To establish a secure XMPP connection to Presence Services, recent versions of SIP and H.323 devices require that the certificate chain that signed the Presence Services identity be imported into truststore of the platform hosting the device.
This is the first of two steps required to establish trust between devices and Presence Services for XMPP services. The following example shows how to export the certificate chain when the Certificate Authority is System Manager.
Note:
If System Manager is the Certificate Authority for both Session Manager and Presence Services , then there is no need to repeat this task if it was already performed in "Exporting certificate chain that signs the Session Manager identity".
On the System Manager web console, navigate to Services Security.
In the navigation pane, click Certificates.
Click Authority.
In the navigation pane, click CA Functions CA Structure & CRLs.
Click Download PEM file.
In the dialog box, click Save File to save the certificate to the desktop.
At the desktop, rename SystemManagerCA.cacert.pem such that the file extension ends with cer.
