Cisco Cisco Expressway
Task 10: Configure the TLS Peer Context
1.
In Cisco Unified CM IM and Presence Administration, go to System > Security > TLS Context Configuration.
2.
Click Find.
3.
Choose Default_Cisco_UPS_SIP_Proxy_Peer_Auth_TLS_Context.
4.
From the list of available TLS peer subjects, choose the TLS peer subjects that you configured for the
Expressways and Microsoft FE Servers.
Expressways and Microsoft FE Servers.
5.
Move the chosen entries over to the Selected TLS Peer Subjects.
6.
Click Save.
Task 11: Configure Microsoft Front End Server to Trust IM and Presence Service
Publishers
Publishers
You need to create a trusted application on FE server for each IM and Presence Service node.
1.
Create a trusted application pool with identity parameter equal to the IM and Presence Service node's FQDN.
2.
Assign a new trusted application to the pool. Give the application the trusted application’s FQDN (=the node's
FQDN) and its destination port (typically 5061).
FQDN) and its destination port (typically 5061).
3.
Check that the signing CA of the IM and Presence Service node's certificate is trusted by the Microsoft
FE servers.
FE servers.
4.
Repeat this task for every IM and Presence Service node (publishers and subscribers).
5.
Enable the topology.
Figure 12 Create Application Pool For IM and Presence Service Trusted Application
13
Cisco Collaboration with Microsoft Interoperability Infrastructure Configuration Cheatsheet
Configuration