Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

corporate directory

How do I setup the directory to use https?

On the remote phones termination to a phone-proxy (ASA5510) I can access the directory from the phone on port 80.

I then opened up for 443 for https. i can access the xml data via web browser from a computer but i have to accept the cert. I set the path of the phone to use https, but it cant access the directory. how do i get the phone to accept the cert?

1 REPLY
VIP Super Bronze

Re: corporate directory

Well first a bit of preaching: Phone Proxy was never intended to allow XML-based services to work because it is not recommended to expose any part of your CUCM servers to the Internet directly. This was a solution limitation because the ASA essentially lies and claims to be a UCM server running in mixed mode. The TLS session for SCCP and RTP was not designed to work across the internet so anything beyond signaling and media were never considered. This has been solved in the new SSL-based Phone VPN solution.

Having said that, SSL support was added beginning in UCM 8.0(1) using the Trusted Verification Service. In theory, a properly configured UCM 8 with phones running 9.0 or later firmware could perform SSL-based directory and other services. To my knowledge, there is no documentation walking you through this though.

Please remember to rate helpful responses and identify helpful or
498
Views
5
Helpful
1
Replies