topic Re: Regenerating the CUCM certificates in Collaboration Applications

Regenerating the CUCM certificates

israel.castillo — Thu, 06 Sep 2018 00:23:57 GMT

Hi there

We are going to regenerate CUCM certificates because they almost will be expired, These are the 5 certificates that we are going to update. I have 1 PUB and 2 SUB´s

CallManager.pem
Tomcat.pem
CAPF.pem
IPSec.pem
TVS (Trust Verification Service)

I already read this link,

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200199-CUCM-Certificate-Regeneration-Renewal-Pr.html

There are no Register phones in the PUBLISHER

We have to regenerate certificates in all 3 servers. so I have 3 questions.

1.- When regenerating certificates in the PUBLISHER, should I turn off the TFTP service and the callmanager service? Or can I just go ahead and regenerate them without deactivate any service and as no phones are register to the PUBLISHER?

2.- is there any specific order to regenerate them, you know like tomcat first and then callamanger etc, or can I just start choosing any of it?

3.- After regenerating them, you know that some services need to restart, and that would be depending on the certificate, for example TOMcat would be tomcat service, callamanger would be callmanager service and TFTP service. So,

Can I just regenerate them and restart the whole server or do I have to restart those specific services?

Thanks in advance.

Re: Regenerating the CUCM certificates

jonathan.salter — Thu, 06 Sep 2018 11:23:24 GMT

1.- Do not need to deactivate the services before regeneration
2.- There is no specific order
3.- You could restart the server however I feel it will be much quicker to restart the services individually

Re: Regenerating the CUCM certificates

israel.castillo — Tue, 11 Sep 2018 17:10:33 GMT

Thanks.

Re: Regenerating the CUCM certificates

jonathan.salter — Wed, 12 Sep 2018 03:54:46 GMT

Anytime...could you please choose my post as an "accepted solution" thank you

Re: Regenerating the CUCM certificates

Chris Deren — Wed, 12 Sep 2018 12:26:58 GMT

Make sure you do not regenerate TVS and CallManager certs at the same time as that will cause phones not to be able to re-register, the Cisco documentation covers that.