Can you generate a 2048-bit RSA CSR in CM 7.1

[sjones@techsgi.com]

Hello everyone--i've got a customer that wants to install third party certificates for the web admin portions of communications manager, unity connection, CER, etc.  Their CA is Entrust, which only does 2048 bit RSA signed CSRs.  Is it possible to generate a CSR for the UC stuff with a 2048 bit key, either natively or via OpenSSL (similar to the process for a WLC...)?  I've googled the hell out of it and am striking out.  Any help is appreciated.

[tcarswel]

Scott,

No, for CUCM 7.1 only 1024-bit CSRs are supported.  With release 8.0.3 of CUCM, you can generate a Tomcat CSR that is 2048-bits.  Here's a post that provides step-by-step instructions:

https://supportforums.cisco.com/docs/DOC-6119

Regards,

--Todd Carswell

[sjones@techsgi.com]

Great!  That's what i wanted to find out.  Thanks.

Scott J.