Before setting cluster TLS verification mode to Enforce, confirm that each certificate's SANs contain the FQDNs in the Peer address fields and that System > Clustering shows green status for each peer.

Checked 2026-09-30

Verify that your certificate SANs contain the FQDNs that are in the Peer N address fields.
Vendor
Cisco
Product
Cisco Expressway
Subsystem
clustering
Deployment
on-premises
Region
not restricted
Release range
X15.4
Checked
2026-09-30

Sources

Cite this note

APA

WarmTransfer. (2026, September 30). Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-cluster-enforce-san. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-cluster-enforce-san

BibTeX

@misc{warmtransfer-claim-expressway-certificate-setup-cluster-enforce-san,
  title  = {Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-cluster-enforce-san},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-cluster-enforce-san},
  note   = {Source note expressway-certificate-setup-cluster-enforce-san, checked 2026-09-30}
}

Read in context