Expressway C Certs

[Nkechi Latunji]

Hi,

I previously had external Certs on my expressway and all was working fine, we changed our local CA and wanted to updated the certs on my UC apps. I have successfully done so for CUCM, IMP and CUC. When i tried expressway C I received the following error

Invalid certificate: The file provided does not have a client usage attribute. The certificate must be usable for both servers and clients for Unified Communications.

I successfully uploaded the root CA to the expressway, I signed the CSR with the CA using web server template but it's not uploading to the server. Can someone help

Thanks

[Jaime Valencia · Accepted solution]

Adjust your certificate template to have the Enhanced Key Usage of server and client authentication as the error says.

Web server ONLY has server authentication.

[Jefferson Islan Silva]

How have you fixed this issue?

[Jaime Valencia]

The error was what I mentioned, the certificate template was not properly configured with the right Enhanced Key Usage that was required.

[Jefferson Islan Silva]

This is not configured on Expressway side or on Microsoft CA Server side?

[Jaime Valencia]

On the CA, you probably want to read this before further questions

http://docwiki.cisco.com/wiki/Certificates_FAQ

[ravi.kumar1]

same error i faced while building a EXpressways lab and am using one of my windows server as CA.

this is the policy you need to add for client authentication

**** Please rate helpful posts *****

[SajithThrimavithana]

Thanks !