Cisco Cisco Unified MeetingPlace Audio Server Quick Setup Guide

In this task, you create a certificate signing request (CSR) that you then send to an authorized certificate 
authority (CA) to apply for a digital identity certificate. The system also creates and stores a private key 
file and password specifically for that certificate. When you later upload the certificate file, the system 
binds the certificate file with the system-generated private key file and password to enable SSL.

If you created your own certificate and private key, then do not perform this task. Proceed to the 

SSL must be disabled to generate CSRs.

The CSR and resulting certificate use the Application Server hostname that you entered for Ethernet 
Port 1 (device eth0) during the operating system installation.

If you change this hostname, then you must obtain new certificates. 

For information about installing the operating system, see the Installation, Upgrade, and Migration 
Guide for Cisco Unified MeetingPlace at 

.

Self-signed certificates can be used for the application server.

Make sure that you request a file in one of the following formats:

Private keys: PKCS #1, PKCS #8 (PEM or DER encoding), Java keystore

Certificates: X.509 (PEM or DER encoding), Java keystore

If you already installed a valid SSL certificate, then generating a new CSR will make the existing 
certificate invalid. Proceed only if you are installing the certificate for the first time, if you are replacing 
an expired or invalid certificate, or if you change the hostname of your Application Server.

Log in to the Administration Center.

Select Certificate Management > Generate CSRs.

Enter values in the fields on the 

. 

Some CAs do not recognize two-letter state abbreviations, so enter the full name of the state. 
Also, if you want to use any special (non-alphanumeric) characters, ask your CA for character 
restrictions.

Select Generate CSR only once.

Select OK.

Select Download CSR.