Cisco Cisco Meeting Server 1000

Cisco

Cisco Meeting Server Release 2.0 : Certificate Guidelines for Single Split Deployments

2

Contents

1.1 How to use this guide

1.2 Brief overview of PKI

1.2.1 Public/private key pair

1.2.2 Certificates

1.2.3 Chain of Trust

1.2.4 Certificate bundles

1.2.5 Trust stores

2 Certificates required for the deployment

2.1 What is a single split server deployment?

2.1.1 Other components

2.2 Public or Internal CA signed certificates

3 Obtaining certificates

3.1 Generating a private key and Certificate Signing Request (.csr file)

3.1.1 CSR for the Web Bridge

3.1.2 CSR for the XMPP server

3.1.3 CSR for trunk/Load Balancer pair

3.1.4 CSR for the TURN server

3.2 Signing the CSR using a public Certificate Authority

3.3 Signing the CSR using an internal Certificate Authority

4 Installing signed certificates and private keys on the Meeting Server

4.1 Reusing a private key and certificate

4.2 Uploading the Private Keys and Certificates to the MMP

4.3 Inspecting a file type and checking that a certificate and private key match

4.4 Installing the Certificate and Private Key for the XMPP Servers

4.5 Installing the Certificate and Private Keys for the Core to Edge Trunks

4.6 Installing the Certificate and Private Key for the Web Bridges

4.7 Installing the Certificate and Private Key for the Call Bridge

4.7.1 Establishing Trust between the Call Bridge and the Web Bridge

4.8 Installing the Certificates and Private Keys for TURN Servers

4.9 TLS Certificate Verification

5 Troubleshooting problems with certificates

5.1 Warning message that service is untrusted