Install SSL Certificate - CUCM

[gpsriramdc]

Hi All,

Am trying to install the SSL certificate on CUCM 8.6 to avoid the Web Security error while logging to UCM Admin & User page.

With the reference of below link we sent the CSR to CA get the Certificate.

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_configuration_example09186a0080b43504.shtml

We able to upload the certifcate in "tomcat-trust-store" . Unable to upload the certificate in the tomcat getting the error as " CA is not available in trust store".

In Cisco documnet seeing the "Root Certificate" option but i couldn't see in my CUCM in the upload certifcate page.

Thanks in Advance

[Chris Deren]

Did you upload the root cert first as tomcat-root and then link the signed cert to the root and you upload this as tomcat only.

HTH,

Chris

[Joseph Martini]

See if this guide helps: https://supportforums.cisco.com/docs/DOC-6119

There are some minor differences between the version this was based on and your version, such as the root certificate field is now gone on CUCM 8.x.

[Aaron Harrison]

Hi

There used to be an option to specify the root cert when you uploaded any cert, and you'd leave it blank if you were uploading a root cert. I think it disappeared, so don't worry about that - just ensure you have uploaded the root/intermediate certs first as directed by Chris...

Aaron

[dan.letkeman]

I just went through this as well.  My steps were:

Generate the CSR

Send the CSR to your CA (Make sure you don't corupt the CSR when transfering or copying and pasting it)

Upload the root certificate to the tomcat-trust store

Upload your intermediate certificate (if you have) to the tomcat-trust store

Upload your signed certificate to the tomcat store. (Common name must match exactly to the output of "show web-security" from the CLI

Restart Tomcat Service

Repeat on all other servers

[ernesthenderson]

1. Where and how do I retrieve the root cert.
2. How do i install it 

I need the procedure. 

Thanks,

[Jaime Valencia]

The root CA is provided by whoever is signing your certificates, and that might change, ask them how to get it.

https://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-communications-manager-callmanager/115957-high-level-view-ca-00.html

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/210541-CUCM-Certificate-Management-and-Change-N.html