Checklist for configuring XMPP federation

Last Updated : Oct 29, 2018 |
Prolog information
In the following checklists:
  • m refers to the number of servers in the local Presence Services cluster.
  • n refers to the number of local Presence/IM domains supported on the Presence Services cluster.
  • o refers to the number of servers in the remote deployment.
  • p refers to the number of remote Presence/IM domains.
Checklist for configuring XMPP federation using TCP
No.
Task
Reference
1
Administer m * n DNS SRV records to resolve _xmpp-server to Avaya Breeze® platform Security Module IP address and S2S Port for local Presence/IM domain.
2
Administer o * p DNS SRV records to resolve _xmpp-server to remote server IP address and S2S Port for remote Presence/IM domain.
3
Administer XMPP federation in unsecure mode (TCP).
4
Administer Server to Server Settings in Openfire.
5
Administer Security Settings (TCP) in Openfire.
6
Verify DNS resolution and server reachability.
Checklist for configuring XMPP federation using TLS with self-signed
No.
Task
Reference
1
Administer m * n DNS SRV records to resolve _xmpp-server to Avaya Breeze® platform Security Module IP address and S2S Port for local Presence/IM domain.
2
Administer o * p DNS SRV records to resolve _xmpp-server to remote server IP address and S2S Port for remote Presence/IM domain.
3
Administer XMPP federation in secure mode (TLS).
4
Administer Server to Server Settings in Openfire.
5
Administer Security Settings TLS on Openfire.
6
Administer Disable Certificate Verification in Openfire.
7
Configure Openfire Certificate, if Extended Hostname Validation is enabled.
8
Export Openfire Certificate on Linux.
9
Export Openfire Certificate on Windows.
10
Import Certificate into Cluster Truststore.
11
Import System Manager root CA certificate into Openfire Truststore on Windows.
12
Import System Manager root CA certificate into Openfire Truststore on Linux.
13
Verify DNS resolution and server reachability.
Checklist for configuring XMPP federation using TLS with System Manager CA signed
No.
Task
Reference
1
Administer m * n DNS SRV records to resolve _xmpp-server to Avaya Breeze® platform Security Module IP address and S2S Port for local Presence/IM domain.
2
Administer o * p DNS SRV records to resolve _xmpp-server to remote server IP address and S2S Port for remote Presence/IM domain.
3
Administer XMPP federation in secure mode (TLS).
4
Administer Server to Server Settings in Openfire.
5
Administering Security Settings TLS on Openfire.
6
Configure Openfire Certificate, if extended hostname validation is enabled
7
Administer Disable Certificate Verification in Openfire.
8
Create Entity Profile on System Manager.
9
Generate a Certificate Signing Request (CSR) on Openfire.
10
Sign the Openfire CSR on System Manager.
11
Install the System Manager CA and Signed Openfire Certificate on Openfire.
12
Verify DNS resolution and server reachability.