How do I enable HTTPS Support for Configuration Download in CUCM 11.x?

[Nadav]

Hi everyone,

I can't find where to enable this option, and I've used wireshark to ensure that it isn't enabled by default.

Any ideas?

[Aman Soi]

Hi,

I suppose u are referring to firmware download/sw upgrade  through http in which port 6970 is used.

It is enabled by default and there is not setting for configuring. You can do packet capture  from phone by enabling span to pc port and check for port  6970.

regds,

aman

[Nadav]

Hi Aman,

I'm referring to the new feature in CUCM 11.x which allows downloading via HTTPs rather than HTTP.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/11_0_1/CUCM_BK_R30921A8_00_CUCM_release-notes_1101/CUCM_BK_R30921A8_00_CUCM_release-notes_1101_chapter_0110.pdf

We're using Mixed Mode with LSCs. 

Performing a wireshark capture shows that HTTP is used and not HTTPs, so it may be something that needs to be configured. 

[Aman Soi]

Not aware if any such setting is there for HTTPs.

regds,

aman

[Nadav]

The feature appears in the security guide and the release notes, but it's not clear how to enable it. I've tried regenerating callmanager and CAPF, then restarting their services. This is after migrating to 11.x. Nothing changed. 

[Nadav]

Note: This is after migrating from 8.6.2 to 11 so that the LSCs and CAPF are migrated from 8.6. Could this have an impact?