Cisco Cisco Customer Voice Portal Downloads
keytool -keystore .keystore -storetype JCEKS -import -alias root
-trustcacerts -file <filename_of_intermediate_CA_certs>
b.
Enter the following command to install the root certificates (these are not in the Unified
CVP keystore by default):
CVP keystore by default):
keytool -keystore .keystore -storetype JCEKS -import -alias root
-trustcacerts -file <filename_of_root_cert>
Note: Be careful to examine the contents of any root certificate file before installing it to your
keystore as a trusted certificate.
keystore as a trusted certificate.
The Java root certificates are installed in %CVP_HOME%\jre\lib\security\cacerts.
c.
Enter the following command to install the CA Signed Certificate:
keytool -keystore .keystore -storetype JCEKS -import -alias
orm_certificate -trustcacerts -file
<filename_of_your_signed_cert_from_CA>
Step 5
Repeat these steps on every machine running Unified CVP Services.
How to Add a Certificate Signed by a Certificate Authority for HTTPS Web Access
Follow the steps below to present a CA-signed certificate to inbound Operations Console HTTPS
clients.
clients.
Note: The OAMP and ORM certificates provided in the keystore do not provide TLS encryption
for inbound HTTPS traffic; those certificates provide secure connections between the Operations
Console and the CVP Resource Manager on other devices in your Unified CVP solution.
for inbound HTTPS traffic; those certificates provide secure connections between the Operations
Console and the CVP Resource Manager on other devices in your Unified CVP solution.
The certificate and private key used for Operations Console HTTPS are:
•
Self-signed certificate:
%CVP_HOME%\conf\security\oamp.crt
•
Private key for self-signed certificate:
%CVP_HOME%\conf\security\oamp.key
Step 1
Access the OpenSSL command line.
Note: You must first install OpenSSL (http://www.openssl.org), as it is not included with Unified
CVP. Refer to the OpenSSL documentation for details.
CVP. Refer to the OpenSSL documentation for details.
Step 2
Generate a Certificate Signing Request (CSR) by entering the following command:
openssl req -new -key xxxx.key -out xxxx.csr
Where xxxx represents the key and the certificate files.
Configuration and Administration Guide for Cisco Unified Customer Voice Portal Release 4.1(1)
249
Chapter 6: Configuring and Modifying Unified CVP Security
Securing Communications Between Unified CVP Components