Cisco Cisco Meeting Server 1000

Cisco Meeting Server Release 2.0 : Certificate Guidelines for Scalable and Resilient Deployments

Signature Algorithm: sha1WithRSAEncryption

Issuer: DC=com, DC=support, CN=support-DC2-CA
Validity

Not Before: Sep 13 13:32:38 2015 GMT
Not After : Sep 13 13:42:38 2017 GMT

Subject: CN=postgres

If you have CN set to anything other than postgres for the database client certificate you will see
the error message: “ERROR: Client certificate common name incorrect”

1. On the host server of every database (whether co-located with a Call Bridge or not):

a. SFTP the following certificates and keys to the host server:

dbcluster_server.key

dbcluster_server.crt

dbcluster_client.key

dbcluster_client.crt

and the certificate bundle provided by the internal CA. If you used the instructions in

Appendix A

then the file will be dbcluster_ca.crt

b. Specify the certificates that will be used when the database cluster is built. For example:

cms>

database cluster certs dbcluster_server.key dbcluster_

server.crt dbcluster_client.key dbcluster_client.crt dbcluster_
cert-bundle.crt

Certificates updated
cms> database cluster status
Status : Disabled
Interface : a
Certificates

Server Key             : dbcluster_server.key
Server Certificate     : dbcluster_server.crt
Client Key             : dbcluster_client.key
Client Certificate     : dbcluster_client.crt
CA Certificate         : dbcluster_cert-bundle.crt

2. For every Call Bridge not co-located with a database:

a. SFTP the following certificate and keys to the Call Bridge server:

dbcluster_client.key

dbcluster_client.crt

and the certificate bundle provided by the internal CA. If you used the instructions in

Appendix A

then the file will be dbcluster_ca.crt

4 Installing signed certificates and private keys on the Meeting Server