Cisco Acano X-series

Cisco Meeting Server Release 2.0 : Certificate Guidelines for Single Combined Deployments

If there is a problem with the certificate bundle, an error message similar to the following is
displayed:

SUCCESS: Domain configured
SUCCESS: Key and certificate pair match
FAILURE: certificate verification error: depth=x issuer= x = xx, ST =
xxxxxxx, L = xxxxxx, O = xxxxx, OU = xxxxxx, CN = xxxxxxxxx,
emailAddress = xxxxxxxx@xxxxx.xxx Verification error: unable to get
issuer certificate Failed cert:
Certificate:

Data:
Version: xx
Serial Number: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=x, ST= xxxxxxx, L= xxxxxx, O= xxxxx, OU= xxxxxx, CN=

xxxxxxxxx, emailAddress = xxxxxxxx@xxxxx.xxx

Validity

Not Before: <month><time><year>
Not After: <month><time><year>

Subject: C=xx, O=xxxxx, OU=xxxxxxxxxxx, CN=xxxxxxxxxxxxx
Subject Public Key Info:

Public Key Algorithm: rsaEncryption

Public-Key: (2048 bit)

SUCCESS: license file present
FAILURE: XMPP server configuration not complete

Check the certificate bundle to ensure that there is no break in the certificate chain.

Note: Remember you will also need to install the XMPP license key file (license.dat) on the
Meeting Server. Follow the instructions in the Single Combined Server Deployment Guide.

4.5 Installing the Certificate and Private Key for the Web Bridges

If your Meeting Server supports end users using the WebRTC App then you need to install a
public CA signed certificate for the Web Bridges. The certificate will be used by browsers when
determining whether to trust the connection with the Web Bridge.

The steps below assume that you have already configured the DNS record and the network
interface that the Web Bridge will use to listen. Refer to the Single Combined Server Deployment
Guide for information on setting the interface using the listen MMP command before
assigning the certificates.

For each Web Bridge:

1. SSH into the MMP

2. Disable the Web Bridge interface before assigning the certificate

webbridge disable

3. Assign the private key/certificate pairs using the command:

webbridge certs <keyfile> <certificatefile> [<cert-bundle>]

4 Installing signed certificates and private keys on the Meeting Server