I am having a problem where SIP TLS negotiation is failing for the trunk between CUCM 9 and VCS 7.2. Following are the steps followed from the Cisco TLS trunk creation guide.
- CSR generated from VCS and uploaded it to the Microsoft Certificate Sever.
- then upload the certificate and CA certificate to the VCS
- then download the sever certificate from the VCS and upload it to the CUCM
However, the TLS negotiation is failing and in the CUCM log, it's complaining an error message "unsupported certificate type for purpose"
anybody has experienced this issue?
Note: if self-signed certificate is used, tls trunk is established.
