07-18-2009 01:41 AM - edited 03-15-2019 07:00 PM
Hi
We want to replace existing CA with Windows 2008 CA. when I tried to generate CSR from CUCM 7.0 and want Windows 2008 CA to sign it, it fails with the country code,
certificate generates full name of country instead of 2 letter Code ie. DE.
Any idea how to fix it and replace existing certificates with new CA certificates.
many thanks in advance,
muhammad
07-18-2009 07:36 AM
Did you mean Win2008 CA requires the country code to be in full name?
If that's the case, there are two solutions:
#1 Contact the CA vendor (Microsoft) to turn of this requirement.
#2 On CUCM7 command line, use "set web-security" command to reset the country code.
Michael
07-20-2009 12:34 AM
Thanks for update, but the issue on CUCM 7.0 side as Country code needs to be two letter. Any thoughts?
cheers
07-20-2009 06:58 AM
If that's the case, you have to contact Microsoft.
Just for curious, I've never run into this problem with CUCM7 and 2008 CA. Could you do a "show web-security" on CUCM7 command line and post the "subject" line here?
Michael
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide