Cisco Cisco TelePresence Video Communication Server Expressway
To configure the
Default DNS server
addresses:
1. Go to
System > DNS
.
2. Configure the DNS server Address fields as follows:
Address 1
Enter 10.0.0.11
Address 2
Enter 10.0.0.12
3. Click Save.
Task 4: Replacing the default server certificate
For extra security, you may want to have the VCS communicate with other systems (such as LDAP servers,
neighbor VCSs, or clients such as SIP endpoints and web browsers) using TLS encryption.
neighbor VCSs, or clients such as SIP endpoints and web browsers) using TLS encryption.
For this to work successfully in a connection between a client and server:
n
The server must have a certificate installed that verifies its identity. This certificate must be signed by a
Certificate Authority (CA).
Certificate Authority (CA).
n
The client must trust the CA that signed the certificate used by the server.
The VCS allows you to install appropriate files so that it can act as either a client or a server in connections
using TLS. The VCS can also authenticate client connections (typically from a web browser) over HTTPS.
You can also upload certificate revocation lists (CRLs) for the CAs used to verify LDAP server and HTTPS
client certificates.
using TLS. The VCS can also authenticate client connections (typically from a web browser) over HTTPS.
You can also upload certificate revocation lists (CRLs) for the CAs used to verify LDAP server and HTTPS
client certificates.
The VCS can generate server certificate signing requests (CSRs). This removes the need to use an external
mechanism to generate and obtain certificate requests.
mechanism to generate and obtain certificate requests.
For secure communications (HTTPS and SIP/TLS) we recommend that you replace the VCS default
certificate with a certificate generated by a trusted certificate authority.
certificate with a certificate generated by a trusted certificate authority.
Cisco VCS Basic Configuration (Single VCS Control) Deployment Guide
Page 8 of 30
VCS system configuration