Download Installation Files
Instant Connect Ltd. provides files for download on the Instant Connect Support Portal. Downloads are listed by version. Version components are not always compatible; therefore, you should never mix the versions of your components. If possible, always endeavor to maintain identical versions between all ICE components.
Important: If you plan to install ICE OS offline, ensure you have completed this section to obtain the installation files before you go offline.
To download the ICE OS installation files
1. Navigate to: https://support.instantconnectnow.com/s/downloads
2. Click the Instant Connect Enterprise Software folder.
3. Open the ICE 3.6.6 Software folder.
4. Download the ICE Server Installer.
The downloaded iceos-release-3.6.6-git-f2fe445-6426.zip folder contains the ICE operating system and Kubernetes cluster.
The downloaded iceos-release-3.6.6-git-f2fe445-6426.zip folder contains the ICE operating system and Kubernetes cluster.
5. For Air Gap:
Download the iceos-airgap-release-3-6-6-45000.45001.zip file. Extract the .iso file from the airgap ZIP folder and upload it to the appropriate datastore.
Download the iceos-airgap-release-3-6-6-45000.45001.zip file. Extract the .iso file from the airgap ZIP folder and upload it to the appropriate datastore.
GEOREDUNDANCY
To account for the configuration of two synchronized data centers, DC1 and DC2, additional steps will be required if you are using Air Gap. These instructions will be noted as Air Gap instructions.
To account for the configuration of two synchronized data centers, DC1 and DC2, additional steps will be required if you are using Air Gap. These instructions will be noted as Air Gap instructions.
6. For secure shell protocol (SSH):
Acquire a public/private key pair. You will require the public key during the installation process.
Acquire a public/private key pair. You will require the public key during the installation process.
X.509 Certificate ExpirationAll X.509 certificates used for Instant Connect must expire in 397 days (13 months) or less. This includes server certificates, intermediate CA, root CA, etc. Certificates whose expiration dates exceed this validity period will not be accepted by Instant Connect clients, resulting in ‘Cannot connect to server’ error messages.
Blocking Port 80Per industry standard best practice, it is recommended to block port 80 when using certificates. This is done via the following command:
/sbin/iptables -A INPUT -p tcp --destination-port 80 -d X.X.X.X -j DROP
Note: If using the ICE Cisco IP Phone XML client though a firewall, a rule will need to be implemented allowing access to port 80.