8. Click the Run button for Step 3: Request, Install or Assign Certificates.
   1. On the Certificate Wizard, click the Request button. The Certificate Request page displays.
   2. Click Next. The Delayed or Immediate Requests page displays.
   3. Select theSend the request immediately to an online certification authority option and click Next. The Choose a Certification Authority (CA) page displays.
   4. Select the option applicable to your environment, which is usually the Select a CA from the list detected in your environment option, and click Next.  The Certification Authority Account page displays.
   5. If needed, check the Specify alternate credentials for the certification authority, enter the user name and password, and click Next.  The Specify Alternate Certification Template page displays.
   6. It’s recommended to use the default certificate template, but if your environment needs to specify a different template, check the Use alternate certificate template… checkbox, enter the template name, and click Next. The Name and Security Settings page displays.
   7. Enter the Friendly Name and Bit length for the certificate, make the private key exportable if needed by checking the checkbox, and click Next.The Organizational Information page displays.
   8. Enter the Organization and Organizational Unit, then click Next. The Geographical Information page displays.
   9. Select a Country/Region, enter the State and City, then click Next.The Subject Name/Subject Alternate Names page displays.
   10. Click Next.The Configure Additional Subject Alernate Names page displays.
   11. Enter any additional Subject Alternate Names if necessary for your environment, then click Next.The Certificate Request Summary page displays.
   12. Click Next.The Executing Commands page displays.
   13. Click Next when the process has completed. The Online Certificate Request Status page displays.
   14. Select the Assign this certificate to Lync Server certificate usages checkbox and click Finish. The Certificate Assignment page displays.
   15. Click Next. The Certificate Assignment Summary page displays.
   16. Click Next. The Executing Commands page displays.
   17. Click Finish when the process has completed.
   18. Close the Certificate Wizard window.

9. Click the Run button for Step 4: Start Services.  The Start Services page displays.
   1. Click Next. The Executing Commands page displays.
   2. Click Finish when the process has completed.

10. Click Exit to close the Deployment Wizard window.

On the Lync Front-End server:

1. Start the Lync Server Control Panel

2. Click on Topology

3. Verify the QMS server has a green check mark in the Replication column.  This may take several minutes, depending on the speed of the servers, speed of the network, and complexity of the Lync environment.

4. Click Refresh every few minutes until the green checkmark.

5. After 30 minutes, if the QMS server still shows a red X, verify the Lync Server Replica Replicator Agent service is running.

6. If the service is running, open a PowerShell window, type the following commands at the PS> prompt, and hit Enter after each:
   1. Import-Module Lync
   2. Enable-CsTopology
   3. Invoke-CsManagementStoreReplication

7. Repeat steps 4 and 5 until the green check mark appears for the QMS server.

• If your organization plans to enable recording encryption in the Call Recording system, in addition to the permissions detailed in the Enghouse Interactive Call Recording Services Requirements section found in the Enghouse Interactive Call Recording version 5.4 Installation Guide, the account that runs the Enghouse Interactive Call Recording Service needs the following permissions:

• The account has to be able to read the private key data of the certificate the Recording Server uses to establish TLS connectivity with the Lync Front End Server. This permission can be granted using the Certificate snap-in for the Microsoft Management Console.

• The account has to be a member of the “RTC Component Local Group” on the Recording Server. This permission can be granted using the “Local users and groups” snap-in for the Microsoft Management Console.

Step 4: Configuring Call Recording Services

To configure Call Recording Services complete the following steps.

1. Select Microsoft Lync for packet capture based installation (Endpoint, Mirroring, or AtEdge) or Microsoft Lync UCMA for conference based recording installations.
2. For each Call Recording User:

• In the SIP URI field enter the SIP URI, which has the format sip:<user>@<domain>.

• In the Endpoint IP Address field set the Endpoint IP Address to 0.0.0.0. The actual address is detected and updated automatically.

Step 5: Install the TelRexNetService on the Lync/OCS Front-end Server

Install the TelrexNetService on the OCS front-end server:

1. Login to an account that is a member of:

• RTCHUniversalServices (Active Directory group)

• RTCUniversalServerAdmins (Active Directory group)

• RTC Server Applications (Local to Front-end Server)

2. Copy the TelrexNetService installer to the server and unzip it.

3. Double-click TelrexNetServiceSetup.msi.

4. Click Next . The License Agreement page displays.

5. Select the I agree radio button and click Next. The Configure TelrexNetService page displays.

6. Select the version of Lync/OCS that is running on this front-end server.

7. Enter the Fully Qualified Domain Name (FQDN) of your Lync/OCS front-end pool (i.e. Phx-vm-lync13fe.phx-cr-lync13.lab).