Cisco CUCM & Expressway SSL Certs

[Ariel Gonzalez]

There was a post the other day in Reddit about cheap SSL certificates. Have any of you deployed these certs in a CUCM / Expressway cluster? Expressway certs are special in that they need to be both client and server certs at the same time, however the other ones (tomcat, xmpp, etc.) are just regular certs.

These are the Cisco Edge MRA built-in root certs, and I can see a Comodo in that list, but I don't know if its the same provider as the cheap certs above.

What certs have you used and know that work for Expressway MRA? Something that won't break the bank in smaller organizations.

Thanks!

[Nick Lichatz]

A good way to do this is use wildcard certs.  You use one cert for the entire domain instead of one per server. this will save you money and administration when certs expire.  I use a wildcard cert from godaddy and have it for everything external