[cisco-voip] CUCM Certificate question

[Tom Piscitell (tpiscite)]

Only adding a Subject Alternate Name (SAN) using set web-security will not change the license MAC. The License MAC will only change if the following fields are modified (the last of which cannot be changed anyway):

orgunit  mandatory   organizational unit
orgname  mandatory   organizational name
locality mandatory   location of organization
state    mandatory   state of organization
country  optional   country code can not be changed

The CLI command 'set web-security' will still show the warning if you are only adding a SAN, but the license MAC will not change.


Tom Piscitell
Customer Support Engineer
Unified Communications Infrastructure
+1-919-574-0081, 9am-5pm EST (GMT -5)

On Dec 5, 2012, at 2:39 PM, Nate VanMaren <VanMarenNP at ldschurch.org> wrote:

> If you just generate a CSR and add the alternative names when you are generating the cert, it will not change the license MAC.
>  
> From: Erick Wellnitz [mailto:ewellnitzvoip at gmail.com] 
> Sent: Wednesday, December 05, 2012 12:38 PM
> To: Nate VanMaren
> Cc: cisco-voip
> Subject: Re: [cisco-voip] CUCM Certificate question
>  
>   Changing the web-security settings on a VM forces a rehost.  I think only one alternate name would be sufficient but I'm trying to be safe.  
>  
> On Wed, Dec 5, 2012 at 12:29 PM, Nate VanMaren <VanMarenNP at ldschurch.org> wrote:
> generating the CSR
>  
> 
> 
> NOTICE: This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
> 
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip