CWMS 2.5 Certificate questions

[SHANE MOORCROFT]

Hi 

I have a CWMS 2.5 system deployed with HA, split horizon and public access. I am going through the process of purchasing the Public Certificates required. Generating a wild card cert is not an option in my environment which leaves me with generating the CSR with SAN for the internal servers. 

I have some questions I was hoping someone may be able to answer:

• If the CSR was generated externally from CWMS could I choose what SAN's to include in the certificate? for example leave out the admin URL.
• Do all the SAN's auto populated in the CWMS generation wizard have to be included?
• Once I have the certs and create the cert bundle file to upload, does the cert file get uploaded to all 6 servers in the environment or does it get uploaded to only the admin and IRP servers?

Appreciate any assistance

regards

Shane

[dpetrovi · Accepted solution]

HI Shane,

Let me answer your questions below:

• If the CSR was generated externally from CWMS could I choose what SAN's to include in the certificate? for example leave out the admin URL. If you do that, you won't be able to install a SSL cert obtained based on such CSR. SSL cert must include all internal VMs' hostnames as well as Admin URL and WebEx Site URL.
• Do all the SAN's auto populated in the CWMS generation wizard have to be included? Yes.
• Once I have the certs and create the cert bundle file to upload, does the cert file get uploaded to all 6 servers in the environment or does it get uploaded to only the admin and IRP servers? It gets uploaded to all the servers. Admin VM distributes the SSL cert to all the VMs.

Let me know if you have any more questions.

Kind regards,

-Dejan

[SHANE MOORCROFT]

Hi Dejan

Thanks for answering my questions. Much appreciated.

regards

Shane