Thank you for the update, Matthias. I am glad you were able to extract the information from the PFX successfully, and thanks for sharing the steps. I am glad to hear you were able to resolve this issue and upload the SSL certs to CWMS. -Dejan ... View more

Hi Matthias,  Do you know if you used any passphrase when creating CSR on ASR? I am not familiar with the process of CSR creation on ASR.  Also, the private key should be in pem format and decrypted before even being placed to this cert bundle for upload to CWMS.  I hope this helps. -Dejan ... View more

Hi Matthias, For the bundle you created where you got an error "t he certificates do not form a valid certificate chain", can you try to swap intermediate SSL certs order 1. Private Key 2. COMODO RSA Certification Authority Intermediate Certificate 3. COMODO RSA Domain Validation Secure Server CA Intermediate Certificate 4. PositiveSSL Wildcard Certificate for *.ourdomain and try it that way? -Dejan ... View more

Is there a way to export private key from ASA to a PEM file and then download Intermediate and Wildcard SSL cert from Certification Authority directly? -Dejan ... View more

Hi Matthias, I've seen this kind of issues with PKCS12 files.  Can you try to convert this file into PEM file (maybe use something like this: https://www.sslshopper.com/ssl-converter.html) Once you have the PEM file, then use the content of that file to create a new file and bundle Private Key, Intermediate SSL certs and Wildcard SSL cert into a single file. To do this, open your converted PEM file in Notepad. Also, open a new file in Notepad. To a new file, first copy the PRIVATE KEY content to the top of the file: ----BEGIN RSA PRIVATE KEY---- fdgsdfgdhgfhd ----END RSA PRIVATE KEY--- Then, right below it, copy the Primary Intermediate SSL cert ----BEGIN SSL CERTIFICATE---- primaryfgdgfddghfgh ----END SSL CERTIFICATE----- Below it, copy the Secondary Intermediate SSL cert ----BEGIN SSL CERTIFICATE---- secondaryjhghghhghghg ----END SSL CERTIFICATE----- And finally, at the bottom of the file, copy Wildcard SSL cert content: ----BEGIN SSL CERTIFICATE---- wildcardcbcbcbbcbcbcb ----END SSL CERTIFICATE----- When you are finished copying this to a new file, your new file should look like this: ----BEGIN RSA PRIVATE KEY---- fdgsdfgdhgfhd ----END RSA PRIVATE KEY--- ----BEGIN SSL CERTIFICATE---- primarygdgfddghfgh ----END SSL CERTIFICATE----- ----BEGIN SSL CERTIFICATE---- secondaryhghghhghghg ----END SSL CERTIFICATE----- ----BEGIN SSL CERTIFICATE---- wildcardcbcbcbbcbcbcb ----END SSL CERTIFICATE----- Save this new bundle file as .cer file and upload it to CWMS. Let me know if this helps. -Dejan ... View more

Hi Shibin, Apache/Tomcat should be the platform. -Dejan ... View more

Hi Shibin, Normally, CAs do have Intermediate SSL certs required. I would suggest reaching out to CA and confirming with them if they have corresponding Intermediate SSL certs for you to download. You can upload just the server SSL cert to CWMS without issues, but any client that doesn't have intermediate SSL cert in their trust store won't be able to access the site or join meetings without getting a Certificate Validation Error. Hence, I would strongly recommend you include intermediate SSL cert(s) into the cert bundle being uploaded to CWMS. -Dejan  ... View more

Hi, Let me move this post to Telepresence community. This community is for Cisco WebEx Meetings Server and Cisco Unified MeetingPlace products and is not observed by TP experts.  I hope this will get you the answers you need faster. Kind regards, -Dejan ... View more

Hi Emine, If end users have admin rights on their machines, the first time they connect to a meeting on a new server version, the Meeting client will be automatically updated. If the end users don't have admin rights on their machines, the Meeiting clients must be pushed to them: http://www.cisco.com/c/en/us/td/docs/collaboration/CWMS/2_7/Planning_Guide/cwms_b_cwms-planning-system-requirements-2-7/cwms_b_cwms-planning-system-requirements-2-7_chapter_0110.html#task_AE384DCEBB584687B7137C2E54C97F35 With Productivity Tools client, if  end users have admin rights on their machines and you configured CWMS > Settings > Downloads to "Auto update WebEx Productivity Tools", the end user will be asked to click on Update button the next time they log in to PT. If the end users don't have admin rights on their machines, the PT client must be pushed to them (however, PT must be first uninstalled before new version installed; still that can also be automated):http://www.cisco.com/c/en/us/td/docs/collaboration/CWMS/2_7/Planning_Guide/cwms_b_cwms-planning-system-requirements-2-7/cwms_b_cwms-planning-system-requirements-2-7_chapter_0110.html#concept_E606F1A2F82B47AB8E43959458B325C2   I hope this helps. -Dejan ... View more

Thank you for the kind words. I am glad this was of help. -Dejan ... View more

Hi, If the SSL cert is valid on 2.0 version, it will be just fine on after the update to 2.6. However, once the SSL cert expires, you will have to create a new CSR on CWMS, obtain the new SSL cert and then bundle it in the required order and upload to the system. I hope this answers your question. -Dejan ... View more