/mcp• If tomcat or ipsec is the certificate purpose, select SHA1 or SHA256. • If tomcat-ECDSA is the certificate purpose, select SHA384 or SHA512. Step 9 Click Generate to generate a new CSR. The new CSR that is generated for a specific certificate type overwrites any existing CSR for that type. The CSR is automatically distributed to all the required servers in the cluster. Note Downloading a Certificate Signing Request To download a Certificate Signing Request, follow this procedure: Step 1 Select Security > Certificate Management. The Certificate List window displays. Step 2 From the list, click the Common Name of the entry with type 'CSR Only' and a Distribution value matching the Common Name. For multi-server SAN certificate, click the Common Name of the entry with type 'CSR Only' and a Distribution value of 'Multi-Server (SAN)'. The CSR Details window appears. Note Step 3 Click Download CSR. Step 4 After the CSR download completes, click Close. You need to restart the tomcat service after configuring the Multi-server SAN certificate on both Publisher and Subscriber in a cluster. See the procedure below: Step 1 Sign in to the Unity Connection server with an SSH application. Step 2 Run the following CLI command to restart the Tomcat service: utils service restart Cisco Tomcat Third-Party CA Certificates To use an application certificate that a third-party CA issues, you must obtain both the signed application certificate and the CA root certificate from the CA or PKCS#7 Certificate Chain (DER format), which contains both the application certificate and CA certificates. Retrieve information about obtaining these certificates from your CA. The process varies among CAs. Cisco Unified Operating System Administration generates CSRs in PEM encoding format. The system accepts certificates in DER and PEM encoding formats and PKCS#7 Certificate chain in PEM format. For all certificate types, you must obtain and upload a CA root certificate and an application certificate on each node. Cisco Unified Communications Operating System Administration Guide for Cisco Unity Connection Release 15 29 Security Downloading a Certificate Signing Request