Manage The Lists Of Trusted Certificate Authorities - Cas - Cisco Webex DX70 Administrator's Manual

Cisco Webex DX70 and DX80

Introduction

Manage the lists of trusted certificate authorities - CAs

Certificate validation may be required when using TLS (Transport
Layer Security).
You can configure the device to demand that a server or client
presents its certificate before communication is set up. The
device uses the certificate to verify the authenticity of the
server or client. If authentication fails, the connection will not be
established.
The certificate (text file) must be signed by a trusted Certificate
Authority (CA). Lists of certificates from trusted CAs reside on the
device.
D15362.16 DX70 and DX80 Administrator Guide CE9.13, JUNE 2020.
Configuration Configuration Peripherals
The CA certificate lists
You can check and maintain the lists of trusted CAs from the web
interface of the device:
• Sign in to the web interface, navigate to
Authorities. There is one tab for each CA list.
These are the CA lists:
• Preinstalled: Pre-installed CA certificates that are used to
validate the certificates of external servers (HTTPS and
syslog) that the device communicates with.
• Collaboration
used to validate the certificates of servers contacted over
the Internet when the device is provisioned by Cisco Unified
Communications Manager (CUCM) via Expressway (also
known as MRA or Edge).
• Custom: CA certificates that you have uploaded to the device
yourself. The list must include all CAs that are needed in order
to verify certificates for both logging and other connections, if
those certificates are not already included in the pre-installed
lists.
Maintenance
(page 1 of 4)
Security > Certificate
Edge: Pre-installed CA certificates that are
www.cisco.com — Copyright © 2020 Cisco Systems, Inc. All rights reserved.
61
Administrator Guide
Device settings Appendices