1. This upgrade is very simple. You have to download the upgrade image (signed binary) and go to Software Upgrades section in Callmanager servicability (if i remember right) and you have two options.

a. Upgrade using cd/dvd

b. Upgrade using FTP/SFTP.

I typically use method b, over a the reason being, you will be wasting a cd/dvd for this. But usually a cd/dvd upgrade is a lot faster than over the network. If using method a, burn the upgrade image you downloaded to a dvd (usually these files are as big as 800mb to a gig) and place the disc locally on the server dvd drive and use the software upgrades web page to perform the upgrade.

2. The purpose of the recovery disk can be read here.

http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_installation_guide09186a00806c3cc3.html#wp51549

3. CCM 5.x has built in CSA. There is no OS access as of yet, so you cannot put any anti virus software or any other third party agents on the server.

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_implementation_design_guide_chapter09186a008063742b.html#wp1049380

HTh

sankar

PS: please remember to rate posts!