The meeting site certificate is not valid.

[marahman78]

CUCM 9.1

IM & Presence 9.1

Jabber 9.6

CWMS 1.5

I tried to enter "Meeting host account" information in Jabber client and its giving the attached error.

WebEx Meeting Server 1.5 has self-signed certificate, Do i have to upload the self-signed certificate into IM & Presence also.

OR

Do i have to import digital certificate from signed authority to CWMS and then to IM & Presence ?

Regards,

Mohammad

[Jonathan Schulenberg]

You really should give the CWMS server public CA-signed certificates. Users and external guests will get certificate warnings every time they try to join a meeting without this. With that said, manually importing the self-signed certificate into your workstation's trust store might bypass this error. I do not believe Jabber passes the presented cert to IM&P for validation; it just asks Windows about it locally.

Please remember to rate helpful responses and identify helpful or correct answers.

[marahman78]

I also import the certificate but still in Cisco Jabber it's giving an error.

Regards,

Mohammad

[Evgeniy.Suvorov]

Hi.

Did you solve this issue ?

[marahman78]

I've uploaded digital certificate from signed authority to CWMS.

[Evgeniy.Suvorov]

What digital certificate you uploaded to CWMS ? CA certificate ?

[marahman78]

Yes, CA Certificate.

[Evgeniy.Suvorov]

Thank you, marahman78

[Evgeniy.Suvorov]

It is your internal CA ?

[marahman78]

External CA

[Hermanus Janse van Vuuren]

I had the same issue then I took the certificated and imported it into Presence IM under OS Administration under Security Certificate Management as a cup-trust -- trust-certs and cup-xmpp-trust -- trust-certs.

It solved that issue

[marahman78]

When i download CSR from WebEx Meeting Server, it contains 2 pem file (csr.pem & csr_private_key.pem). As you mention, i need to update by selecting cup-trust & cup-xmpp-trust both but which pem shall i select for cup-trust and cup-xmpp-trust ?

[Hermanus Janse van Vuuren]

Hi,

I have imported the scr.pem into my DC certificate Authority and published a certificated which I have exported again and loaded that into my CUPS server for the 2 specific ones.

[Evgeniy.Suvorov]

Hi all.

I had the same problem. The reason  is that the self-signed CWMS certificate must be intalled in Trusted Root certificate store.

[engmouafy]

I faced the same problem,, and i solved it .

1- generate a new CSR.

2- Download it.

3- you will have a zipped file containign 2 files csr.pem and csr_private_key.pem .(ignore csr_private_key.pem )

4- CSR : Certificate Signing request --> sign it globally from symmentic or if you have CA server , you can do it

5- import the generated certificate from previous step.