Cisco Cisco Agent Desktop 8.5 安装指南
Setting Up CTI OS Security
August 8, 2012
99
■
SignCertificateSetupPackage.exe, which signs the client box’s certificate with
the certificate of authority
the certificate of authority
Signing Client CTI OS Security Certificates
Follow these steps to sign a CTI OS security certificate for a client box.
1. On the Certificate PC, run CreateSelfSignedCASetupPackage.exe, create a
CTIOS Certificate Authority password of between 8 and 30 characters when
prompted, and store the resulting files in a secure location.
prompted, and store the resulting files in a secure location.
2. Copy the CtiosClientKey.pem and CtiosClientReq.pem files from the CAD
client PC to C:\Program Files\Cisco Systems\CTIOS Client\Security on the
Certificate PC, where the CtiosRoot.pem and CtiosRootCert.pem files are
stored.
Certificate PC, where the CtiosRoot.pem and CtiosRootCert.pem files are
stored.
3. On the Certificate PC, run SignCertificateSetupPackage.exe in the same folder
where the copied *.pem files are located, select CTI OS Client Certificate
Request when prompted, and enter the CTI OS Certificate Authority password
you created in Step 1. The program generates a file called CtiosClient.pem if
successful, or displays an error message if not successful.
Request when prompted, and enter the CTI OS Certificate Authority password
you created in Step 1. The program generates a file called CtiosClient.pem if
successful, or displays an error message if not successful.
4. Copy the CtiosClient.pem and CtiosRootCert.pem files from the Certificate PC
to the C:\Program Files\Cisco Systems\CTIOS Client\Security folder on the
CAD client PC.
CAD client PC.
5. On the CAD client PC, delete the CtiosClientKey.pem file.
6. On the Certificate PC, delete the CtiosClientReq.pem, CtiosClientKey.pem,
and CtiosClient.pem files.
7. Repeat Steps 2 through 6 for every CAD client PC in the system.
Signing the Server CTI OS Security Certificate
Follow these steps to sign a CTI OS security certificate for a server box.
1. If you haven’t already done so, on the Certificate box, run
CreateSelfSignedCASetupPackage.exe, create a CTIOS Certificate Authority
password of between 8 and 30 characters when prompted, and store the
resulting files in a secure location.
password of between 8 and 30 characters when prompted, and store the
resulting files in a secure location.
NOTE: Run CreatSelfSignedCASetupPackage.exe only once. Running
it more than once can result in file corruption.
it more than once can result in file corruption.
2. Copy the CtiosServerKey.pem and CtiosServerReq.pem files from the CTI OS
server (C:\ICM\<instance name>\CTIOS1\security) to the folder on the
Certificate PC where the CtiosRoot.pem and CtiosRootCert.pem files are
stored.
Certificate PC where the CtiosRoot.pem and CtiosRootCert.pem files are
stored.