Configure SIP TLS between CUCM-CUBE/CUBE-SBC

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-border-element/212090-Configure-SIP-TLS-between-CUCM-CUBE-CUBE.html

Published

2017-09-14

Updated

unknown

Accessed

2026-09-30

HTTP status

200

License

Cisco documentation; all rights reserved; no-redistribution; short excerpts and locators only

Source notes citing this source

• To make CUBE trust a self-signed Unified CM certificate, a trustpoint with enrollment terminal is created for Unified CM and the CallManager certificate is pasted in with crypto pki authenticate <trustpoint>. in context
• The self-signed CUBE certificate is uploaded in Unified CM OS Administration under Security > Certificate Management with certificate purpose CallManager-Trust. in context
• On the CUBE dial-peer toward Unified CM, session transport tcp tls selects TLS signaling and srtp enables secure media. in context
• crypto pki export <trustpoint> pem terminal prints the CUBE certificate in PEM format so it can be copied to Unified CM. in context
• A self-signed CUBE certificate is created by setting enrollment selfsigned on the trustpoint and running crypto pki enroll <trustpoint>. in context
• The X.509 subject name in the Unified CM SIP trunk security profile must match the CN configured in the CUBE certificate. in context
• For a CUCM-to-CUBE TLS trunk the CUBE certificate is uploaded to Unified CM as CallManager-Trust, the X.509 Subject Name matches the CUBE certificate CN, the trunk destination port changes from 5060 to 5061 and SRTP Allowed is checked. in context
• Cisco's CUCM-to-CUBE SIP TLS configuration note lists as a requirement that Unified CM be in mixed mode, with TCP 5061 open on transit firewalls and security and UCK9 licences on the CUBE. in context

Cite this source record

APA

WarmTransfer. (2017, September 14). Configure SIP TLS between CUCM-CUBE/CUBE-SBC. WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-technote-212090-sip-tls-cucm-cube

BibTeX

@misc{warmtransfer-cisco-technote-212090-sip-tls-cucm-cube,
  title  = {Configure SIP TLS between CUCM-CUBE/CUBE-SBC},
  author = {{WarmTransfer}},
  year   = {2017},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-technote-212090-sip-tls-cucm-cube},
  note   = {Cisco Systems, accessed 2026-09-30}
}