Certificate Chains

The Certificate chains also referred as CA Hierarchy is described in the following schema:

• Subordinate/Intermediate CA certificate is issued by the CA

•HTTPS

The TSS Server certificate is signed (issued by) the Subordinate/Intermediate Certificate Authority.

Firstly, the TSS must upload manually the CA Certificate.

Then  it is able to upload manually the TSS Server Certificate.

•SIPS - Turret and  TPO

The TPO Server certificate is issued by the Subordinate/Intermediate CA.

TPO must upload TPO Server certificate manually

The turrets and TPO OVA download and install automatically CA Certificate and Subordinate/Intermediate CA certificates when connecting to the TSS on HTTPS.

•Proprietary Protocol -  TPO and CUCM CAPF service

The client certificate is issued by CAPF Server Certificate.

The configuration is the same as described in the CAPF Server Certificate is issued by CA.

But all Subordinate/Intermediate CA Certificates must also added to CAPF-trust (Step 6)

•SIPS -  TPO and CUCM CallManager service

The client certificate and the CallManager Server Certificate are used for the communication between TPO  to CuCM CallManager service.

The configuration is the same as described in the CallManager Server Certificate is issued by CA.

But all Subordinate/Intermediate CA Certificate must also added to CallManager-trust (Step 6)