A certificate-based Local Gateway trunk needs a public-CA-signed device certificate whose CN or a SAN matches, in lowercase, the FQDN or SRV configured in Control Hub, and a Server Authentication EKU alone is accepted.

Checked 2026-10-02

Certificates containing only Server Authentication Extended Key Usage (EKU) are supported
Vendor
Cisco
Product
Webex Calling Local Gateway
Subsystem
tls
Deployment
multi-tenant
Region
not restricted
Release range
IOS XE 17.9.1a and later
Checked
2026-10-02

Sources

Cite this note

APA

WarmTransfer. (2026, October 2). Webex Calling Local Gateway IOS XE command reference: source note webex-lgw-ios-xe-command-reference-cert-trunk-requirements. WarmTransfer. https://warmtransfer.net/knowledge/claims/webex-lgw-ios-xe-command-reference-cert-trunk-requirements

BibTeX

@misc{warmtransfer-claim-webex-lgw-ios-xe-command-reference-cert-trunk-requirements,
  title  = {Webex Calling Local Gateway IOS XE command reference: source note webex-lgw-ios-xe-command-reference-cert-trunk-requirements},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/webex-lgw-ios-xe-command-reference-cert-trunk-requirements},
  note   = {Source note webex-lgw-ios-xe-command-reference-cert-trunk-requirements, checked 2026-10-02}
}

Read in context