How to Configure Lync Server 2010 Mobility Service

Overview
- Components of Mobility Services
Prerequisites
Installing the Mobility Service
Certificates
Published in Reverse Proxy
- Certified
- Altering of Published Rule
Configuring Push Notifications
Connection Test
Clients Configuration
- Installing Root Certificate
- Logon Lync Client

Overview

Lync Server 2010 Service Mobility is the new service for Lync Server. This service must be installed to support mobile clients:

Apple iOS
Android
Windows Phone
Nokia Symbian

With this service customers will be able to send and receive IM, see the contact list and presence. Follow the link to Comparison Table Customer Service Mobility.

For configuration of the service have a machine called Hm01.home.intranet as a Domain Controller and Certificate, called a virtual machine that is Hm02.home.intranet the Front End, I have only one SIP domain home.com.br. All servers are running Windows Server 2008 R2 Service Pack 1

The connection structure of customers mobiles and the ports used for communication with the service is installed at the front end is as follows

Components of Mobility Services

Mobility Service: supports client connections, this service must be installed on all Front Ends.
Autodiscover Service: Service that allows customers to identify the location and address Mobility serice. This service supports connections using HTTP or HTTPS, this environment set up the connection using this HHTPS and Reverse Proxy in the certificate should be amended and new rules published in the firewall should be created. This service must be installed on all Front Ends and directors of the pool
Push Notification Service: this service is based on the cloud and uses the services of Office 365. When Lync Client Apple iOS or Windows Phone is dead they do not respond to new events and new IM or missed calls. In such cases a notification called Push Notification is sent to the customer by the service Lync Online.

Prerequisites

Cumulative Update 4

All Front End pool servers must be upgraded to the Cumulative Update November Lync Server.

The update can be downloaded from the Microsoft website http://www.microsoft.com/download/en/details.aspx?id=11551 .

In this article demostro steps to upgrade the server pool Pool Update Lync Server with Cumulative Update 4. There is no need to upgrade customers to activate this service but is recommended to keep the structure updated.

DNS

To support customers in Autodiscovery is necessary to create a record in DNS. The record can be of type Address (A) or Alias (CNAME), and should be created for each SIP domain supported by both the pool and in the Internet DNS Internal DNS

For this article I will create the CNAME record in DNS in the inner and external DNS.

For the configuration of the internal DNS, I created a CNAME record LyncDiscoverInternal. <domain SIP> pointing to the internal FQDN of the Front End

Alias Name: LyncDiscoverInternal

The FQDN for Target Host: Hm02.home.intranet

For the configuration of external DNS, I created a CNAME record LyncDiscover. <domain SIP> pointing to external URL configured in the Front End

Alias Name: LyncDiscover

The FQDN for Target Host: LyncPortal.home.com.br

To check which URL set to External Site start the Topology Builder and access the properties of the Front End Pool , and check the configuration of External Web Service.

Configuring Ports for Mobility Service

The Mobility Service requires the creation of two additional ports on the Front End Web Service For the configuration of the doors start Lync Server Management Shell.

Creation of the door to the Internal Web Site

Set-Identity-CsWebServer Name> Pool> McxSipPrimaryListeningPort-5086

Creation of the door to the external Web Site

Set-Identity-CsWebServer Name> Pool> McxSipExternalListeningPort-5087

To publish your changes of topology use the cmdlet: Enable-CsTopology-verbose

IIS

The Mobility Service component uses Dynamic Content Compression IIS is not a prerequisite for the installation of the Front End
Logue in Front End server and add the IIS component

Installing the Mobility Service

Download the Mobility Service
McxStandalone.msi Copy the file to the Front End in the folder C: \ ProgramData \ Microsoft \ Lync Server \ Deployment \ cache \ 4.0.7577.0 \ setup

Start Lync Server Management Shell and go to the folder C: \ Program Files \ Microsoft Lync Server 2010 \ and run the Deployment bootstrapper.exe

Check the end of the wizard and make sure the Autodiscover and Web Component have been successfully installed.

The log file shows all the features were installed.

Two virtual folders were created in IIS

Certificates

To support the connection of devices is necessary to change the digital certificate installed and add the new names FQDN's created for the Mobility of the Autodiscover Service. Run the installation wizard Lync Server and replace the certificate used by a new certificate that contains the FQDN of Discover's Service. Run the installation wizard and run the Lync Server Request Step 3, Install or Assign Certificates

Select the installed certificate and click Request

Go to start requesting the new certificate and select the option to Send Request Immediately to an certification authority

Select the certification of the network and go in this case use an enterprise certificate installed on a network server

You do not need any account if you are running the wizard with an account that has permission to issue certificates

Do not change the template of the certificate

Set Friendly Name of the certificate and check the Mark the certificate's private key exportable

Fill in the geographic information of the certificate

In the Subject Name of the FQDN's Discover are automatically included

Select the SIP domain that will be supported by the certificate

If you support multiple SIP domains add the FQDN's in ccertificado

Verify the certificate information and advance

Check that the certificate was issued successfully

Select Assign this certificate to Lync Server certificate usages

Proceed to begin installation of the certificate

Check the FQDN's set and go

Finish the wizard

Open the properties of the certificate and make sure that all names are correct;

Published in Reverse Proxy

The publication process of the Mobility Service is similar to the publication of the Front End services with Reverse Proxy. To provide the service to external customers need to create a new digital certificate with the FQDN of the Discover Service, LyncDiscover.home.com.br and change the publishing rule Reverse Proxy.
Setting the Reverse Proxy is the rule in Article Published Lync Reverse Proxy Server Forefront TMG in 2010. Make the following changes in the publishing rule and the digital certificate.

Certified

Send and install a new digital certificate with SAN configured with the FQDN LyncDiscover.home.com.br. The certificate must be installed in the container from the local computer.

Altering of Published Rule

Open the console TMG 2010 and access the properties of the publishing rule web site of the Front End

In the properties tab of the rule go to the Listener and click Properties

In the properties of the Listener tab to access the Certificates , and then click Select Certificate

Select the new certificate with the FQDN's updated

With the new certificate installed finalize the assistant

Back in the publishing rule to access the tab Public Name and click Add

Add the FQDN of the Discovery Service in this case is LyncDiscover.home.com.br

Finish the wizard and apply changes to console GMT

Configuring Push Notifications

Push Notifications are alerts sent by the Edge Server Online routed by Lync Lync to the client installed on the iPhone and Windows Phone users to notify events for new IM, missed calls and voice mails. Push To configure, start Lync Management Shell and run the cmdlet:

New-CsHostingProvider -Identity "LyncOnline" -Enabled $True -ProxyFqdn "sipfed.online.lync.com" -VerificationLevel UseSourceVerification

To create the federation of the domain push.lync.com run

New-CsAllowedDomain -Identity "push.lync.com"

To enable notificação

Set-CsPushNotificationConfiguration -EnableApplePushNotificationService $True -EnableMicrosoftPushNotificationService $True

Enable the domain field

Set-CsAccessEdgeConfiguration -AllowFederatedUsers $True

Connection Test

To verify that the services of the Mobility Services were published successfully run the browser on a machine on the Internet and access the URL LyncDiscover.home.com.br. The browser should show a file doownload

Open the file in Notepad. It should contain the URLs and addresses posted external access to the pool

Clients Configuration

Installing Root Certificate

Before you start setting up the customer on the phone you need to import the root certificate on mobile. Start the browser

Visit the Web Enrrolement address this infrastructure https://hm01.home.intranet/certsrv

The certificate warning should be issued, click Continue

No. autentic portal

Click Download a CA certificate, certificate chain or CRI

Then click Install CA certificate

Set a name for the certificate and click OK

The message that the certificate is installed should be displayed

To verify that the certificate was properly installed to access any URL Lync Pool, used in this example the URL of dialin. Click on the image of Lync with cadiado.

https://hm02.home.intranet/dialin

Click the View certificate

It must be shown that the certificate is valid

Logon Lync Client

Execute Lync Client 2010

Enter the SIP address and password, if your SIP domain is equal to the internal FQDN of the domain you can click Sing-but in this case my FQDN of the domain is home.intranet and my SIP domain home.com.br this case click Options.

Select the User Name

Configure the user Netbios \ UserName

Configured with the user click Sign In

After the initial configuration and status messages can be configured

This article was originally written by:
Fernando Lugão Veltem
blog: http://flugaoveltem.blogspot.com
twitter: @ flugaoveltem

Wiki - Revision Comment List(Revision Comment)

| |

Comments

Ed Price - MSFT

12 Feb 2013 7:22 PM

Ed Price - MSFT edited Revision 7. Comment: Removing gerund and "(en-US)" from title. Adding tags.
- Edit
Richard Mueller

1 Aug 2012 6:12 PM

Richard Mueller edited Revision 4. Comment: Minor spelling
- Edit

Wikis - Comment List

Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.

Posted by Richard Mueller

on 1 Aug 2012 6:12 PM

Richard Mueller edited Revision 4. Comment: Minor spelling
Edit
Posted by Ed Price - MSFT

on 12 Feb 2013 7:22 PM

Ed Price - MSFT edited Revision 7. Comment: Removing gerund and "(en-US)" from title. Adding tags.
Edit

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?