cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
636
Views
5
Helpful
1
Replies

corporate directory

Nicholas Wysocki
Beginner
Beginner

How do I setup the directory to use https?

On the remote phones termination to a phone-proxy (ASA5510) I can access the directory from the phone on port 80.

I then opened up for 443 for https. i can access the xml data via web browser from a computer but i have to accept the cert. I set the path of the phone to use https, but it cant access the directory. how do i get the phone to accept the cert?

1 Reply 1

Well first a bit of preaching: Phone Proxy was never intended to allow XML-based services to work because it is not recommended to expose any part of your CUCM servers to the Internet directly. This was a solution limitation because the ASA essentially lies and claims to be a UCM server running in mixed mode. The TLS session for SCCP and RTP was not designed to work across the internet so anything beyond signaling and media were never considered. This has been solved in the new SSL-based Phone VPN solution.

Having said that, SSL support was added beginning in UCM 8.0(1) using the Trusted Verification Service. In theory, a properly configured UCM 8 with phones running 9.0 or later firmware could perform SSL-based directory and other services. To my knowledge, there is no documentation walking you through this though.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers