As mentioned previously in my previous article and following the same idea of certificate pinning in Cisco Meeting Server, to demonstrate this concept added since version 3.0. I used two different CA to sign :
1-The WebBridge certificate with CA's certificate called WEBBRIDGE-ROOT.cer.
2-The CallBridge certificate with CA's certificate called CALLBRIDGE-ROOT.cer.
Basically:
1-you tell to the WebBridge service----> trust only the CallBridge's certificate signed by CALLBRIDGE-ROOT.cer. It's enforced with the webbridge3 c2w trust CALLBRIDGE-ROOT.cer command.
2-You tell to the CallBridge service----> trust only the WebBridge's certificate signed by WEBBRIDGE-ROOT.cer. It's enforced with the callbridge trust c2w WEBBRIDGE-ROOT command.
![STATUS.PNG STATUS.PNG](https://community.cisco.com/t5/image/serverpage/image-id/151735i9ABF8528904B57DD/image-size/large?v=v2&px=999)