We have a PS work to fix a customer's CUCM cluster(12.5) which has expired TVS, CUCM, CAPF Certificates (Self Signed). The certificates expired almost 6 months back and everything is working fine.
I am aware of the process of regenerating self-signed TVS, CUCM, CAPF certs and have successfully done this multiple times. I would set the parameter "Prepare Cluster for Rollback to pre 8.0" to True under Enterprise Parameters followed by reboot of the phones forcing the CUCM to send Blank ITLs.
Will a CUCM (with expired CUCM, TVS & CAPF cert) send Blank ITLs to the Phones by setting the parameter "Prepare Cluster for Rollback to pre 8.0" to True? Will the phones accept the Blank ITL? Should i invest in a 3rd party Tool that can delete ITLs remotely?