Cisco ASA Series Cli Configuration Manual page 1263

Chapter 1 Configuring the TLS Proxy for Encrypted Voice Inspection
Command
Step 3
hostname(config-ca-trustpoint)# proxy-ldc-issuer
Step 4
hostname(config-ca-trustpoint)# fqdn fqdn
Example:
hostname(config-ca-trustpoint)# fqdn
my-ldc-ca.exmaple.com
Step 5
hostname(config-ca-trustpoint)# subject-name
X.500_name
Example:
hostname(config-ca-trustpoint)# subject-name
cn=FW_LDC_SIGNER_172_23_45_200
Step 6
hostname(config-ca-trustpoint)# keypair keyname
Example:
hostname(config-ca-trustpoint)# keypair
ldc_signer_key
Step 7
hostname(config-ca-trustpoint)# exit
Step 8
hostname(config)# crypto ca enroll trustpoint
Example:
hostname(config)# crypto ca enroll ldc_server
What to Do Next
Once you have created the internal CA, create the CTL provider instance. See
Instance, page
Creating a CTL Provider Instance
Create a CTL Provider instance in preparation for a connection from the CTL Client.
The default port number listened by the CTL Provider is TCP 2444, which is the default CTL port on
the Cisco UCM. Use the service port command to change the port number if a different port is used by
the Cisco UCM cluster.
1-11.
Configuring the TLS Proxy for Encrypted Voice Inspection
Purpose
Issues TLS proxy local dynamic certificates. The
proxy-ldc-issuer command grants a crypto
trustpoint the role as local CA to issue the LDC and
can be accessed from crypto ca trustpoint
configuration mode.
The proxy-ldc-issuer command defines the local
CA role for the trustpoint to issue dynamic
certificates for TLS proxy. This command can only
be configured under a trustpoint with "enrollment
self."
Includes the indicated FQDN in the Subject
Alternative Name extension of the certificate during
enrollment.
Includes the indicated subject DN in the certificate
during enrollment
Specifies the key pair whose public key is to be
certified.
Exits from the CA Trustpoint configuration mode.
Starts the enrollment process with the CA and
specifies the name of the trustpoint to enroll with.
Cisco ASA Series CLI Configuration Guide
Creating a CTL Provider
1-11