Configuring Ssl Certificates - Cisco TelePresence 7010 Help Manual

Network settings

Configuring SSL certificates

If the Cisco TelePresence Server has the Secure management (HTTPS) or Encryption feature key installed,
and you enable HTTPS on the
TelePresence Server using HTTPS.
Note: A certificate and key are also required if you select to use the Encrypted SIP (TLS) service in
> Services.
The Cisco TelePresence Server has a local certificate and private key pre-installed and it uses this to
authenticate itself to the browser when you access the unit using HTTPS. However, Cisco recommends that
you upload your own certificate and private key to ensure security because all Cisco TelePresence Server's
have identical default certificates and keys.
The TelePresence Server uses DTLS to negotiate encryption parameters with TIP endpoints—this requires a
certificate to be used. The TelePresence Server's implementation of DTLS handles customer-supplied
certificates in the following way:
Opportunistic DTLS always uses the default certificate for DTLS negotiation, even if a customer-supplied
n
certificate is uploaded.
Negotiated DTLS uses the customer-supplied certificate if one is uploaded (this is the preferred procedure).
n
Negotiated DTLS will be used if the endpoint supports RFC 5763; otherwise, in a TIP call, opportunistic
DTLS will be attempted.
To upload your own certificate and key, go to
Note: The SSL Certificates
key.
Complete the fields using the table below for help and click Upload certificate and key. Note that you must
upload a certificate and key simultaneously. You must restart the Cisco TelePresence Server after uploading
a new certificate and key.
Note: A certificate and private key must be in PEM format.
You can remove your own certificate and key, if necessary, by clicking Delete custom certificate and key.
You must restart the TelePresence Server after deleting a certificate.
The following table details the fields on the
Cisco TelePresence Server 7010 and MSE 8710 in Remotely Managed Mode Printable Help (4.0)
Network > Services page, you will be able to access the web interface of the
Network > SSL
page is only available if your TelePresence Server has the Encryption feature
Network > SSL certificates
certificates.
page:
Network
Page 27 of 92