Q21Security
In a Mobile and Remote Access deployment, the certificate for which server must contain the Unified registration domain as a Subject Alternative Name?
← → navigate · a answer
Community votes
Discussion · 2
9
The Expressway-E server certificate needs to include these items in its list of subject alternative names (SAN):
Unified CM registrations domains
XMPP federation domains
IM and Presence chat node aliases (federated group chat)
C 2
Selected Answer: C
Expressway-E server certificate requirements
The Expressway-E server certificate must include the elements listed below in its list of subject alternative names (SAN). If the Expressway-E is also known by other FQDNs, all of those aliases must be included in the server certificate SAN.
• Unified CM registrations domains: all of the domains that are configured on the Expressway-C for Unified CM registrations. Required for secure communications between endpoint devices and Expressway-E.
The Unified CM registration domains used in the Expressway configuration and Expressway-E certificate are used by Mobile and Remote Access clients to look up the _collab-edge DNS SRV record during service discovery. They enable MRA registrations on Unified CM, and are mainly for service discovery.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X14-0-2/cert_creation_use/exwy_b_certificate-creation-and-use-deployment-guide-x1402/exwy_b_certificate-creation-use-deployment-guide_chapter_011.html