Skip Navigation

FQDN between blast notifier and 
Cisco
 phones

  1. Open the 
    Authenticator.exe.config
     file.
  2. Change 
    SecurePort
     to an unused port of your choose.
  3. Save the file.
    The default port value is 8008. Standard practice is to use a 4-digit port number that ends in 443, for example 8443.
  4. Open the 
    BlastNotifier.exe.config
     file.
  5. Change 
    AppServerURL
     to use the server's FQDN.
  6. Save the file.
  7. Request a CA-signed certificate for the new port. Use a Certificate Authority of your choice and install the certificate.
  8. Open the CA-signed certificate. Click the 
    Details
     tab. Scroll down to the bottom of the 
    Details
     window and click 
    Thumbprint
    .
    You can use this value to bind the certificate to the new port.
  9. Bind the CA-signed certificate to the new port (for the URLs) using the 
    netsh
     command.
    netsh http add sslcert ipport=0.0.0.0:<Port> certhash=<Thumbprint> appid={00112233-4455-6677-8899-AABBCCDDEEFF}
    where 
    <Port>
     is the
     SecurePort
     defined in the 
    Authenticator.exe.config
     file.
    This must be a free port as you are binding to all available interfaces in this case.
    where 
    <Thumbprint>
     is the Thumbprint from the Details tab of the CA-signed cert. Remove all spaces.
    If a binding already exists for this port it must first be removed using the following command: 
    netsh http delete sslcert ipport=0.0.0.0:<Port>
    Do not bind this certificate to that port using the IIS control panel. This will cause the other bindings of 
    NDS
     with port 443 to fail. You must use 
    netsh
     instead of IIS. Leave the existing binding to the system-generated certificate in place.
  10. To upload the CA certificate, click 
    CUCM OS Administration
     > 
    Certificate Management
     > 
    Upload Certificate/Certificate chain
     and from the 
    certificate purpose
     drop-down list, select 
    Phone-trust
    .