Question: Function of IM&P certificates (cup, cup-xmpp)

[tschafferx]

Hello cisco community,

I have a question regarding the functionof the IM&P certificates. Respectively the cup, cump-xmpp certificates. Could someone explain the use of these certificates.

Thank you.

[Chris Deren · Accepted solution]

See table 2 here https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/configAdminGuide/10_5_1/CUP0_BK_CE43108E_00_config-admin-guide-imp-105/CUP0_BK_CE43108E_00_config-admin-guide-imp-105_chapter_01010.html

[tschafferx]

Thanks Chris. I read over that. Do you happen to know the function of the CUP and CUP-trust as of the reason that the information are missing. Moreover the ipsec notes only mention that it's being used if a ipsec policy has been set up. Doesn't it also affect the DRS mechanism?

Thank you.

[Anthony Holloway]

That is a good question, and one that is poorly answered in documentation. From my own research, it looks like the CUP and CUP Trust are used only for Microsoft Integrations, and possibly Inter-cluster Peering. For most deployments, you wouldn't need to be concerned with them. I can confirm, quite embarrassingly, that my CUP cert is actually a few months expired, and yet, nothing stopped working; no warnings, nor errors in the clients or MRA.

[tschafferx]

Thank you for the input Anthony!
IPsec is also used for DRF in the IM&P environment correct?

[Anthony Holloway]

Yes, that is my understanding too.