
Managing Patches
Patching Requirements
Managing Patch Servers
Viewing Patch Servers
Creating a Patch Server Group
Adding a Patch Server to a Group
Editing a Patch Server Failover Group
Operating Patches
Creating a Patch
Editing a Patch
Managing Static Reflectors
Viewing Static Reflectors
Creating a Static Reflector and Group
Managing Archiver Servers
Deploying an Archiver Server
Managing Rallypoints
Critical Rallypoint Changes in 3.6.0
Rallypoint Components
Rallypoint Rules
Viewing Rallypoints
Creating a Rallypoint Group (Mesh)
Creating a Rallypoint Server (Physical Rallypoint)
Creating a Virtual IP
Supporting Georedundancy
Federating Rallypoints
Federation Rules
Federating Rallypoint Groups
Federating Channels
Rallypoint Meshing
Supporting Peering and Federation
Linguistics and Translation Configuration
Licensing Linguistic Services
Accessing Linguistic Services
Linguistic Service Configuration
Translation Configuration
Translation Requirements
Viewing existing translations
Creating a Translation
Deactivating or Deleting a Translation
Tactical Translation Configuration
Using Workflow Automation
Triggers
Actions
Creating a Workflow
Editing a Workflow
Geofencing
Webhooks
Additional Modifications
ICE Server API Key
APPENDICES
Appendix A: Troubleshooting
Crash Reporting
Manual Server Backups
Georedundancy Outage Recovery
Appendix B: ElasticSearch
Additional Steps for Multi-node Setups
ElasticSearch Repair
Appendix C: Firewall Rules
Appendix D: ICE Agent Operation
Installing ICE Agent
ICE Agent Requirements
Installing ICE Agent as a Native Command-Line Application
Installing ICE Agent as a Docker Container
1. Interacting with prompts
2. Saving Data
3. Exposing Ports
4. Using Host-Local Networking for Reflectors
5. Specifying a Hostname
6. Automatically Restarting Failed Servers
7. Composing the Run Command
8. Shell Access to The Container
Installing ICE Agent as a Linux Systemd Service
Verifying ICE Agent Installation
Troubleshooting Issues Reported by Doctor
Commanding ICE Agent
Understanding the structure of ICE Agent commands
ICE Agent Help Switch
Using Environment Variables
Using an Environment File
Using a Command File
‘For Engineering Use’ Warning
Determining your Installation ID
External Server Coasting
Deploying RP/SR/PS using Docker
Running Docker-Contained Server Components in the Background
Deploying an External Patch Server using ICE Agent
Appendix E: Client Configuration File
File Specifications
Configuration File Settings
Appendix F: Helm Chart Objects
Appendix G: Vector Logging Integration
Vector and Splunk
Vector and Amazon CloudWatch
A. Create a Log Group on Amazon AWS.
B. Obtain the Access Key and AWS Region
C. Configure a Vector Agent for CloudWatch on ICE OS
D. Verify Log Reception
Vector and Azure Monitor Logs
Configuring Azure Log Monitoring
Configuring the Vector Agent
Verifying Log Reception
Appendix H: Database Operations
About Database Operations
Backing Up the Database
Backup Requirements
SCP/SFTP Backup
Azure Backup
AWS S3 Backup
Restoring a Backup
Viewing Backup Job Status
Viewing Status Using the ICE OS Wizard
Appendix I: Single Sign-On Configuration
Entra ID SSO Configuration
Theory of Operation
Entra ID - Azure Configuration Instructions
Entra ID – ICE Server Configuration Instructions
Entra ID Troubleshooting
LDAP Configuration
Configure CA certificates for LDAP
Configure ICE Server for LDAP
Group Membership Synchronization
Creating an LDAP Service Account
LDAP Bulk Import
LDAP PIV Smart Card Support
Understanding LDAP Search Filters
Appendix J: ICE Security
ICE Private Certificate Stores
Manually Creating a Certstore
Validating a Certstore
Troubleshooting Rallypoint Certificates and Communication
Deploying Self-Signed Certificates
Self-sign certificates for ICE Mobile login
Converting a .crt File to a .pem File
Loading the Root CA Certificate to ICE Mobile
Deploying TLS Certs
Telephony Certs
Georedundancy Certs
Vector configuration for ICE Server
Appendix K: ICE 3.6.6 Requirements Reference
Appendix L: Licensing ICE
Desktop: Activating a License while Online
Desktop: Deactivating a License while Online
Desktop: Activating a License while Offline
Desktop: Deactivating a License while Online
Mobile Activation
Mobile: Activating a License while Online
Mobile: Deactivating a License while Online
Mobile: Activating a License while Offline
Mobile: Deactivating a License while Offline
Mobile: Activating a License in Tactical Mode
Enterprise Mode Licensing
Child Licensing
Viewing Child Licenses
Creating a Child License
Creating an ICE Lite Child License
Tactical License Blocks
Assigning License Blocks
Appendix M: Documentation Change Reference