Obtaining A Server Certificate - Cisco WIP310 - iPhone Wireless VoIP Phone Administration Manual

Provisioning Basics
Using HTTPS
STEP 1
STEP 2
STEP 3
STEP 4
Cisco SPA 500 Series and WIP310 IP Phone Administration Guide

Obtaining a Server Certificate

To obtain a server certificate:
Contact a Cisco support person who will work with you on the certificate process.
If you are not working with a specific support person, you can email your request
to linksys-certadmin@cisco.com.)
Generate a private key that will be used in a CSR (Certificate Signing Request).
This key is private and you do not need to provide this key to Cisco support. Use
open source "openssl" to generate the key. For example:
openssl genrsa -out <file.key> 1024
Generate CSR a that contains fields that identify your organization, and location.
For example:
openssl req -new -key <file.key> -out <file.csr>
You must have the following information:
• Subject field—Enter the Common Name (CN) that must be a FQDN (Fully
Qualified Domain Name) syntax. During SSL authentication handshake, the
SPA 9000 verifies that the certificate it receives is from the machine that
presented it.
• Server's hostname—For example, provserv.domain.com.
• Email address—Enter an email address so that customer support can
contact you if needed. This email address is visible in the CSR.
Email the CSR (in zip file format) to the Cisco support person or to
itsp@external.cisco.com
. The certificate is signed by Cisco and given to you.
6
linksys-
146