CallManager Certificate signed by external CA

This section describes how to create a CallManager certificate signed by a external CA.

It is a similar process as described in CAPF Certificate signed by external CA.

Note: these operations must be done on the CuCM subscribers and publisher.

Requirement: CuCM in mixed mode

1.Navigate to ‘Cisco Unified OS Administration’

2.Log into the CuCM

3.Go to ‘Security’ and click on the button ‘Generate CSR’

4.Change the Certificate Purpose to CallManager and press the button ‘Generate

5.Submit it to the external CA and  download the generated certificate (CallManager.pem)

6. Upload the CA certificate and all Subordinate/Intermediate CA Certificates as CallManager-trust

Example: sfbtest-DCAD-SFB-CA.pem

7.Upload the generated certificate (CallManager.pem) in step 5 as CallManager