Deploying the Meeting Survivability service

Zoom Meeting Survivability allows organizations utilizing the Zoom Meeting Hybrid service to have an on-premise failover if they cannot access the Zoom Cloud. While in Survivability Mode, users will be able to join designated public Emergency Meetings, join currently running meetings, start new ad hoc and scheduled meetings. 

Once the Meeting Survivability service has been deployed, administrators can enable Meeting Survivability and configure Emergency Meetings for Survivability Mode. 

Requirements for deploying a Meeting Survivability feature

• Business, Education, or Enterprise account
• Account owner or admin privilege
• Deployed Zoom Meetings Hybrid service
• Five (5) Deployed Node serverss based on the Zoom Meeting Suriviability module requirements.

How to configure a survivability zone

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. Click the Survivability Zone tab.
5. Under Survivability Zone, click + Add survivability zone.
6. Enter the name of the Survivability zone.
7. Click Add. 
8. Click the name of the Survivability Zone, and then click Add survivability meeting zone.
9. Under Survivability meeting zone name, enter the zone’s name.
10. Under Surviviability Zone, select the desired Suriviability Zone.
11. Under Meeting Zone, select the Meeting Zone with a configured Zoom Hybrid Meeting service. 
12. Click Add.

How to deploy the Meeting Survivability feature

Component deployment order

When deploying the Zoom Meeting Suriviability service, the individual components must be deployed on their own individual Node server. In addition, the components will need to be deployed in a specific order, as some components are prerequisites for others to be deployed:

1. Database service
2. Load Balancer service
3. Secret Agent service
4. Survivability Zone Controller service
5. Web Server service

Deploying the Database service

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. On the Services tab, click Add Services.
5. Under Meeting Survivability, click Database.
6. Under Install on a node, select the server you want to deploy the service on. 
7. Under Survivability Zone, select the desired Surivivability Zone this service will be deployed for.
8. Under Database name, enter the name for the database, so it can be identified easily in later steps.
9. Under Certificate settings, set how the certificates will be managed:
   • Select Use domain and certificates managed by Zoom to have Zoom generate and manage the certificate. 
   • Select Use my organization’s domains and upload a new certificate, if uploading your own crt file and private key file.
     Note: If you are using your own certificate, then you are required to enter the Certificate, Domain, and Host name for your certificate.
10. (Optional) Under Advanced Settings, the following settings can be set:
    • Allow external access (NAT Mode): Enable to enable network address translation and allow external users to join meetings.
      Note: An External IP must be entered if NAT is enabled. In addition, the SSL Port for port forwarding can be configured, and a prefix can be added for the External domain.
11. Click Add.

Deploying the Load Balancer service

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. On the Services tab, click Add Services.
5. Under Meeting Survivability, click Load Balancer.
6. Under Install on a node, select the server you want to deploy the service on. 
7. Under Survivability Zone, select the desired Surivivability Zone this service will be deployed for.
8. Under Internal IP, enter the internal IP configured for the service.
9. Under Internal domain, enter the domain for the load balancer. 
10. Click Add.

Deploying the Secret Agent service 

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. On the Services tab, click Add Services.
5. Under Meeting Survivability, click Secret Agent service.
6. Under Install on a node, select the server you want to deploy the service on. 
7. Under Survivability Zone, select the desired Surivivability Zone this service will be deployed for.
8. Under Database, select the database service configured in previous steps.
9. Under Certificate settings, set how the certificates will be managed:
   • Select Use domain and certificates managed by Zoom to have Zoom generate and manage the certificate. 
   • Select Use my organization’s domains and upload a new certificate, if uploading your own crt file and private key file.
     Note: If you are using your own certificate, then you are required to enter the Certificate, Domain, and Host name for your certificate.
10. Under Internal IP, enter the internal IP configured for the service.
11. (Optional) Under SSL Port, configure the UDP port for the service (the default is 443).
12. Click Add.

Deploying the Survivability Zone Controller service

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. On the Services tab, click Add Services.
5. Under Meeting Survivability, click Survivability Zone Controller.
6. Under Install on a node, select the server you want to deploy the service on. 
7. Under Survivability Zone, select the desired Surivivability Zone this service will be deployed for.
8. Under Certificate settings, set how the certificates will be managed:
   • Select Use domain and certificates managed by Zoom to have Zoom generate and manage the certificate. 
   • Select Use my organization’s domains and upload a new certificate, if uploading your own crt file and private key file.
     Note: If you are using your own certificate, then you are required to enter the Certificate, Domain, and Host name for your certificate.
9. Under Internal IP, enter the internal IP configured for the service.
10. (Optional) Under SSL Port, configure the UDP port for the service (the default is 443).
11. Click Add.

Deploying the Web Server service

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. On the Services tab, click Add Services.
5. Under Meeting Survivability, click Web Server.
6. Under Install on a node, select the server you want to deploy the service on. 
7. Under Survivability Zone, select the desired Surivivability Zone this service will be deployed for.
8. Under Database, select the database service configured in previous steps.
9. Under Username, enter the username that will be used to access the Web server GUI.
10. Under Password, enter the password that will be used to access the Web server GUI.
11. Under Certificate settings, set how the certificates will be managed:
    • Select Use domain and certificates managed by Zoom to have Zoom generate and manage the certificate. 
    • Select Use my organization’s domains and upload a new certificate, if uploading your own crt file and private key file.
      Note: If you are using your own certificate, then you are required to enter the Certificate, Domain, and Host name for your certificate.
12. Under Internal IP, enter the internal IP configured for the service.
13. (Optional) Under SSL Port, configure the UDP port for the service (the default is 443).
14. Click Add.

How to start Meeting Survivability services 

Once the Meeting survivability services have been deployed, the survivability services will need to be started in a specific order:

1. Survivability Database
2. Survivability Load Balancer
3. Survivability Secret Agent
4. Survivability Zone Controller
5. Survivability Web Server

How to add DNS records for Meeting Survivability

To ensure Zoom clients can connect to survivable resources during a network outage, Zoom Meetings Local Survivability requires each meeting service to be reachable via a locally resolvable DNS hostname. Zoom's Auto-PKI service automatically enrolls Zoom Node and its modules with publicly trusted CA (Digicert) certificates, though customer-provided certificates using a controlled domain are also supported. Normally, Zoom manages DNS records via the zoomonprem.com domain. However, during an outage, public DNS may be unreachable, so static hostname resolution on the local DNS server is essential for secure communication and TLS negotiation between clients and survivability components.

If the DNS entry does not match the assigned Zoom Node certificate, the Zoom Client will receive a certificate error when attempting to join a meeting. 

To facilitate this, you must create a self-hosted zoomonprem.com domain within the local DNS server and create the records necessary to allow the Zoom client to resolve the hostname during an outage. The records will need to be for:

• All Zoom Hybrid Meeting components
• The Survivability Database service
• The Survivability Load Balancer service
• The Survivability Web Server service
• Survivability Secret Agent service
• Survivability Zone Controller service

Retrieving the DNS hostnames 

To retrieve the DNS hostnames:

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Node Management, then click Modules.
3. Click the drop-down button , and click Meetings Hybrid.
4. Under the Services tab, click the checkbox for all Hybrid Meeting and Meeting Survivability components.
5. Above the Service list, click Download DNS Record. 
6. Save the dns_record.txt file.
7. Create new DNS A Record entries for each entry in the file. 

If additional modules are deployed in the future, the records for those modules will need to be added to ensure that Zoom client can resolve the hostnames for the components.