[PDF] Cisco Expressway Certificate Creation and Use Deployment Guide

View - Download Cisco Expressway Certificate Creation and Use Deployment Guide

Previous PDF

Next PDF

(X14.0.2)

FirstPublished:

AmericasHeadquarters

CiscoSystems,Inc.

170WestTasmanDrive

SanJose,CA95134-1706

USA http://www.cisco.com

Tel:408526-4000

800553-NETS(6387)

Fax:408527-0883

CONTENTS

Preface1CHAPTER1

1

Introduction3CHAPTER2

3 3 4 4 5 6 7 7 8 9 9 10

UsingACMEonExpressway-E15CHAPTER5

15 15 16 17 iii 18 18 19 19 20 20 21
21
22
22
23
23
23
23
24
24
27
29
30
31
32
35
35
35
36
37
37
37
iv

Contents

Troubleshooting39APPENDIXA

39
39
39
39
41
42
44
44
44
45
46
47

DecodeCertificates51APPENDIXD

51
53
59
v

Contents

vi

Contents

CHAPTER1

Preface

ChangeHistory

ReasonChangeDate

1

ReasonChangeDate

2

Preface

ChangeHistory

CHAPTER2

Introduction

Introduction

Important

InformationNotCoveredinthisGuide

ExpresswayAdministratorGuide

3

PKIIntroduction

Apublic/privatekeypair:

Signaturesofdata:

Certificates:

Acertificatechain:

1. 2. 3. 4. 5.

CertificateUseontheExpresswayOverview

4

Introduction

PKIIntroduction

Maintenance

SecurityServercertificate

CertificateGenerationOverview

Let"sEncrypt®

5

Introduction

CertificateGenerationOverview

PointstobeAware

6

Introduction

PointstobeAware

CHAPTER3

GeneratingaCertificateSigningRequest

GeneratingaCSR

FHUWLILFDWHLQVWDOOHGLQ([SUHVVZD\

Note

CreatingaCSRUsingExpressway

Step2GenerateCSRGenerateCSR

Step3 a. b. c. 7

Step4GenerateCSR

Step5Servercertificate

a.Download b.Show(decoded)Show(PEMfile) c.

DiscardCSR

Note

ServerCertificatesandClusteredSystems

8

GeneratingaCertificateSigningRequest

ServerCertificatesandClusteredSystems

CHAPTER4

ServerCertificateRequirementsforUnified

Communications

CallManager

tomcat

CallManagertomcat

ExpresswayX8.5.3

ReleaseNote

IMandPresenceServiceCertificates

cup-xmpp tomcat 9 cup-xmpptomcat

ExpresswayCertificates

subjectalternative names 10

ExpresswayCertificates

Note

SecurePhoneProfile

Note 11

ExpresswayCertificates

UnifiedCMregistrationsdomains:

_collab-edge DNS

CollabEdgeDNS

XMPPfederationdomains:

DNS

XMPPAddress

12

ExpresswayCertificates

GenerateCSR

Expressway-E"sCSRgenerator

13

ExpresswayCertificates

14

ExpresswayCertificates

CHAPTER5

UsingACMEonExpressway-E

UsingACMEonExpressway-E

NoJabberGuestsupportwithACME.

ACMEDeploymentOverview

1. 15 2. 3. 4. 5. 6. 7. mustbeenabledindividuallyoneachpeer

HowACMEWorks

16

UsingACMEonExpressway-E

HowACMEWorks

CommonConfiguration

1. 2. 3. 4. 17

UsingACMEonExpressway-E

CommonConfiguration

Letsencryptverificationprocess

Step1 a. b. c. d. e. f. g. h. i. Step2 a. b. c.

Frequentexpiryandlowimpactrenewal

18

UsingACMEonExpressway-E

Letsencryptverificationprocess

LQWURGXFWLRQRIWKH$&0(&HUWLILFDWH6HUYLFH

Note

Automatedrenewalmode

MoreaboutthevirtualApachehost

19

UsingACMEonExpressway-E

Automatedrenewalmode

DeployACMECertificateService

Prerequisites

domaincollab-edge 20

UsingACMEonExpressway-E

DeployACMECertificateService

Step1 Step2 a. c.Upload d.AppendCAcertificate Step1 Step2 a. c.Upload d.AppendCAcertificate 21

UsingACMEonExpressway-E

Step2ACMECertificateService

Step3Provider

Step4AdminEmail

Step5

Step6AcceptTerms&Conditions

ConfigureACMEforEachDomainCertificate

Maintenance>SecurityDomaincertificates

View/Edit

22

UsingACMEonExpressway-E

SigntheCSRusingACMEProvider

Step2

Step3SignCSRwithACMEProvider

Step4

Step5Servercertificate

[Optional]ChecktheSignedACMECertificate

Status

Step2PendingACMECertificateShow(decoded)

Step3 Note

DeploytheACMECertificate

Status

Step2DeployPendingCert

23

UsingACMEonExpressway-E

Step2ACMEAutomatedSchedulerOn

Step3ScheduleDaysScheduleTime

Step4Save

Status

LastDeployStatusLastSignStatus

RevokeanACMECertificate

24

UsingACMEonExpressway-E

Caution

Step1 Step2 Step3 Step4 Step5 Step6 Step7 25

UsingACMEonExpressway-E

RevokeanACMECertificate

26

UsingACMEonExpressway-E

RevokeanACMECertificate

CHAPTER6

ViewtheCurrentlyUploadedCertificate

Viewcurrentlyuploadedcertificate

Servercertificatedata

Show(decoded)

Show(PEMfile)

VRULJLQDOFHUWLILFDWHFOLFN

Resettodefaultservercertificate

Note 27
28

ViewtheCurrentlyUploadedCertificate

Viewcurrentlyuploadedcertificate

CHAPTER7

LoadingCertificatesandKeysOntoExpressway

LoadingCertificatesandKeysOntoExpressway

Note Note 29

Warning

MaintenanceSecurityServer

certificate

ManagingtheTrustedCACertificateList

MaintenanceSecurityTrustedCAcertificate

Browse

AppendCAcertificate

ResettodefaultCAcertificate

Showall(decoded)

Showall(PEMfile)

View(decoded)

Delete

30

LoadingCertificatesandKeysOntoExpressway

ManagingtheTrustedCACertificateList

FHUWLILFDWHZLOOIDLOWRORDG

Note

1.MaintenanceSecurityServercertificate

a. b. Note 3. serverprivatekey serverprivatekey 31

LoadingCertificatesandKeysOntoExpressway

4.Uploadservercertificatedata.

csr.pemprivkey_csr.pem /tandberg/persistent/certs csr.pemprivkey.pem /tandberg/persistent/certs/generated_csr

Re-usecurrentprivatekeyRe-use

currentprivatekey

5.ProviderACMECertificateService

ChanginganExistingServerCertificate

Important

Beforeyoubegin

32

LoadingCertificatesandKeysOntoExpressway

ChanginganExistingServerCertificate

On Note Step1 Step2 Step3 33

LoadingCertificatesandKeysOntoExpressway

ChanginganExistingServerCertificate

34

LoadingCertificatesandKeysOntoExpressway

ChanginganExistingServerCertificate

CHAPTER8

ManageCertificateRevocationLists(CRLs)

ManageCertificateRevocationLists

CertificateRevocationSources

TrustedCAcertificate

LimitationsandUsageGuidelines

Certificate

revocationcheckingSIPconfiguration 35
quotesdbs_dbs5.pdfusesText_10

[PDF] cisco expressway self signed certificate

[PDF] cisco financial analyst

[PDF] cisco financial analyst salary

[PDF] cisco financial calendar

[PDF] cisco financial quarters

[PDF] cisco financial report 2017

[PDF] cisco financial report 2018

[PDF] cisco financial report 2020

[PDF] cisco financial services

[PDF] cisco financial statements

[PDF] cisco financial year

[PDF] cisco financials

[PDF] cisco fingerprinting

[PDF] cisco firepower email security

[PDF] cisco free exam voucher