Cisco Expressway-C and Cisco Collaboration Cloud

[lebayenkhang]

I'm deloying Cisco Spark for my company, But I'm currently stuck at step that connect Expressway-C to Cisco Collaboration Cloud.

I tried to add an Expressway-C (version x8.7) that already deployed for cisco jabber, here's my step:

- I logged in to Cisco Collaboration Cloud, Enable Hybrid Service, Add Resource and Enter IP address of Expressway-C.

- Added successful and I got forwarded to my Expressway-C's Connector Management page, I checked "I want Cisco to manage the Expressway CA certificates required for this trust." and click "Register"

- Then I got this error: "Failed: Could not register with the Cisco Collaboration Cloud because the certificate from https://hercules-a.wbx2.com/v1/machine_accounts was not validated against the trusted CA list. This list includes root CA certificates added by Cisco Cloud. Check the trusted CA certificates for the root CA that signed the received certificate"

I read about Cisco Collaboration Cloud CA trust, but it's list is too long and I can't get it.

If there're anything that I missed, please help!

[Jessica Lord]

Hi lebayenkhang,

This error may be occurring if your Expressway-C is unable to make an https connection to the Cisco Collaboration Cloud. 

The deployment guide (for hybrid services) covers the necessary ports in more detail, but in terms of the initial registration, pay particular attention to the following:

---------------------------------------------------------------------------

Complete the Expressway-C Connector Host Prerequisites for Cisco Spark Hybrid Services > 

Step 8  If you have not already done so, open required ports on your firewall.

- All traffic between Expressway-C and the Cisco Collaboration Cloud is HTTPS or secure web sockets.

- TCP port 443 must be open outbound from the Expressway-C to *.rackcdn.com, *.ciscospark.com, *.wbx2.com, *.webex.com, and *.clouddrive.com.

---------------------------------------------------------------------------

Also, if your on-premises environment proxies the outbound traffic, you must first enter the details of the proxy server on Applications > Hybrid Services> Connector Proxy before completing this registration. Doing so is necessary for successful registration.

I hope that helps!