Expressway SSL Certs

[san.carlos]

Seeking guidance regarding expressway ssl certs. Can single domain ssl certs meet the requirements for expressway (MRA) setup when (1) internal and external domain are the same and (2) secured profiles are not in use?

Thanks for your guidance and expertise.

[david467 · Accepted solution]

Hi san.carlos,

For an Expressway (MRA) setup, a single-domain SSL certificate can work if your internal and external domains are the same and you’re not using secured profiles. Just make sure the certificate’s common name matches the domain you’re using for the Expressway.

However, if you ever plan to support multiple domains or secured profiles in the future, a SAN or wildcard certificate would give you more flexibility.

In short, for your current setup, a single-domain cert should be fine.

[Nithin Eluvathingal]

You need a SAN certificate for Expressway E, with Unified CM Registration Domains in the SAN field for MRA to function. If you are using SSL, you cannot have SAN entries, if I'm not mistaken.

Which means you must mention the domain name. For example, if your domain is xyx.com, this must be included in the SAN field.