Which two certificates do the Cisco Finesse primary and secondary servers accept when HTTPS protocol is used to access the administration console or…

Cisco Finesse servers utilize HTTPS to secure communications for the administration console and agent desktops. By default, the system generates and uses a self-signed certificate upon installation. This allows for immediate secure access, although it will generate browser trust warnings. For production environments, Cisco recommends replacing this with a Certificate Authority (CA) certificate. The administrator generates a Certificate Signing Request (CSR) from Finesse, has it signed by a public or enterprise CA, and uploads the resulting certificate. The Finesse server is designed to accept and operate with either of these certificate types.

A. Domain validation certificate: This is a specific type of CA certificate. The broader and more encompassing correct term is "Certificate authority certificate," which covers all types (DV, OV, EV).

B. Digital certificate: This is a generic term. Both self-signed and CA-signed certificates are types of digital certificates, making this option too general and imprecise.

E. Root certificate: The server uses an end-entity certificate to identify itself. The root certificate belongs to the CA and is used by the client to validate the server's certificate chain, but it is not the certificate the server presents as its own identity.

1. Cisco Finesse Administration Guide

Release 12.6(1)

"Security" Chapter

"Manage Certificates" section. This section details the two primary certificate options: "By default

the Cisco Finesse server uses a self-signed certificate... For a production environment

it is recommended that you use a CA-signed certificate." This explicitly confirms the use of both self-signed and CA-signed certificates.

2. Security Guide for Cisco Unified CCE

Release 12.5(1)

"Public Key Infrastructure" Chapter

"Certificates in Unified CCE" section. This guide explains the security posture for the entire Contact Center Enterprise solution

of which Finesse is a key component. It states

"Each server that requires a certificate has a self-signed certificate that is generated during installation... For production deployments

you must replace the self-signed certificates with certificates that are signed by a common trusted Certificate Authority (CA)." This reinforces the standard practice for all solution components

including Finesse.