CiscoFinesse

Release 11.0(1) ES05

Contents

ESVersion

ValidUpgradePaths

Installing Finesse Release 11.0(1) ES05

Installation

Rollback

Resolved Caveats/FeaturesinthisEngineeringSpecial

Bug Search Tool

Appendix

ESVersion

finesse-cce.1101.ES05.10000

File Name / MD5Checksum
finesse-cce.1101.ES05.10000.cop.sgn / 02:2b:af:4c:58:83:f5:7d:ad:d0:72:17:9b:02:7e:01
finesse-cce.1101.ES.Rollback.cop.sgn / 56:47:50:76:ef:4f:c4:a9:af:ef:e0:c5:94:ca:de:49

ValidUpgradePaths

Cisco Finesse Release 11.0(1) ES05 is delivered as a Cisco Option Package (COP) file.

The 11.0(1) ES05must be installed ONLY on the following versions (as seen in the output of the “show version active” command):

  • 11.0.1.10000-24
  • finesse-cce.1101.ES05.10000.cop

However, if you have 11.0(1) ES03 or 11.0(1) ES04 installed, please do a rollback before upgrading to 11.0(1) ES05.

Also, note that 11.0(1) ES05 can be applied irrespective of whether the language COP is installed or not.

Installing Finesse Release 11.0(1) ES05

Youmust performthe following procedure first on the primary Finesse node and

then on the secondary Finesse node.

IMPORTANT:You must use the CLI to perform this upgrade. Do not use the Cisco

UnifiedOperating System Administration page to perform this upgrade as the

installationmay hang.

Installingthis ES or performing a rollback stops and restarts certain Finesse services. To avoid interruption, perform the installation or rollback during a maintenance window.

Installation

1.Download finesse-cce.1101.ES05.10000.cop.sgn to an SFTP serverthat

canbe accessed by the Finesse system.

2.UseSSH to log in to your Finesse system with the platform administration

Account.

3.Accessthe CLI and run the following command:

utils system upgrade initiate

4.Follow the instructions that appear on your screen.
When prompted, provide the location and credentials for the remote file system (SFTP server).

Note:The COP file performs a check to ensure that Cisco Finesse Release

11.0(1) is installed.If this release is not found on your system,an error is

displayed and the installation doesnot proceed.

5.When presented with a list of available upgrade options, select finesse-cce.1101.ES05.10000.cop.sgn

6.Afterinstallation is complete,restart the system using the command:
utils system restart

7.To verify thatFinesse is now running the correct release, access the CLI using theAdministrator credentials and enter the following command:

showversion active
Make sure that finesse-cce.1101.ES05.10000.cop is listed as an Optional package. Otherwise, please contact Cisco TAC.

7. Checkthat theinstallation is successful by signinginto Finesse

( or hostname of Finesse server/desktop).

Rollback

Ifthereisaproblemwiththeinstallation,youcanrollbacktotheprevious

versionas follows:

  1. Downloadthefilefinesse-cce.1101.ES.Rollback.cop.sgn toanSFTP

Server thatcanbeaccessedby the Finesse system.

  1. UseSSH to log in to your Finesse systemwith the platformadministration

Account.

  1. Accessthe CLI and run the following command:

utilssystem upgrade initiate

  1. Follow the instructions that appear on your screen. When prompted, provide the location and credentials for the remote file system (SFTP server).
  2. When presented with the list of available upgrade options, select finesse-cce.1101.ES.Rollback.cop.sgn
  3. After rollback is complete, restart the system using the command:
    utils system restart
  4. To verify Finesse is now running the correct release, access the CLI using the Administrator credentials and enter the following command:
    show version active
    Make sure that finesse-cce.1101.ES.Rollback.cop is listed under Optional packages. Otherwise, please contact Cisco TAC.

Note: TheFinesseRollback COPfilerestoresyoursystemtothebaseFinesseVersion(inthiscase,Cisco FinesseRelease11.0(1)).

ResolvedCaveats/FeaturesinthisEngineeringSpecial

The following defects are fixedin11.0(1)ES05.

DefectID / Description / Severity
CSCuz19136 / CLI command to turn off SSRF fails / 2
CSCuz38289 / Finesse agent can't change state after idling over 30 minutes / 1
CSCuz39903 / Finesse is showing the wrong Context Service status after registration / 2
CSCuy14779 / Finesse Supervisor cannot see agent status update after PG failover / 2
CSCuz45855 / Finesse Default Skill Group visible in Queue Statistics / 2
CSCuv28457 / Openfire crashes when non-valid XML 1.0 characters are passed to finesse / 1
CSCux28810 / Non printable character in Openfire crashes Finesse server / 1
CSCuw38234 / Unrestricted File growth of localhost_access_log.txt fills disk / 1
CSCuz34757 / Finesse gadgets and buttons disappear intermittently when using IE
(See Appendix below) / 3
CSCuw79085 / Cisco Finesse and Contact Center XMPP Default Account Vulnerability / 1
CSCux70426 / Finesse IPPA call transfer is blocked by the call variable screen / 1
CSCuy94569 / Cannot turn on Openfire debug logging after 10.5(1) ES7 / 1
CSCuy33974 / Finesse is not deleting users in OpenFire when a user is deleted. / 1

The followingdefects are fixedin 11.0(1)ES04(This enables integration with Cisco Context Service).

DefectID / Description / Severity
CSCuy79023 / Incorrect CS SDK Version in Finesse ES / 2

The followingdefects are fixedin 11.0(1)ES03.

DefectID / Description / Severity
CSCuw86623 / Cisco Finesse SSRF Vulnerability (See Appendix below) / 2
CSCuy36899 / Finesse removes connection data on STOPPED connector / 2

The followingdefects are fixedin 11.0(1)ES01.

DefectID / Description / Severity
CSCuw70389 / Finesse 3rdparty gadgets cannot be loaded into 3rd party gadgets. / 2

BugSearchTool

To access the Bug Search Tool, go to and log in with your Cisco.com user ID and password.

Appendix

CSCuw86623: SSRF Vulnerability Fix

This fix ensures that gadgets that invoke 3rd party REST APIs proxied via Finesse shindig are authenticated by Shindig. After installation of 11.0(1) ES05, the REST proxy authentication is enabled by default. Finesse provides a new utils commands which can be used to disable / enable the authentication for the proxied REST request.

  • utils finesserest_proxy_auth enable
  • utils finesserest_proxy_auth disable
  • utils finesserest_proxy_auth status

NOTE: When the REST proxy authentication is enabled, Finesse can operate only in HTTPS mode. If you need to disable HTTPS redirection, you need to disable REST proxy authentication as well.

For more details about SSRF, see Also, see the defect notes in the bug search tool.

CSCuz34757: Finesse gadgets and buttons disappear intermittently when using IE

When IE compatibility mode was changed, the browser automatically refreshed and a blue screen was seen.

With this fix, the browser will be redirected to the Finesse login page when compatibility mode is changed and the users can login again and continue their work.