Cisco BE6000 Design Manual page 35

Pre-deployment Checklist and Tasks
Contents
Procedure 5 Configure server certificates and CA certificates on the Expressway-E
Remote and mobile clients must verify (by validating the server certificate) the identity of the Expressway-
E to which they are connecting. To do this, in their list of trusted CAs, the clients must have the certificate
authority that was used to sign the Expressway-E's server certificate.
This design requires secure communications between Expressway-C and Expressway-E, as well as
between Expressway-E and endpoints located outside the enterprise.
Step 1. To generate a CSR, navigate to Maintenance > Security certificates > Server certificate,
fill the below fields leaving other at default. Next, click Generate CSR.
Under Alternative name

Unified CM registrations
◦
Additional Information

◦ Key length ( in
◦ Digest
Country-US
◦
◦ State or
◦ Locality (town
◦ Organization (Company name)-
◦ Organizational
domains-mmcvd.cisco.com
bits)-2046
Algorthm-SHA256
province-California
name)-San jose
unit-CTG
Deploy MRA and B2B Collaboration
Cisco
Deployment Details
Deploy CUBE
PAGE 35