/mcpStep 3 Use the CSR to obtain an application certificate from a CA. Get information about obtaining application certificates from your CA. See Application Certificates, on page 26 for more notes. Step 4 Obtain the CA root certificate. Get information about obtaining a root certificate from your CA. See Application Certificates, on page 26 for more notes. Step 5 Upload the CA root certificate to the server. See Upload Certificate or Certificate Chain, on page 24. Step 6 Upload the application certificate to the server. See Application Certificates, on page 26 Step 7 Restart the Unified CCX server. In the case of high availability deployments, restart both the nodes. Generate Certificate Signing Request To generate a Certificate Signing Request (CSR), follow these steps: For CSR generation, the supported key lengths are restricted to 1024, 2048, 3072, and 4096. Step 1 Navigate to Security > Certificate Management. The Certificate List window appears. Step 2 Click Generate CSR. The Generate Certificate Signing Certificate dialog box opens. Step 3 Select the certificate name from the Certificate Purpose list. For the current release of the Cisco Unified Operating System, the Directory option no longer appears in the list of Certificate Names. Note Step 4 Click Generate. Download Certificate Signing Request To download a Certificate Signing Request, follow this procedure: Step 1 Navigate to Security > Certificate Management. The Certificate List window appears. Step 2 Click Download CSR. The Download Certificate Signing Request dialog box opens. Step 3 Select the certificate name from the Certificate Name list. Step 4 Click Download CSR. Step 5 In the File Download dialog box, click Save. Cisco Unified Operating System Administration Guide for Cisco Unified CCX and Cisco Unified IP IVR, Release 12.5(1) SU3 25 Security Generate Certificate Signing Request