Creating SIP TLS trunk between CUCM and VCS Using CA-signed-certificate

[Zawlatt123]

I am having a problem where SIP TLS negotiation is failing for the trunk between CUCM 9 and VCS 7.2. Following are the steps followed from the Cisco TLS trunk creation guide.

- CSR generated from VCS and uploaded it to the Microsoft Certificate Sever.

- then upload the certificate and CA certificate to the VCS

- then download the sever certificate from the VCS and upload it to the CUCM

However, the TLS negotiation is failing and in the CUCM log, it's complaining an error message "unsupported certificate type for purpose"

anybody has experienced this issue?

Note: if self-signed certificate is used, tls trunk is established.

[Alok Jaiswal]

Hi Zlatt,

Does the CUCM has the root CA installed on it as well ? if not, can you try to do that.

Rgds,

Alok