Cisco Cisco TelePresence Video Communication Server Expressway
■
IM and Presence Service chat node aliases (federated group chat): The Chat Node Aliases (e.g.
chatroom1.example.com) that are configured on the IM and Presence Service servers. These are required only
for Unified Communications XMPP federation deployments that intend to support group chat over TLS with
federated contacts.
chatroom1.example.com) that are configured on the IM and Presence Service servers. These are required only
for Unified Communications XMPP federation deployments that intend to support group chat over TLS with
federated contacts.
The VCS Control automatically includes the chat node aliases in the CSR, providing it has discovered a set of
IM and Presence Service servers.
IM and Presence Service servers.
We recommend that you use DNS format for the chat node aliases when generating the CSR. You must
include the same chat node aliases in the VCS Expresswayserver certificate's alternative names.
include the same chat node aliases in the VCS Expresswayserver certificate's alternative names.
Entering subject alternative names for security profiles and chat node aliases on the VCS Control's
CSR generator
CSR generator
VCS Expressway Server Certificate Requirements
The VCS Expressway server certificate needs to include the following elements in its list of subject alternate names:
■
Unified Communications Manager registrations domains: All of the domains which are configured on the
VCS Control for Unified CM registrations. They are required for secure communications between endpoint
devices and VCS Expressway.
VCS Control for Unified CM registrations. They are required for secure communications between endpoint
devices and VCS Expressway.
You must select the DNS format and manually specify the required FQDNs, separated by commas if you need
multiple domains. The SRVName format may not be supported by your chosen CA.
multiple domains. The SRVName format may not be supported by your chosen CA.
You must also prefix each with
collab-edge.
(see example in following screenshot).
Note:
The above setting only applies if using Mobile and Remote Access (MRA) for voice and video calls. For
more information, see the Mobile and Remote Access via Cisco VCS Deployment Guide available at
.
■
XMPP federation domains: The domains used for point-to-point XMPP federation. These are configured on
the IM and Presence Service servers and should also be configured on the VCS Control as domains for XMPP
federation.
the IM and Presence Service servers and should also be configured on the VCS Control as domains for XMPP
federation.
We recommend that you select the DNS format and manually specify the required FQDNs, separated by
commas if you need multiple domains. The XMPPAddress format may not be supported by your chosen CA.
commas if you need multiple domains. The XMPPAddress format may not be supported by your chosen CA.
■
IM and Presence Service chat node aliases (federated group chat): The same set of Chat Node Aliases as
entered on the VCS Control's certificate. They are only required for voice and presence deployments which
will support group chat over TLS with federated contacts.
entered on the VCS Control's certificate. They are only required for voice and presence deployments which
will support group chat over TLS with federated contacts.
We recommend that you select the DNS format and manually specify the required FQDNs, separated by
commas if you need multiple domains. The XMPPAddress format may not be supported by your chosen CA.
commas if you need multiple domains. The XMPPAddress format may not be supported by your chosen CA.
Note that the list of required aliases can be viewed (and copy-pasted) from the equivalent Generate CSR
page on the VCS Control.
page on the VCS Control.
9
Cisco Unified Communications XMPP Federation Deployment Guide