Cisco Cisco TelePresence MCU 4510 Installation Guide
3. On the Unified CM trunk setting to the MCU check SRTP Allowed, use Destination port as 5061 to the
MCU and choose the vcs-interop Normalization script.
4. If using TLS verify on the MCU, the Unified CM certificate must be trusted by the MCU, so the Unified CM
certificate or the CA of the Unified CM certificate (if signed) must be added to the MCU trust store. Other
MCU requirements are documented in the MCU help 'Configuring SSL certificates'.
MCU requirements are documented in the MCU help 'Configuring SSL certificates'.
Setting up a Secure Conference Bridge for Ad Hoc (Unified CM 9.x)
1. Unified CM must trust the MCU certificate, so the MCU certificate or the CA of the MCU certificate (if
signed) must be added to the Call Manager trust store.
2. The SIP Trunk Security Profile on Unified CM for the trunk to the MCU must have the common name of
the MCU certificate in the X.509 Subject Name on the
System > Security
page.
3. On the Conference bridge configuration in Unified CM, use MCU Conference Bridge SIP Port as 5061,
check SRTP Allowed and set the Normalization script to vcs-interop.
4. If using TLS verify on the MCU, the Unified CM certificate must be trusted by the MCU, so the Unified CM
certificate or the CA of the Unified CM certificate (if signed) must be added to the MCU trust store. Other
MCU requirements are documented in the MCU help 'Configuring SSL certificates'.
MCU requirements are documented in the MCU help 'Configuring SSL certificates'.
If using HTTPS there are additional certificate requirements: MCU certificate must use its IP address as
the common name or store the IP address as type IP in the Subject alternate name.
the common name or store the IP address as type IP in the Subject alternate name.
Cisco TelePresence MCU Deployment Guide 4.4
Page 52 of 53
Appendix 1: Additional information