Cisco Unified Presence, Release 7.x -- How to Configure TLS Settings on Cisco Unified Presence
From DocWiki
Main page: Cisco Unified Presence, Release 7.x
Contents |
Previous Topic
Configuring TLS Peer Subjects
Note: A TLS peer subject is automatically created when a self-signed certificate is imported.
Procedure
1. Perform one of the following actions:
If you want to: Action Add a TLS peer subject
- Select System > Security > TLS Peer Subjects.
- Select Add New.
Update a TLS peer subject
- Find the record. See the Finding a Network Component topic for instructions.
- Edit the record as required.
2. Enter the TLS peer subject configuration settings as described in the table below.
Field Description Peer Subject Name
Specifies the subject CN of the certificate that the server presents. Open the certificate, look for the CN and paste it here.
Maximum characters: 128Description
Specifies a description of the peer subject.
Maximum characters: 128
3. Select Save.
Troubleshooting Tips
- You must restart the SIP proxy server before any changes that you make to the TLS peer subjects take effect. To restart the proxy server, select Presence > Routing > Settings.
Related Topics
What To Do Next
Configuring TLS Contexts
Before You Begin
Configure a TLS peer subject on Cisco Unified Presence.
Procedure
1. Perform one of the following actions:
If you want to: Action Add a TLS context
- Select System > Security > TLS Context Configuration.
- Select Add New.
Update a TLS context
- Find the record. See the Finding a Network Component topic for instructions.
- Edit the record as required.
2. Enter the TLS context configuration settings as described in the table below.
Field Description Name
Specifies the unique name of the TLS context.
Description
Specifies a description of this TLS context.
Authorization Policy
Specifies the authorization type for this particular TLS context. From the list box, select either Server or Peer (default).
Disable Empty TLS Fragments
Specifies whether to enable or disable empty TLS fragments.
TLS Cipher Mapping
Displays the available and selected TLS ciphers. You can add and remove the following ciphers:
- TLS_WITH_RSA_AES_128_CBC_SHA
- TLS_WITH_RSA_AES_256_CBC_SHA
- TLS_WITH_RSA_NULL_SHA
- TLS_RSA_WITH_3DES_EDE_CBC_SHA
TLS Peer Subject Mapping
Displays the available and selected TLS peer subjects.
3. Move the appropriate TLS cipher to Selected TLS Ciphers
4. Move the appropriate TLS peer subject to Selected TLS Peer Subjects.
5. Select Save.
Troubleshooting Tips
You must restart the SIP proxy server before any changes that you make to the TLS context take effect. To restart the proxy server, select Presence > Routing > Settings.
