UC Valley: CA automatic enterprise CA endpoint Certificate enroll

MMC.exe

$Console Root Certificate Templates (CA.dcIoud.cisco.com) Certification Authority (Local) Template Display Name Administrator Authenticated Session Basic EFS CA Exchange CEP Encryption ciscoratemplate ClientServer Code Signing Computer Cross Certification Authority Directory Email Replication Domain Controller Domain Controller Authentication EFS Recovery Agent Enrollment Agent Enrollment Agent (Computer) Exchange Enrollment Agent (Offline Exchange Signature Only Exchange user IPSec (Offline request) Kerberos Authentication Key Recovery Agent OCSP Response Signing RAS and IAS Server Root Certification Authority Router (Offline request) Smartcard Logon Smartcard user Subordinate Certification Authority Trust List Signing Properties of Neuu Template Subiect Name Server Issuance Requirements Compatibility General Request Handling Cryptography Key Attestation Superseded Templates Group or user names: Authenticated users Administrator Extensions a cisco ra (ciscora@dcloudciscocom) Domain Admins (D CLOUD SD omain Admins) Enterprise Admins (DCLOLlD\Enterprise Admins) Permissions for cisco ra Full Control Enroll Autoenroll For special permissions or advanced settings, click Advanced Cancel Security uthentication uthentication uthentication, Smart Card Lc uthentication, Smart Card Lc Advanced uthentication$

$Console I - [Console Root\Certification Authority Templates] File Action Viewu Favorites Windowu Help zdl Console Root Certificate Templates (CA.dcIoud.cisco.com) Certification Authority (Local) dcIoud-CA Revoked Certificates Issued Certificates Pending Requests Failed Requests Certificate Temp at > cenøne temmate to Name ciscoratemplate ClientServer Web Server 5y Directory Email Replication Domain Controller Authentication Kerberos Authentication EFS Recovery Agent Basic EFS Domain Controller Web Server Computer Subordinate Certification Authority Administrator Intended Purpose Client Authentication, Server Authentic... Server Authentication, Client Authentic... Server Authentication Directory Service Email Replication Client Authentication, Server Authentic... Client Authentication, Server Authentic... File Recovery Encrypting File System Client Authentication, Server Authentic... Server Authentication Client Authentication, Server Authentic... Encrypting File System, Secure Email, Cl... Microsoft. Trust List Signing, Encrypting...$

stop then start the service

$Internet Information Services (IIS) Manager CA Sites Default Web Site File Viewu Help Connections Start Page CA (DCLOLlD\Administrator) Application Pools Default Web Site Home Shouu All Group by: ASP.NET .NET Authorizat... Providers ASP .NET Compilation http Session State S Edit Site Binding Host name: Area IP address: All Unassigned Pages and Controls Port: Authentic... co Require Server Name Indication SSL certificate: ca.dcloud.cisco.com MIME Types Modules ctions Explore Edit Permissions... Edit Site Basic Settings... Viewu Applications Viewu Virtual Directories Manage Website Browse Website Brouuse w:BO (http) Brouuse (https) Advanced Settings... Configure Failed Request Tracing... Cancel Management Configurat... Features Viewu Content Viewu$

CUCM :

Upload root cert as CAPF-Trust

CAPF-trust is used for ＣＡＰＦ／cisco registration authority via https toＩＩＳ. Callmanager-trust is used for trust of LSC cert（secured tftp)

restart　Cisco Certificate Authority Proxy Function

ＬＣＳ installation，only for hardware phone

ＣＵＣＭ　enables mix mode

admin:utils ctl set-cluster mixed-mode

This operation will set the cluster to Mixed mode. Auto-registration is enabled on at least one CM node. Do you want to continue? (y/n): y

restart Callmanager service

Phone

Certification Authority Proxy Function (CAPF) Information
Certificate Operation
Authentication Mode
Authentication String
enerate Strin
Key Order
RSA Key size
EC Key size (Bits)
Operation Completes ay
Certificate Operation
Note: Security Profile
Install/l_lpgrade
ay Null String
RSA only
2048
Status: Operation
Contains Addition
12
pending
CAPF settings.

if CSF also add：

$Find and List Phones Add New From Template Status 8 records found Phone Find Phone "here Device Name Lsc Issued ay Device Name (Line) CSFAMCKENZIE CSFAPEREZ CSFMCHENG CSFWWHITMAN SEPAOAOAOAOAOAO SEPAIAIAIAIAIAI SEPA2A2A2A2A2A2 SEPA3A3A3A3A3A3 Clear All Delete Selected Reset Selected 2 Apply Contig to Selected Clear Filter begins begins CSF for Adam McKenzie with with Select item or enter search text Lsc status Upgrade Success Upgrade Success None None None None None None Lsc Issued dcIoud-CA dcIoud-CA Lsc Issuer Ex 11/10/2028 11/10/2028 CAPF Auth String 12/04/2024 12/04/2024 Related Links: cucml.dcloud.cisco cucml.dcloud.cisco cucml.dcloud.cisco CSF for Anita Perez CSF for Monica CSF for walt Whitman 8845 for Adam Mckenzie 8845 for Monica 8845 for Walt Whitman 8845 for Anita Perez status Registered Registered Registered Rejected None None None None Regist Non Non Non Add New \+14085551116 \+19195552132 \+14085551119 \+19195552130 \+14085551116 \+14085551119 \+19195552130 \+19195552132 Reset Selected amckenzie nnhitman amckenzie nnhitman Add New From Template Select All Clear All Delete Selected Apply Config to Selected$

UC Valley

Sunday 20 March 2022

CA automatic enterprise CA endpoint Certificate enroll

No comments:

Post a Comment