How to Install Renewed Certificate on Expressway Server

[WestlakeIT]

Hello, I'm needing to install either a renewed GoDaddy cert, or my boss suggested the wildcard cert, onto a Cisco Expressway-E server, but all the instructions I found talk about creating a CRS key and then getting the cert with the new CRS key.  I found a video where some guy just installed the renewed cert like it wasn't even a thing, just uploaded the single file and that was that.

I'm confused now.  I'm not a security tech, and I don't want to break it if I do it wrong.  Can I just upload the new GoDaddy cert?  If I install the wildcard cert instead what all do I need?

[opryluts]

Hi,

Seems the question is related to collaboration/voice product. Would be better to ask in https://community.cisco.com/t5/collaboration-voice-and-video/ct-p/4691-collaboration-voice-video

In general, you have 2 options for cert upload:

1. Upload it directly if you have both cert and private key for it

2. Generate a CSR on the box, sign it by CA (GoDaddy in your case) and upload the cert. In this case, the private key for the CSR/cert is already on the box.

Please vote if you find it helpful.

[WestlakeIT]

So the renewed cert from GoDaddy will work with the CSR already generated and in the box, I don't need to update it?

[opryluts]

I'm not sure how it works in Expressway Server... Would be better to ask in the thread I provided in the previous message.

[Richard Pidcock]

I have the same scenario.  I'm looking to replace the server certificate on my expressway edges.  The certificate has been renewed by Go Daddy, but I DID NOT generate a new CSR.  So my questions are this:

1.  Do I select "Re-use my current private key"
2.  Select the .PEM file for the renewed certificate.

Then upload?