Process Summary for Cisco VPNless Jabber (MRA) Certification

Dear all,

You will face lots of issue and problems on Jabber, if your certification process not completed correctly.
Please easily follow up below steps to be sure that your certificates are correct and fulfill Jabber requirements.

1. Download CA Root or Whole Chain certificate from CA Server as "Base64"
2. Upload "no1" CA Root or Whole Chain certificates to CUCM and IM&P servers as "tomcat-trust"
3. Generate "tomcat" CSR at CUCM server and download it
4. Request a "Tomcat Signed CA" certificate with "WebServer" template as "Base64" from CA Server while using "no3" CSR
5. Upload "no4" CA certificate to CUCM server as "tomcat"
6. Upload "no1" CA Root or Whole Chain Certificates to IM&P server as "CUP-XMPP-Trust"
7. Generate "cup-xmpp" CSR at IM&P server and download it
8. Request "cup-xmpp" certificate with "WebServer" template as "Base64" from CA Server while using "no7" CSR 
9. Upload "no8" CA certificate to IM&P server as "cup-xmpp"
10. Install CA Root or Whole Chain certificates to Expessway E and C (or VCS Control - Expressway) servers as "Trusted CA Certificate"
11. Generate a CSR on Expressway C server and download it
12. Request CA Signed Certificate for Expressway C server with "ServerClient" template as "Base64" from CA Server while using "no11" CSR   
13. Upload "no12" certificate to Expressway C server 
14. Generate a CSR on Expressway E server and download it (remember adding alternative names)
15. Request CA Signed Certificate for Expressway E server with "ServerClient" template as "Base64" from CA Server while using "no14" CSR   
16. Upload "no15" certificate to Expressway E server
17. Restart both Expressway C and E servers
18. Restart Tomcat service on CUCM server and XCP Router service on IM&P server
19. Deactive - active TFTP service on CUCM server

Hope these steps will help you on your Jabber deployments.

Best Regards,

Mesut

PS : happy Labout Day and wish an equal world for every employees