Windows 2008 CA and CUCM 7.0

Unanswered Question
Jul 18th, 2009


We want to replace existing CA with Windows 2008 CA. when I tried to generate CSR from CUCM 7.0 and want Windows 2008 CA to sign it, it fails with the country code,

certificate generates full name of country instead of 2 letter Code ie. DE.

Any idea how to fix it and replace existing certificates with new CA certificates.

many thanks in advance,


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
htluo Sat, 07/18/2009 - 07:36

Did you mean Win2008 CA requires the country code to be in full name?

If that's the case, there are two solutions:

#1 Contact the CA vendor (Microsoft) to turn of this requirement.

#2 On CUCM7 command line, use "set web-security" command to reset the country code.


mikram Mon, 07/20/2009 - 00:34

Thanks for update, but the issue on CUCM 7.0 side as Country code needs to be two letter. Any thoughts?


htluo Mon, 07/20/2009 - 06:58

If that's the case, you have to contact Microsoft.

Just for curious, I've never run into this problem with CUCM7 and 2008 CA. Could you do a "show web-security" on CUCM7 command line and post the "subject" line here?



This Discussion