Windows 2008 CA and CUCM 7.0

[mikram]

Hi

We want to replace existing CA with Windows 2008 CA. when I tried to generate CSR from CUCM 7.0 and want Windows 2008 CA to sign it, it fails with the country code,

certificate generates full name of country instead of 2 letter Code ie. DE.

Any idea how to fix it and replace existing certificates with new CA certificates.

many thanks in advance,

muhammad

[htluo]

Did you mean Win2008 CA requires the country code to be in full name?

If that's the case, there are two solutions:

#1 Contact the CA vendor (Microsoft) to turn of this requirement.

#2 On CUCM7 command line, use "set web-security" command to reset the country code.

Michael

http://htluo.blogspot.com

[mikram]

Thanks for update, but the issue on CUCM 7.0 side as Country code needs to be two letter. Any thoughts?

cheers

[htluo]

If that's the case, you have to contact Microsoft.

Just for curious, I've never run into this problem with CUCM7 and 2008 CA. Could you do a "show web-security" on CUCM7 command line and post the "subject" line here?

Michael