05-01-2017 02:37 AM - edited 03-19-2019 12:23 PM
Hello,
We have Expressway E&C. I want to add certificate both of them to make SIP trunk active. There is MS CA. Now sip trunk is inactive. Version is 8.6. I have read certification deployment guide but, could not undertsand some points well.
For example: what is Unified CM phone security profile names? Is it required? I could not find FQDN in CUCM>>System>>Security>>Phone Security Profile name to add. Guide shows DX80TLSprofile.example.com as an example.
Solved! Go to Solution.
05-03-2017 02:55 AM
When your CUCM is in mixed mode then Exp-C creates zone with TCP as well as TLS.
When you create DX device profile in CUCM you want to select a secure profile or non-secure ? if you choose secure you need SAN entry for that, if you choose non-secure then you don't need it.
Regards,
Alok
05-01-2017 02:55 AM
Hi,
Phone Security Profile is required to be created and added as SAN in the certificate when your cucm is in mixed mode and want to use end to end encryption.
If that's not the case do not worry about phone security profile. MRA calls are anyways encrypted externally.
Regards,
Alok
05-01-2017 03:21 AM
Yes, CUCM is in mixed mode. Still is it required?
05-03-2017 02:55 AM
When your CUCM is in mixed mode then Exp-C creates zone with TCP as well as TLS.
When you create DX device profile in CUCM you want to select a secure profile or non-secure ? if you choose secure you need SAN entry for that, if you choose non-secure then you don't need it.
Regards,
Alok
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide