Cisco TelePresence Administrator's Guide

Configuring Registration Policy to use an
external service
To configure Registration Policy to refer all registration restriction policy decisions out to an external service:
1. Go to Configuration > Registration > Configuration.
2. Select a Restriction policy of Policy service.
3. Configure the fields as follows:
Field Description Usage tips
Protocol The protocol used to connect to the policy
service.
The default is HTTPS.
The VCS automatically supports HTTP to
HTTPS redirection when communicating
with the policy service server.
Certificate
verification
mode
When connecting over HTTPS, this setting
controls whether the certificate presented by
the policy server is verified.
If On, for the VCS to connect to a policy server
over HTTPS, the VCS must have a root CA
certificate loaded that authorizes that server’s
server certificate. Also the certificate's Subject
Common Name or Subject Alternative Name
must match one of the Server address fields
below.
The VCS’s root CA certificates are loaded
via (Maintenance > Security certificates
> Trusted CA certificate).
HTTPS
certificate
revocation list
(CRL)
checking
Enable this option if you want to protect
certificate checking using CRLs and you have
manually loaded CRL files, or you have
enabled automatic CRL updates.
Go to Maintenance > Security
certificates > CRL management to
configure how the VCS uploads CRL files.
Server
address 1 - 3
Enter the IP address or Fully Qualified Domain
Name (FQDN) of the server hosting the service.
You can specify a port by appending :<port>
to the address.
If an FQDN is specified, ensure that the
VCS has an appropriate DNS
configuration that allows the FQDN to be
resolved.
For resiliency, up to three server
addresses can be supplied.
Path Enter the URL of the service on the server.
Status path The Status path identifies the path from where
the VCS can obtain the status of the remote
service.
The default is status.
The policy server must supply return status
information, see Policy server status and
resiliency [p.338].
Username The username used by the VCS to log in and
query the service.
Password The password used by the VCS to log in and
query the service.
The maximum plaintext length is 30
characters (which is subsequently
encrypted).
Cisco VCS Administrator Guide (X8.1.1) Page 99 of 507
Registration control
Configuring Registration Policy to use an external service

Cisco TelePresence Specifications

General

Brand	Cisco
Model	TelePresence
Category	Server
Language	English