Integration Problem Between VCS-OCS (Via TLS)

[MehmetKaya]

Ve have faced problem during integrate Ocs(2007 R2) and VCS( release x.6). When want to comminicate via tcp 5060 there is not any problem and integration works. ı thing problem is regarding TLS handshake.( WhireSharek print screen was attached)

vcs ip :10.10.120.50

ocs server:10.10.106.12

we have configured vcs  and ocs correctly. But stil we can not integrate ( figure1)

We have installed  " trusted CA certificate" (OK).

Vcs want to private key( not pin protected) but windos Admin can not create private key(no pin protected). When we try to add private key(pin protected) faced problem.(figure 2).

How can we solve this problem?.Need your help.

[awinter2]

Hi Mehmet,

please refer to the 'Cisco TelePresence Video Communication Server Certificate Creation and Use Deployment Guide ' for detailed instructions on how to create and deploy a VCS certificate using the certificate wizard in OCS 2007, this guide should point you in the right direction.

If you run into any issues while following the guide, feel free to update this thread with any questions you might have.

Regards

Andreas

[MehmetKaya]

I had read all the decument and did step by step on Vcs and Ocs admin did as well. But we stil can not integrate this devices.

Microsoft side said that they can not create the private ke y(without pin protected) and Vcs accept private key ( without pin protected).  We just didnt do this issue.

How can we create private key and server key. Because microsoft side said that they can not create.

Or maybe problem is regarding another side?

[awinter2]

Hi Mehmet,

when following the OCS certificate wizard, you have to choose to export the private key. This will be included in the exported .pfx file. You will then have to convert the .pfx file to .pem format and split the .pem into three parts (CA certificate, server certificate and (encrypted) private key), and finally decrypt the private key before you install it on the VCS along with the CA and the server certificate.

The instructions and relevant commands for doing all of the above can be found in the deployment guide which I linked to in my initial reply.

Hope this helps,

Andreas