Activating an Auto-Provisioned Application
Trusted applications can be provisioned at run time in two distinct ways: by auto-provisioning, which requires a local Central Management Store replica, or by manual provisioning, which does not require a local Central Management Store replica. The recommended way to provision a UCMA-based application is auto-provisioning. With this style of provisioning, applications can auto-discover, auto-provision, monitor, and react to settings that are relevant in an Microsoft Lync Server 2010 environment.
To activate an auto-provisioned application
Ensure that the computers on which the application will run are joined to the domain on which Lync Server 2010 will run.
Install the Central Management Store replication service.
Enable Central Management Store replication.
Set the certificate so that the Lync Server 2010 topology is aware of the trusted application computer.
The following sections provide the details of these steps.
Install the Central Management Store Replication Service
To perform the steps in this procedure, you must be in the Lync Server Administrator role or Trusted Application Operator role on a computer on which Lync Server Management Shell is installed.
To install the Central Management Store replication service
On the Start menu, select All Programs, select Accessories, and then right-click Command-Prompt, then click Run as administrator.
Run Bootstrapper.exe from the Lync Server 2010 core components installation directory by entering the following command.
"%ProgramFiles%\Microsoft Lync Server 2010\Deployment\Bootstrapper.exe" /BootstrapLocalMgmt /MinCache
Note
This command installs Microsoft SQL Server 2008 Express, which is required for Central Management Store replication. It also installs Microsoft Visual Studio C++ 2008 Redistributable - x64 (vcredist_x64.exe), SQL Server Native Client (sqlncli.msi), Feature Pack for Microsoft SQL Server 2005 (SQLServer2005_BC.msi), and UcmaRuntime.msi.
Enable Central Management Store Replication
This step ensures that the local Central Management Store replica starts getting updates from the master Central Management Store. Before you perform any of the following steps, make sure that you are logged on to the trusted application computer as a domain user/administrator with appropriate privileges. If you are logged in as a local administrator, the PowerShell cmdlets will be unable to work, because your computer will not be able to connect to the master Central Management Store. Administrators and developers who intend to build, provision, and configure a UCMA 3.0-based trusted application that runs as a Lync Server 2010 trusted service must be members of the appropriate universal group. Otherwise they will not be able to carry out their intended tasks.
To perform the steps in this procedure, you must be in the Lync Server Administrator role or Trusted Application Operator role on a computer on which Lync Server Management Shell is installed.
To enable Central Management Store replication
Launch Lync Server Management Shell.
On the Start menu, select All Programs, select Microsoft Lync Server 2010, right-click Lync Server Management Shell, and then click Run as administrator.
To configure permissions and bootstrap the replica service, run the Enable-CsReplica cmdlet.
Enable-CsReplica
Start the replica service using the Start-Service cmdlet.
Start–Service Replica
The Get-CSManagementStoreReplicationStatus cmdlet can be used to check the status of Central Management Store replication. Monitor the output from this cmdlet until the UpToDate property of the computer on which the replica was installed becomes true.
Get-CSManagementStoreReplicationStatus
Replication can take up to five minutes.
If replication does not occur within five minutes, it can be manually triggered using the Invoke-CSManagementStoreReplication cmdlet.
Invoke-CSManagementStoreReplication
Note
If replication has not successfully completed by application run time, the application throws ProvisioningFailureException on CollaborationPlatform startup.
Set the Certificate
The PowerShell cmdlet in the following procedure enters certificate information into the local Central Management Store. The thumbprint of the certificate can be found by examining the certificate in the Microsoft Management Console Certificates management snap-in and finding the "Thumbprint" key-value pair under the Details tab. Remove any spaces from the thumbprint before running the cmdlet.
To set the certificate
Launch Lync Server Management Shell.
On the Start menu, select All Programs, select Microsoft Lync Server 2010, right-click Lync Server Management Shell, and then click Run as administrator.
In Lync Server Management Shell, run the Set-CsCertificate cmdlet. In the following example, a certificate with a thumbprint of 14b04424b8316d90c72438dfefdf83d1fd917d39 is bound to the trusted application computer.
Set-CsCertificate -Type Default -Thumbprint 14b04424b8316d90c72438dfefdf83d1fd917d39
This cmdlet must be run for every computer in the pool. This informs UCMA auto-provisioning of the certificate used and also alerts the UCMA platform when the certificate changes.