UC public Certificate Type from digiCert

 

 

for UC applications certificate generation, CUCM, CIMP, CUC, Jabber Guest, and Expressways:

 

 

All UC Application use a SAN certificate type which is one certificate can hold more than one name, typically used for the cluster, the correct solution is :

- ordering 1 SAN Certificate per application cluster, and include servers names (domains) within the cluster in this Certificate.

- for Jabber Guest it should be local Certificate cause the Jabber Guest is using the certificate with it is private IP address, which is not applicable to generate it through public certificate agent.

 

 

1- the secure cost effective solution as:

- Generate a 1 SAN Certificate and include the names of the UC Application: CUCM, CUC, CIMP.

- Generate a 1 SAN Certificate for Expressways cluster, you can generate for Both Expressways for MRA and Jabber Guest.

- Generate  a private certificate for Jabber Guest.

 

 

add the root certificate of the private server to the Expressway's C&E that configured for Jabber Guest.

 

 

 

 

2- The not secure cost effective solution:

- Generate a 1 SAN Certificate and include all applications names except Jabber Guest.

- Generate  a private certificate for Jabber Guest.

 

 

 

 

add the root certificate of the private server to the Expressway's C&E that configured for Jabber Guest.