Source note · Setting up certificates on Cisco Expressway
Expressway connections in which it acts as a TLS client and needs a client-authentication EKU are SIP B2B over mTLS, SIP neighbor zones with mTLS (Unified CM, Unity, CUBE, CMS), UC traversal zones, XMPP federation, and MRA onboarding to the Cisco cloud.
Checked 2026-09-30
- Vendor
- Cisco
- Product
- Cisco Expressway
- Subsystem
- eku
- Deployment
- on-premises
- Region
- not restricted
- Release range
- X14 to X15.3.2
- Checked
- 2026-09-30
Sources
- Field Notice: FN74362 - Cisco Expressway: Impact on Secure Communication due to Upcoming Changes to TLS Certificates Issued by Public Certificate Authorities with Client Authentication EKU, Starting May 2026 - Workaround Provided — Cisco Systems · tier 2 current vendor documentation · Problem Description > affected connections
Cite this note
APA
WarmTransfer. (2026, September 30). Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-eku-mtls-connections. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-eku-mtls-connections
BibTeX
@misc{warmtransfer-claim-expressway-certificate-setup-eku-mtls-connections,
title = {Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-eku-mtls-connections},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-eku-mtls-connections},
note = {Source note expressway-certificate-setup-eku-mtls-connections, checked 2026-09-30}
}