Greetings - I'm involved in administering a CUCM 12.5 implementation which is in the (slow) roll-out phase. The Publisher and a Subscriber have been installed at this point.
We are going to use an existing Microsoft CA rather than the self-signed certs. I've been pouring over documentation but haven't been able to attain a clear sense of what I need to do to use Microsoft CA certs in place of the self-signed. As further info, the Microsoft CA is an offline root and one intermediate.
Coming from a Microsoft environment I'm used to the placing root CA certs in the Trusted Root Certification Authorities store and intermediate CA certs in the Intermediate Certification Authorities store. How/where do I add the Microsoft root and intermediate CA certs to CUCM 12.5
As one example of my continued confusion, "The Security Guide for Cisco Unified Communications Manager, Release 12.5(1)" reads, in the "Install Intermediate Certificates" section "To install an intermediate certificate, you must install a root certificate first and then upload the signed certificate" and in the same section the process includes two different steps that say, "Choose intelligenceCenter-srvr-trust from the Certificate Purpose drop-down list to install the root certificate", but I don't have any "intelligenceCenter-srvr-trust" listed in my intelligenceCenter-srvr-trust in my drop-down list?
Is there any clear/definitive documentation as to necessary steps/configuration to use a Microsoft CA with CUCM 12.5?
Also at System -> Security -> Certificate in CUCM Administration, there are 15 different certs with various "selected Roles" and "selected services" that have been as part of the installation. As I'd need to do CSRs for Microsoft CA certs to replace these self-signed certs is there any definitive source as to what certificates are needed?
Thanks
