Communication Manager supports identity certificates and trusted CA certificates with enhanced signatures, such as SHA-2 with RSA key lengths of 2048-bit or 4096-bit.
Certificate Management enables receiving and validating existing certificates of SHA-1 and SHA-2 with RSA key lengths of 1024, 2048, and 4096.
Certificate installation activity is a maintenance activity and must be performed during maintenance window when there is no call traffic running on the Communication Manager system. Performing installation activity on live system can yield undesired system behavior like service disruption and system overload.
Communication Manager uses four application directories to hold certificates.
Application Directory
Service/Interface
Peer entity
Usage
C
Communication Manager telephony
Session Manager another peer CM server, AES, CM Duplication link, FIleSync links, H.248 gateways and 96x1 H.323 phone.
SIP trunk, H.323 over TLS and others
W
Administration Web Server
PC
Communication Manager Web Administration
R
Remote logging
Syslog server and general Services access
logging and services access
A
Authentication, Authorization and Accounting (AAA) services (for example, LDAP)
External AAA server
Administration accounts authentication
Note:
For R10.3, You must regenerate certificates with key length of 2048 or 4096 and install the identity certificates on the newCommunication Manager.
