Cisco Cisco Meeting Server 1000
Cisco Meeting Server Release 2.0 : Certificate Guidelines for Scalable and Resilient Deployments
43
d. Generate the CA signed certificate for the database client. For example:
openssl x509 -req -CAcreateserial -in dbcluster_client.csr -CA
dbcluster_ca.crt -CAkey dbcluster_ca.key -out dbcluster_
client.crt -days 3650
dbcluster_ca.crt -CAkey dbcluster_ca.key -out dbcluster_
client.crt -days 3650
creates the certificate dbcluster_client.crt
3. Follow the steps in
to upload and assign the database certificates and private
keys .
a. Each server hosting a databasethe following keys and certificates to be uploaded:
o
database cluster server certificate (generated in step 2)
o
database cluster server key (generated in step 2)
o
database cluster client certificate (generated in step 2)
o
database cluster client key (generated in step 2)
o
database cluster CA certificate bundle (generated in step 1)
b. Each Call Bridge NOT co-located with a database, requires the following keys and
certificates to be uploaded:
o
database cluster client certificate (generated in step 2)
o
database cluster client key (generated in step 2)
o
database cluster CA certificate bundle (generated in step 1)
A.4 Installing Certificate and Private Key Pairs
For details on installing the certificate and private key pairs on the Meeting Server, follow the
instructions in
instructions in
Appendix A OpenSSL Commands for Generating Certificates