Configure CUCM for Secure LDAP (LDAPS)

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/215437-configure-cucm-for-secure-ldap-directory.html

Published

2026-06-05

Updated

unknown

Accessed

2026-09-25

HTTP status

200

License

Cisco documentation; all rights reserved; no-redistribution; short excerpts and locators only

Source notes citing this source

• Since CUCM 10.5(2)SU2 and 9.1(2)SU3, the FQDN configured in LDAP Server Information is checked by default against the LDAP server certificate, and utils ldap config ipaddr stops enforcing that check when an IP address is used. in context
• Jabber client machines also need the LDAPS certificates installed as tomcat-trust on CUCM to be present in the client machine's certificate trust store. in context
• For LDAPS, tech note 215437 says to install the root and intermediate certificates of the LDAPS server certificate as tomcat-trust on each of the CUCM and IM and Presence publisher nodes and as CallManager-trust on the CUCM publisher. in context
• Tech note 215437 configures the LDAP Directory on port 636 with Use TLS checked and the LDAP Authentication on port 3269 with Use TLS checked. in context
• Where Jabber clients are present, Cisco recommends port 3269 for LDAPS authentication because Jabber login can time out if a secure connection to the global catalog server is not specified. in context
• Tech note 215437 states that no specific troubleshooting information is currently available for the LDAPS configuration it describes. in context
• After uploading LDAPS trust certificates, tech note 215437 restarts the Cisco Tomcat service on each CUCM and IM and Presence node with utils service restart Cisco Tomcat. in context

Cite this source record

APA

WarmTransfer. (2026, June 5). Configure CUCM for Secure LDAP (LDAPS). WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-technote-215437-cucm-ldaps

BibTeX

@misc{warmtransfer-cisco-technote-215437-cucm-ldaps,
  title  = {Configure CUCM for Secure LDAP (LDAPS)},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-technote-215437-cucm-ldaps},
  note   = {Cisco Systems, accessed 2026-09-25}
}