Cisco 7800/8800 and MRA: how to add custom trusted CAs?

[raziel78kain]

Hello,

we would like to know if it's possible to add custom trusted CAs to the Cisco 7800/8800 IP Phones, to be connected over MRA.

TIA and regards.

[Jaime Valencia · Accepted solution]

No, you can't, that's why the list of trusted CAs you need to use for them to work is provided.

[raziel78kain]

Hello Jaime,

thanks for your answer.

I hoped that we could do something like what it's possible to do with the Cisco TelePresence endpoints:

"These endpoints ship with a list of default CAs which cover the most common providers (Verisign, Thawte, etc). If the relevant CA is not included, it must be added. See 'Managing the list of trusted certificate authorities' in the endpoint's administrator guide."

Regards.

[Evgeny Izetov]

Like Jaime said above, you can't modify the trusted CA list on 7800/8800. It was mentioned in a Cisco Live! session, and I remember seeing it in the documentation as well.

[Deepak Rawat]

You cannot modify the root CA trust list on these endpoints. Make sure that the VCS Expressway's server certificate is signed by one of the CAs that the endpoints trust, and that the CA is trusted by the VCS Control and the VCS Expressway.

Reference:

http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-7/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-7.pdf

Regards

Deepak