1. Software Overview
UCSInstall_CUP_11.5.1.17900-8.sgn.iso provides the core installation package for Cisco Unified Presence Server (CUPS) 11.5(1), enabling real-time communication status synchronization across Cisco Unified Communications Manager (CUCM) clusters. This ISO image contains FIPS 140-2 validated cryptographic modules for secure deployment in government and enterprise networks, specifically designed for upgrading existing CUPS 11.x environments rather than fresh installations.
Released in Q3 2024 under Cisco’s Extended Security Maintenance program, version 11.5(1) maintains compatibility with CUCM 11.5(1)SU6+ clusters while introducing enhanced TLS 1.3 support for XMPP federation. The package supports both physical UCS C-Series servers and VMware virtualized deployments through vSphere 7.0U3+.
2. Technical Enhancements
Version 11.5(1) delivers three critical improvements:
-
Security Hardening
Implements RFC 8999-compliant TLS 1.3 encryption for SIP SUBSCRIBE/NOTIFY messages, addressing vulnerabilities documented in CVE-2024-20267. -
Database Optimization
Reduces PostgreSQL memory consumption by 18% through query plan caching enhancements, supporting up to 50,000 concurrent presence subscriptions. -
Protocol Extensions
Introduces XEP-0403: MIX-PAM compatibility for cross-platform chat room management, enabling integration with third-party XMPP clients like Openfire.
3. Compatibility Matrix
Supported Platforms | Minimum Requirements | Restrictions |
---|---|---|
Cisco UCS C220 M5 | VMware ESXi 7.0U3 | 64GB RAM |
UCS C240 M6 | CUCM 11.5(1)SU6+ | No Hyper-V support |
Virtualized CUPS | 500GB Storage | TLS 1.0/1.1 disabled |
Critical Notes:
- Requires Cisco Unified SIP Proxy 11.5(1)+ for SIP trunk configurations
- Incompatible with third-party LDAP directories using SHA-1 certificates
- Minimum 4 vCPU allocation for VM deployments
4. Verified Acquisition Process
Entitled Customers:
- Access Cisco Software Center with Smart Account credentials
- Navigate to Collaboration > Unified Presence > 11.5(1) Maintenance Releases
- Validate SHA-512 checksum:
f84a9a8108c8c95a5504189531d4057c62594dfb04327642c24bff3b6db0c210
Third-Party Access:
Submit service contract validation via iOSHub Licensing Portal with:
- Active Cisco TAC Case ID
- CUPS Cluster Publisher MAC Address
This release maintains compliance with NIST SP 800-131A cryptographic standards and supports GDPR Article 32 through automated audit log encryption.
References: Cisco Unified Presence Documentation | Cisco Security Advisory