Changing Expressway-E certificate

[HeribertoVV]

Hello,

We have a certificate signed by a private CA for our Expressway-E. Soon we are going to change to a public CA. I already generated a new CSR for the public CA. This is my question: Is there anything we should have in mind before changing the certificate? There will be any affectation to the users using MRA through Expressway? It will appear a certificate warning when they sign in to Jabber next time?

We have Expressway 8.6.

Thank you for all your answers.

[dpetrovi]

Hi Heriberto,

Let me move this post to Telepresence community as this community is for Cisco WebEx Meetings Server and Cisco Unified MeetingPlace products and not observed by Expressway experts.

I hope this will get you to the answer faster.

-Dejan

[bvanturn]

Make sure that the new certificate contains the correct attributes with regards to SAN requirements as listed in the "Mobile and Remote Access via Cisco Expressway Deployment Guide" for your version.

http://www.cisco.com/c/en/us/support/unified-communications/expressway-series/products-installation-and-configuration-guides-list.html

For the clients where you are connecting from, make sure that the public CA you chose is installed on that device as a root certificate. For example for iOS there is a list with their default CA's here:

https://support.apple.com/en-us/HT204132