*** Note that once you select this option, Windows will ask you if you want the Windows Server 2003 or the Windows Server 2008 versions… To save you some time, here is a little hint.Ģ003 version is what you use to publish the template under (Web Enrollment) when requesting an Advanced Certificate **This is the one you use to sign the certificate for your regular Tomcat CertificateĢ008 version does not let you publish the certificate template over Web Enrollment **This is what you use to sign your Tomcat-ECDSA certificate Right click the Web Server Template and select Duplicate Go to Certificate Authority under Administrative Tools – Go under the Templates and Select it, Right click and Go to ManageĪt this point the Certificate Templates will show up At this point you know how the story goes:įind the closest CA available in your Environment You are a happy engineer, and you are planning a UCCX upgrade to 11.5, that is all cool and nice but you discover about these certificates. The Scenario or the Issue (Challenge… my own words) The Defect is well documented under the BugID: CSCvb46250Īlso go to this page to get a full explanation on the ECDSA – Check this Article
So in case you either don’t want to keep reading, or just too cool for Signed Certificates, use the COP file for the ECDSA The alternative if you don’t want to keep going down the road In other words these type of certificates, the ECDSA were not present before, and now they are (UCCX team thought was cool to add them some how). Here is an Image with the Certificate store If you want to find out more about these type of certificates feel free to visit this webpage UCCX uses Self-Signed certificates out of the box for Secure connectivity using your browser (Nothing new here) – However, since UCCX 11.5 there is a new Tomcat Certificate called Elliptic Curve Digital Signature Algorithm, ECDSA for short. I will go back a bit to give you a quick overview on the UCCX certificates, but not too far back. I wanted to create this quick post to help others and Document the procedure. I keep hearing about many engineers out there with issues related to the UCCX certificates and the ECDSA certificate used by few services on UCCX.
0 kommentar(er)
