CUCM 8.0.3 SSL AD integration

[eemge]

CUCM LDAP integration non SSL works fine.

When trying to turn on SSL the host name cannot be reached. Did the following:

1. Created and uploaded Cert to tomcat-trusts

2. Opened Cert and found CN=wwww.xxxx.yyy.com

3. Put this as server in LDAP Server settings (wwww.xxxx.yyy.com)

4. Set port to GC port of 3269 (also tried 3268)

5. Checked SSL box

When I save I get "Unknown Host or Bad IP Address wwww.xxxx.yyy.com"

I have DNS set on the server and from CLI I can ping the hostname as shown above.

Any suggestions would be appreciated.

[Joseph Martini]

What's configured as your domain name on CUCM?  One step that needs to be done before the certificate will be available for the SSL connection, even though you aren't quite there yet with the unknown host message, is restart Cisco Tomcat after it's uploaded.

[eemge]

The domain name is not set. I suppose that is required?

[michael-luo]

"Created and uploaded Cert to tomcat-trusts"?

What steps you took to create the cert?

Michael

[eemge]

I asked the AD guys to create the cert and make sure CN=FQDN of GC. I could not find a procedure on exactly how to create the cert.

[michael-luo]

That's what I'm concerning.  Since you asked the AD guys to create the cert, obviously the cert was not created before.

If the cert does not exsit before, that means the AD guys didn't bother to enable SSL on LDAP.

If they didn't bother to do it, I was wondering if they know how to do it or have they done it already.    (create the cert and enable SSL are two different tasks).

Michael