CUCM Certificates with Exchange servers

[navingolani]

Hi,

Does any one know how to add certificates in CUCM 6.1?

Requirement: I need to add the secured SIP trunk between CUCM & Exchange server. If not wrong CUCM need to trust Exchange server so we need to add certificates to the CUCM

Regds,

Navin Golani

[David Hailey · Accepted solution]

You add certs using the CM Platform, aka OS Administration web GUI.  Once logged in, it's Security > Certificate Management > Upload Certificate.

Hailey

Please rate helpful posts!

[navingolani]

Thanks for the reply

I need to know is there any specific certificate need to be upload for creating the SIP trunk between CUCM & EXchange Server.

In my client CUCM server, i see couple of Certificates already uploaded  like CAPF Trust, callManager trust,ipsec & tomcat with particulay in ".PEM file " & " DER file"  . So which certificate i should be using for SIP trunk between CUCM & Exchange server. Where can i get it downloaded from?

[David Hailey · Accepted solution]

The certificates you see uploaded are created during CUCM installation. They are the various self-signed certs for the components of the CUCM sub-systems. On the Exchange side, I believe you would need the root CA certificate which can be either self-signed (customer has their own CA) or from a 3rd-party.

Hailey

Please rate helpful posts!

[navingolani · Accepted solution]

Do i need to upload CTL along with CA root certificate?

I referred to Security guide for OS admin guide, in it theyhave mentioned to upload Certificate , upload CTL & Upload Directory Trust Cert.

So do i need to do upload "Directory Trust " & CTL  ?

Also, in this document  says to download CTL from OS Admin > security > Certificate managemnet

But i believe we can download it from Plugin ?

IN CUCM 6.1, i do not see options for upoloading CTL or Directory trust. Only i found option for Upload Certificate, so how come its mentioned in document ?