If you configure a domain with "set network domain" you can regenerate your certificates and they'll have the FQDN.<div><br></div><div>If you don't want to change the domain (because a reboot is required, and it MUST be added on all servers in the cluster (forcing multiple reboots), you can use</div>
<div><br></div><div>set web security</div><div><br></div><div>to add a Subject Alternate Name and regenerate your certificates.</div><div><br></div><div><a href="https://supportforums.cisco.com/docs/DOC-6119">https://supportforums.cisco.com/docs/DOC-6119</a></div>
<div><br></div><div><a href="https://supportforums.cisco.com/docs/DOC-6119"></a>-Burns<br><br><div class="gmail_quote">On Mon, Mar 21, 2011 at 10:15 AM, Lelio Fulgenzi <span dir="ltr"><<a href="mailto:lelio@uoguelph.ca">lelio@uoguelph.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div style="font-family:Verdana;font-size:10pt;color:#000000">Looks like I solved this by simply regenerating the self-signed certificate. I didn't see a prompt for details so I wasn't sure it would use the FQDN, but it did.<div class="im">
<br><br><span><br><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br><a href="tel:%28519%29%20824-4120" target="_blank">(519) 824-4120</a> x56354 <a href="tel:%28519%29%20767-1060" target="_blank">(519) 767-1060</a> FAX (JNHN)<br>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span name="x"></span><br>
</span><br></div><hr><b>From: </b>"Lelio Fulgenzi" <<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>><br><b>To: </b><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Sent: </b>Monday, March 21, 2011 9:53:52 AM<br><b>Subject: </b>[cisco-voip] self-signed certificate on CUCM v7<div><div></div><div class="h5"><br><br><div style="font-family:Verdana;font-size:10pt;color:rgb(0, 0, 0)">My CUCM v7 system has a self-signed certificate which only has the hostname, not a FQDN. While FF installs this certificate fine and doesn't prompt you with warnings, IE does not.<br>
<br>Is it possible to re-create the self-signed certificate so that it has the FQDN?<br><br><span><br><span></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br><a href="tel:%28519%29%20824-4120" target="_blank">(519) 824-4120</a> x56354 <a href="tel:%28519%29%20767-1060" target="_blank">(519) 767-1060</a> FAX (JNHN)<br>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span></span><br>
</span><br></div><br></div></div>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</div></div><br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>