MX300 Register to CUCM Through MRA

[achilles1417]

Hi All,

I know that MX300, DX series and 78XX, 88XX can register to CUCM from external network through MRA.

But is it need the public certification for expressway E?

How about the expressway E and C as well as CUCM are using office internal cert server?

Thanks all

[Patrick Sparkman]

Certificate on the Expressway-E must be signed by a public CA.

Refer to the "Server Certificate Requirements for Unified Communications" section in the MRA via Expressway Deployment Guide (X8.7) starting on pg 14, as well as the Expressway Certificate Creation and Use Deployment Guide (X8.7). 

[Oleksandr Yurchenko]

Hi,

The Expressway certificate for DX (78XX, 88XX)  must be signed by a public Certificate Authority that is trusted by the DX Series firmware.

List of trusted CA here: http://www.cisco.com/c/en/us/support/collaboration-endpoints/desktop-collaboration-experience-dx600-series/products-technical-reference-list.html

You can not use any Public CA. Only from list.

P.S. its only for DX(78xx,88xx). For EX, MX,SX you can use any Public CA and self-signed also can be used.

br Oleksandr