For UCCX 11.5 do you need both tomcat and tomcat-ECDSA certificates?

[alcolsto]

We just upgraded to UCCX 11.5 to because of an issue with Mediasense recording in which Mediasense had to be upgraded.  We we later found out about the new ECDSA requirement. It is not clear if the tomcat-ECDSA is required in "addition to" or "instead of" the regular tomcat certificate.  Can someone confirm this?

[Martin Moran]

It is required in addition of the regular tomcat certificate. You'd need two certificates instead of one.

See the note of the "UCCX Configuration Application Certificates" section in the following link:

http://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/118855-configure-uccx-00.html

Rgrds,

Martin S. Moran R.

[Greg Given (9Line)]

You can actually install a COP file temporarily to allow for that process to use the existing CA cert

In the Unified CCX 11.5(1) the Tomcat service is preconfigured with RSA and ECDSA certificates.

After upgrade to Unified CCX 11.5(1), the live data gadgets may not load in Cisco Finesse agent desktop if the Tomcat's RSA certificate is CA signed and the new Tomcat-ECDSA certificate is self-signed. For the Live Data gadgets to load until the Tomcat-ECDSA certificate is CA signed, you should install the following COP, ciscouccx.ecdsa-cert.cop.sgn from the location: https:/​/​software.cisco.com/​download/​release.html?mdfid=286309734&flowid=80822&softwareid=280840578&release=11.5(1)&relind=AVAILABLE&rellifecycle=&reltype=latest. This COP should be installed after the Unified CCX is upgraded to 11.5(1) version. If you upload the CA Signed Tomact-ECDSA certificate in future, Unified CCX will automatically start using this certificate.

see here:

UCCX 11.5 Upgrade Guide

Search for ECDSA under the important considerations section