--- title: "System requirements" canonical: "https://docs.cuesystem.com/space/TOSR/234194833/System%20requirements" format: markdown --- > ℹ️ We recommend to always use the latest FW version in the units. New versions always address security updates, bug fixes. For the proper functioning of the system, it is necessary to ensure the following requirements. ## Servers access - Access the server [my.cuesystem.com](http://my.cuesystem.com), [resources.cuesystem.com](https://resources.cuesystem.com/) and [downloads.cuesystem.com](https://downloads.cuesystem.com/) over HTTPS (TCP port 443). This access is not mandatory, it is used for online update of the firmware and software. If not enabled, offline updates can be used. - Server access (Exchange Server, Microsoft 365 - [https://graph.microsoft.com](https://graph.microsoft.com) and [https://login.microsoftonline.com](https://login.microsoftonline.com), Google Workspace) via HTTPS (TCP port 443). CUE System supports the following cryptographic standards for HTTPS access: TLS 1.2, TLS 1.3. Supported encrypting includes AES-GCM, ChaCha20-Poly1305. - For Exchange Server, it is necessary to have enabled service EWS (Exchange Web Services). This service is enabled by default. - The EWS service is provided on the Exchange server using the Internet Information Services (IIS) Web server. IIS must be in version 7.5 or later. - For Microsoft, it is necessary to register applications for the Microsoft Graph platform using Azure Active Directory. Microsoft Graph is a Microsoft developer platform that connects services and devices. It permits integration of CUE System services with Microsoft 365 and Azure. Registering your app establishes a unique application ID and other values that your app uses to authenticate with Azure AD and get tokens. Microsoft Graph services are available at [https://login.microsoftonline.com](https://login.microsoftonline.com) and [https://graph.microsoft.com](https://graph.microsoft.com), so make sure that these addresses are available from all reservation system units. - Communication with the IceWarp and Zimbra calendar servers takes place using the CalDAV internet standard. For the IceWarp Server and Zimbra, it is necessary to enable the WebDAV service on this server, which will automatically make CalDAV available as well. - For the IceWarp Server and Zimbra, secure access to the SMTP server must be enabled, typically on TCP port 465 (SSL/TLS) or 587 (STARTTLS). > 📝 Check that no security programs or functions (such as firewalls, proxy servers, domains, etc.) block straight HTTP/HTTPS communication between the CUE Solution Units and servers with room calendars. ## Network ports - An open **TCP**** ****port**** ****80** (HTTP) and **443**** **(HTTPS) within the local network for the administration of CUE Solution Units by means of Admin Web. - An open **TCP**** ****port**** ****53128**** **and **UDP**** ****port**** ****33333**** **within the local network for communication between CUE Solution Units. Communication between units is encrypted using AES-256. - **UDP packet broadcast on port 33333 must be enabled** in the following cases: - **Essential setup **is used for CUE Solution Units management. - If you use room **occupancy sensors** that are connected via a CUE Control System (**touchONE-sensor-app** or **Reservation System Occupancy Sensor Integration** applet applied in Cue Control System). - If you use **integration with CUE Control System** (**Reservation System** **Control Integration** applet applied in Cue Control System). This UDP broadcast is used for reservation system and control system units discovery. - It is recommended to enable **UDP packet broadcast on port 33333 **for system managed using **On-premises administration** (touchONE-manager) or **CUE Admin**. This is used to search for reservation system units. If the packet broadcasting is not allowed on the network or if the reservation suite units are on different VLANs where the broadcast packets do not pass through, a fixed IP address (either static or reserved on the DHCP server) must be set on the touchONE-manager. - An open **UDP port**** ****53** for communication with DNS server and for conversion of domain names to IP addresses. - **Open**** ****UDP ports**** ****67 and 68** for communication with DHCP server and for IP address assignment, if DHCP is used. - An open **UDP**** ****port**** ****1900**. Opening this port is not mandatory, it is used to make the reservation system units visible in the Windows File Explorer. This port uses UPnP technology (Universal Plug and Play), thanks to which reservation system units in the file explorer can be made visible as other network devices. This technology must also be enabled on a given computer. - An open **TCP/UDP 389** port for accessing Active Directory server using LDAP protocol. This port is required if you use an on-premise **Exchange Server **with **CUE Server**. - An open **TCP port 25** (SMTP) or **465 **(SMTP over SSL, SMTP/Secure) for communication with SMTP server. This port only needs to be opened if you are using **CUE Server** and **sending emails using an SMTP server**. - An open **TCP port 1433** for communication with database MS SQL server. This port only needs to be open if you use **CUE Server** with **external database server **of this type. - An open **UDP port 123** for access to NTP (time) servers. ## Network - All reservation system units managed using **Essential Setup **included in the Reservation Suite must be plugged into the same LAN. This rule is also recommended for **On-premises administration** (touchONE-manager). - In the case of **On-premises administration**, the touchONE-manager and other units of the Reservation Suite should be on one LAN subnet **or** the units should be accessible via IP addresses and should not be separated by a NAT or firewall. - All reservation system units managed using **CUE Solution** must have access to the API URL of CUE Solution server using the port 443 (HTTPS). - Functional DNS servers. - An open proxy server port if a proxy server is used to access HTTPS servers. If you use a proxy, it must be set up on all units of the reservation system, inculding touchONE-manager, Reservation panels, and touchONE-overview. - The network card of touchONE-manager and touchONE-overview units supports speeds up to 1 Gbit/s. If you are using a faster LAN, set up ports intended for these units on your switch to auto-negotiate or to 1 Gbit/s. - The network card of eservation panels supports speeds up to 100 Mbit/s. If you are using a faster LAN, set up ports intended for Reservation panels on your switch to auto-negotiate or to 100 Mbit/s. - In case your switches do not support the PoE technology, use the PoE injectors and connect them between the Ethernet switch and the Reservation panels. The unit touchONE-overview unit is powered by a stand-alone power supply unit and PoE is not required. ## Date & time - NTP (Network Time Protocol) servers access (UDP port 123). - Correctly set time zones for all required accounts (i.e. rooms, workplaces, users). ## Cabling & power supply - Free LAN sockets on Ethernet switches for all CUE Solution Units. - CAT5 or higher LAN cables leading from an Ethernet switch to the place where you want to install CUE Solution Units. - The use of PoE (Power over Ethernet) of the Ethernet switches is recommended as it will simplify the necessary cabling. In case your switches do not support the PoE technology, use the PoE injectors and connect them between the Ethernet switch and the Reservation panels. - All Reservation panels and reservation interfaces are connected to LAN using a single cable, which also provides power supply thanks to PoE (Power over Ethernet) technology. | Type | Standard | Class | | --- | --- | --- | | touchONE-5-B | IEEE 802.3af | Class 0 | | touchONE-5 | IEEE 802.3af | Class 0 | | touchONE-7-B, touchONE-7-M | IEEE 802.3af | Class 0 | | touchONE-10-M | IEEE 802.3af | Class 0 | | touchONE-10-W | IEEE 802.3af | Class 0 | | touchONE-12-B, touchONE-12-M | IEEE 802.3at | Class 4 | | touchONE-overview HW revision R03 or newer | IEEE 8023.af / at
for details [click here](https://docs.cuesystem.com/space/PRODUCTS/493584415/touchONE-overview#Power-supply) | Class 0 / 4 | | touchONE-manager HW revision R03 or newer | IEEE 8023.af / at
for details [click here](https://docs.cuesystem.com/space/PRODUCTS/493584422/touchONE-manager#Power-supply) | Class 0 / 4 | - The [touchONE-manager](https://docs.cuesystem.com/space/PRODUCTS/493584422) and [touchONE-overview](https://docs.cuesystem.com/space/PRODUCTS/493584415) units in older hardware revisions R01 and R02 are powered using a stand-alone power supply unit. ## Other - A [touchONE-overview](https://docs.cuesystem.com/space/PRODUCTS/493584415) unit requires a display with an HDMI input which is capable to display signal with resolution Full HD (1920 x 1080 pixels) or 4K (3840 x 2160 pixels).