For a Mobile and Remote Access deployment, which server's certificate must include the Unified registration domain as a Subject Alternate Name?

Question

Options

• AExpressway-C server certificate
• BCisco Unified Communications Manager server certificate
• CExpressway-E server certificate
• DExpressway-C and Expressway-E server certificate

• A
  6% (4)
• B
  2% (1)
• C
  89% (57)
• D
  3% (2)

Explanation

In a Mobile and Remote Access (MRA) deployment, the Expressway-E is the external-facing server that remote clients discover and connect to via DNS SRV lookups (e.g., _collab-edge._tls.example.com). Because external clients present this domain during the TLS handshake, the Expressway-E server certificate must include the Unified registration domain (e.g., 'collab-edge.example.com') as a Subject Alternate Name (SAN). The Expressway-C is an internal server that clients never reach directly, so it does not require this SAN. Adding it to both (Option D) is unnecessary and not the documented requirement.

No community discussion yet for this question.