SIP TLS on Cisco VCS X8.7.2

[Yannick Vranckx]

Hello,

I would like to roll out a certificate for SIP TLS between the end points and the VCS.

Can i just generate a certificate on the VCS and roll it out to the end points, or do i need to work via the microsoft CA?

If the CA is involved: I need to generate a CSR then? and have it signed by the Microsoft CA server ? Then put it back onto the Cisco VCS and distri it to the clients.

If i generate the certificate on the VCS it is self-signed via the VCS, will this work then? If there is no CA in between. Just to have SIP TLS between the endpoints and the VCS.

[Manish Gogna]

Hi Yannick,

The certificate generation options with VCS are listed here

http://www.cisco.com/en/US/docs/telepresence/infrastructure/vcs/config_guide/X8-1/Cisco-VCS-Certificate-Creation-and-Use-Deployment-Guide-X8-1.pdf

Manish

[Yannick Vranckx]

Hello,

Thanks for the answer, i am still unsure what to do with the PEM. The MX is requesting me to also upload a PEM file. Can i just use the PEM from the VCS?