CUCM - externally generated private key

[Peter Fiers]

Hi,

in CUCM, is it possible to import an externally generated private key and a corresponding digital certificate as it is e.g. in Expressway?

Thanks

Peter

[Gordon Ross · Accepted solution]

No, unfortunately.

GTG

PS - Can you delete your duplicate post.

[Peter Fiers]

Hi Gordon,

thanks for the information.

Regards

Peter

[Greg Cording]

not familiar with Expressway so might be off the mark here but if you are looking to upload a Certificate Authority (CA) root certificate and application certificate say for use by Phone Devices with CAPF to sign LSC X.509 this is detailed in "Cisco Unified Communications Operating System Administration Guide, Release 9.1(1)"

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/cucos/9_1_1/CUCM_BK_C5D96C80_00_cucm-os-admin-guide-91/CUCM_BK_C5D96C80_00_cucm-os-admin-guide-91_chapter_0110.html#CUCM_TK_U93D2E37_00

"Cisco Unified Communications Operating System supports certificates that a third-party CA issues with PKCS#10 Certificate Signing Request (CSR)."

Hope this helps.

Greg

[Peter Fiers]

Hi Greg,

thanks for the hint but the key point here is to generate the private key, the public key and the CSR external to the UCM and upload the first two ones (pub key as a CA signed certificate, of course) to the UCM. To generate the CSR in the UCM and sign it externally, is not an option in our case.

Thanks

Peter

[Jaime Valencia]

There's actually a bug for that, which confirms what Gordon told you.

Request for support of wildcard certificate in CUCM & private key import

CSCta14114