FYI, also referenced in the document that Erick posted:<div><br></div><div><span class="Apple-style-span" style="color: rgb(51, 51, 51); font-family: Arial, verdana, sans-serif; font-size: 12px; ">CUCM in versions 8.0(3) and later will generate a 2048 bit key / CSR for Tomcat. This defect currently only addresses Tomcat in 8.0(3). Other types of CSRs (like CallManager) will be addressed in future versions. Follow defect <a class="jive-link-external-small" href="http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCso62711" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; color: rgb(47, 102, 129); text-decoration: none; outline-style: none; outline-width: initial; outline-color: initial; ">CSCtn01236</a> for 2048 bit updates.</span></div>
<div><br></div><div>That means that versions that have not been "fixed" will generate 1024 CSR's, which will not be accepted by ANY CA.</div><div><br></div><div>Mike</div><div><br><div class="gmail_quote">On Fri, Jun 3, 2011 at 8:30 AM, Joe Martini <span dir="ltr"><<a href="mailto:joemar2@cisco.com">joemar2@cisco.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div style="word-wrap:break-word">Here's an even better document: <a href="https://supportforums.cisco.com/docs/DOC-6119" target="_blank">https://supportforums.cisco.com/docs/DOC-6119</a><div>
<br><div><div><div></div><div class="h5"><div>On Jun 2, 2011, at 5:21 PM, Wellnitz, Erick A. wrote:</div><br></div></div><span style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><div lang="EN-US" link="blue" vlink="purple">
<div><div></div><div class="h5"><div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif"><span style="color:rgb(31, 73, 125)"><a href="http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/8_0_2/cucos/iptpch6.html" style="color:blue;text-decoration:underline" target="_blank">http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/8_0_2/cucos/iptpch6.html</a></span></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif"><span style="color:rgb(31, 73, 125)"> </span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="color:rgb(31, 73, 125)">Security section of the OS Administration guide.</span></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="color:rgb(31, 73, 125)"> </span></div><div><div style="border-right-style:none;border-bottom-style:none;border-left-style:none;border-width:initial;border-color:initial;border-top-style:solid;border-top-color:rgb(181, 196, 223);border-top-width:1pt;padding-top:3pt;padding-right:0in;padding-bottom:0in;padding-left:0in">
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif"><b><span style="font-size:10pt;font-family:Tahoma, sans-serif">From:</span></b><span style="font-size:10pt;font-family:Tahoma, sans-serif"><span> </span><a href="mailto:cisco-voip-bounces@puck.nether.net" style="color:blue;text-decoration:underline" target="_blank">cisco-voip-bounces@puck.nether.net</a><span> </span>[mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]<span> </span><b>On Behalf Of<span> </span></b>Jason Aarons (AM)<br>
<b>Sent:</b><span> </span>Thursday, June 02, 2011 3:50 PM<br><b>To:</b><span> </span>cisco-voip (<a href="mailto:cisco-voip@puck.nether.net" style="color:blue;text-decoration:underline" target="_blank">cisco-voip@puck.nether.net</a>)<br>
<b>Subject:</b><span> </span>[cisco-voip] CallManager 8.0 Verisign Certificate Installation</span></div></div></div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif">
</div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif">Is there a similar url for CallManager 8.0 installing a Trusted Certificate from say Verisign, etc?</div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif"> </div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif">
</div><div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif"><a href="http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a00808e9e1e.shtml" style="color:blue;text-decoration:underline" target="_blank">http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a00808e9e1e.shtml</a></div>
<div style="margin-top:0in;margin-right:0in;margin-bottom:0.0001pt;margin-left:0in;font-size:11pt;font-family:Calibri, sans-serif"> </div></div><table><tbody><tr><td bgcolor="#ffffff"><font color="#000000"><pre>===========================================================
CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the Internal Revenue
Service, any tax advice contained herein is not intended or written to be used and cannot be used
by a taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.
===========================================================
CONFIDENTIALITY NOTICE:
This electronic mail message and any attached files contain information intended for the exclusive
use of the individual or entity to whom it is addressed and may contain information that is
proprietary, privileged, confidential and/or exempt from disclosure under applicable law. If you
are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or
distribution of this information may be subject to legal restriction or sanction. Please notify
the sender, by electronic mail or telephone, of any unintended recipients and delete the original
message without making any copies.
===========================================================
NOTIFICATION: Katten Muchin Rosenman LLP is an Illinois limited liability partnership that has
elected to be governed by the Illinois Uniform Partnership Act (1997).
===========================================================</pre></font></td></tr></tbody></table></div></div>_______________________________________________<br>cisco-voip mailing list<div class="im"><br><a href="mailto:cisco-voip@puck.nether.net" style="color:blue;text-decoration:underline" target="_blank">cisco-voip@puck.nether.net</a><br>
</div><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color:blue;text-decoration:underline" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></div></span></div><br></div></div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>