Security and configuration prerequisites for Enterprise Voice in Skype for Business Server

Summary: Learn about the security and configuration prerequisites for Enterprise Voice in Skype for Business Server.

Before deploying Enterprise Voice, verify that your infrastructure meets the following security, user configuration, and scenario-specific hardware prerequisites.

Administrative rights and certificate infrastructure

Before deploying, check the following:

  • Administrators deploying Enterprise Voice should be members of the RTCUniversalServerAdmins group.

  • Administrators performing the configuration tasks must have adequate rights:

    • CsVoiceAdministrator: This administrator role can perform voice configuration tasks, manage voice applications, and assign voice policies to end users.

    • CsUserAdministrator: This administrator role can manage user properties, such as enabling Enterprise Voice for a user. This administrator role can also assign per-user policies, with the exception of the archiving policy; move users; and manage common area phones and analog devices.

    • CsAdministrator: This administrator role can perform all of the tasks of CsVoiceAdministrator and CsUserAdministrator.

  • Managed key infrastructure (MKI) is deployed and configured, by using either a Microsoft or a third-party certification authority (CA) infrastructure.


    For details about certificate requirements in Skype for Business Server, see Environmental requirements for Skype for Business Server 2015 or Server requirements for Skype for Business Server 2019.

User configuration

If you collocated the Mediation Server with each Front End pool or Standard Edition server during Front End deployment, user settings necessary for Enterprise Voice were configured automatically during installation of the files for those server roles.

If you are newly deploying the Enterprise Voice workload at this time, before you begin the deployment process, designate a primary phone number for each user who you plan to enable for Enterprise Voice. As the administrator, you are responsible for ensuring that this number is unique. Before implementation, all primary phone numbers must be normalized (correctly formatted) and copied to each user's Line URI property using Skype for Business Server Control Panel.


For examples of primary phone numbers required for Enterprise Voice deployment, see Sample Normalization Rules.

Next Steps: Install files or configure PSTN connectivity

After verifying software and environmental prerequisites for Enterprise Voice you can either: