X15.5 adds the CLI setting xconfiguration SIP TLS Certificate ExtendedKeyUsage Checking Mode, which is ON by default. When OFF, inbound SIP TLS stops checking for the client EKU but still checks for the server EKU.

Checked 2026-09-24

Vendor
Cisco
Product
Cisco Expressway
Subsystem
certificates
Deployment
on-premises
Region
not restricted
Release range
X15.5
Checked
2026-09-24

Sources

Cite this note

APA

WarmTransfer. (2026, September 24). Expressway and Mobile and Remote Access: source note cucm-expressway-mra-x155-eku-cli. WarmTransfer. https://warmtransfer.net/knowledge/claims/cucm-expressway-mra-x155-eku-cli

BibTeX

@misc{warmtransfer-claim-cucm-expressway-mra-x155-eku-cli,
  title  = {Expressway and Mobile and Remote Access: source note cucm-expressway-mra-x155-eku-cli},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/cucm-expressway-mra-x155-eku-cli},
  note   = {Source note cucm-expressway-mra-x155-eku-cli, checked 2026-09-24}
}

Read in context