topic Re: CUCM v14(SU3) certificates regeneration in Unified Communications Infrastructure

CUCM v14(SU3) certificates regeneration

Michalis Papasavva — Thu, 17 Oct 2024 14:33:08 GMT

Hi,

For mix mode cluster, before version 14 i know you need to update CTL file for CAPF, Call manager and TVS certificates and restart services with below order.

Upload certificates
Run the utils ctl update CTLFile only on Publisher
Restart services.
Restart all phones from enterprise parameters

On version 14, in enterprise parameters the "Phone interaction on Certificate Update parameter is automatically reset" by default. So when the regeneration of certificate the phones automatically reset to update ITL file.

I need to set Phone interaction on Certificate Update to manually and proceed with the above order of regeneration of certificates or doesn't matter if the phones restart before updating the CTL file?

Re: CUCM v14(SU3) certificates regeneration

Marco Rojas Abarca — Wed, 30 Jul 2025 19:43:39 GMT

Hello Michalis,

You can take advantage of tool called CUCM Certificate Planner Tool available here:

https://cway.cisco.com/csa-new/#/aiguidedworkflows

You can used the Tailored approach, which will generate a step-by-step process on what you will need to do.

Here is the information you will need to use this tool:

Complete System Version?
Mixed mode enabled?
SSO enabled?
LSC configured?

Collect the output from running the following command in VOS CLI:

run sql select c.servername, tcs.name, dist.moniker, c.ipv4address, c.certificate from certificate as c inner join certificateservicecertificatemap as cscm on c.pkid = cscm.fkcertificate inner join typecertificateservice as tcs on cscm.tkcertificateservice = tcs.enum inner join typecertificatedistribution as dist on c.tkcertificatedistribution = dist.enum

Save the CLI outputs (without making any changes) to a .txt or .log file.

Hope this information helps,
Marco R.

Re: CUCM v14(SU3) certificates regeneration

Michalis Papasavva — Thu, 31 Jul 2025 06:19:53 GMT

Thank you Marco

Re: CUCM v14(SU3) certificates regeneration

Maren Mahoney — Tue, 05 Aug 2025 12:55:12 GMT

I also HIGHLY recommend the Cisco UC Certificates Renewal Guide written by @Roger Kallberg:

Cisco UC Certificates Renewal Guide

Maren