<div dir="ltr" align="left"><font face="Arial" color="#0000ff" size="2"><span>Hi All ... </span></font></div>
<div dir="ltr" align="left"><font face="Arial" color="#0000ff" size="2"><span></span></font> </div>
<div dir="ltr" align="left"><font face="Arial" color="#0000ff" size="2"><span>I'm still struggling trying to <font face="Times New Roman"><font color="#000000" size="3">Microsoft CA issued PKCS#10 certificate into CCM
5.1.x and I'm hoping you can give me a hand.</font></font></span></font></div>
<div dir="ltr" align="left"> </div>
<div dir="ltr" align="left"><font size="+0"><span>
<p><font face="Arial"><font color="#0000ff"><font size="2"><span>1-) </span>I have managed to upload my own Trusted Root CA.</font></font></font></p>
<p><font face="Arial" color="#0000ff" size="2">2-) <span>I ha</span>ve generated a CSR from the Callmanager box, then I go to my Microsoft Certificate Authority and submit the CSR using the 'Webserver' template.
</font></p>
<p><font face="Arial" color="#0000ff" size="2">The CSR is then signed and returned.</font></p>
<p><font face="Arial" color="#0000ff" size="2">When attempting to upload a certificate that is signed by this CA, callmanger OS admin site rejects it.</font></p>
<p><font face="Arial" color="#0000ff" size="2">I did notice that when you generate a CSR the <span>Cisco OS Admin </span>site says:</font></p>
<blockquote dir="ltr" style="MARGIN-RIGHT: 0px">
<p><font face="Arial" color="#0000ff" size="2"><em>The CSR contains the public key and certificate information needed to generate an X.509 certificate. This includes the following extensions contained in an ExtensionRequest:
</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>X.509 Extensions:</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>Requested Extensions:</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>X509v3 Key Usage:</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>Data Encipherment, Digital Signature, Key Agreement, Key Encipherment</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>X509v3 Extended Key Usage:</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>TLS Web Server Authentication, TLS Web Client Authentication, IPSec End System</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>X509v3 Subject Alternative Names:</em></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>(uniformResourceIdentifier) ..sip:CN=<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://testccm51x.mycompany.com/" target="_blank">testccm51x.mycompany.com
</a></em></font></p>
<p><font face="Arial"><font color="#0000ff"><font size="2"><em>If your CA does not support the ExtensionRequest mechanism, you must enable the X.509 extensions listed above, or your 'CallManager'<span> </span>certificate will be unusable
</em></font></font></font></p>
<p><font face="Arial" color="#0000ff" size="2"><em>Please use this CSR to generate a certificate using your CA. After generation please upload the new certificate using "Security" -> "Certificate Management" -> "Upload Certificate/CTL" and choose "Upload Own Cert"
</em></font></p></blockquote>
<p><font face="Arial"><font color="#0000ff" size="2">This sort of tells me that the 'Webserver' certificate template in the<span> </span>Win2003 Certificate authority is probably not the correct template ! </font>
</font></p>
<p><font face="Arial" color="#0000ff" size="2"><strong>Any ideas on what template I need to use or how I could make a custom template to meet these requirements ?</strong></font></p>
<p><span><font face="Arial" color="#0000ff" size="2">Does Cisco have any DETAILED information on how to do this. I have read lots and lots of documentation on CCO but none of seems to indicate how to create the certificate and what template to use on Microsoft CA.
</font></span></p>
<p><span></span><font face="Arial"><font color="#0000ff"><font size="2">T<span>hanks in advance,</span></font></font></font></p>
<p><font face="Arial"><font color="#0000ff"><font size="2"><span>Sergio</span></font></font></font></p></span></font></div>