Cisco Unified CM Authentication Failed because of CCMAXL Exception. CUCM 10.5 and UCCX 12.5

[karthikageer]

I am trying to integrate uccx 12.5 with cucm 10.5, In cucm i have created axluser with Standard AXL API user access and super user access. I have logged in to the appadmin page when i gave cucm ip , axl user credentials for integration i get the error "Cisco Unified CM Authentication Failed because of CCMAXL Exception. Please check the logs for details" i am sure axluser  have all the  required access but still getting this error. Any idea on how to fix the issue ?  i have also rebooted UCCX , restarted Cisco AXL Web Service on CUCM but no luck. please let me know any suggestions to fix the issue 

[Jonathan Schulenberg · Accepted solution]

That version combination is not supported. You must upgrade CUCM.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/crs/express_compatibility/matrix/uccxcompat12_0_5.html

Also, the CUCM Tomcat certificate must be trusted by CCX.

[dsobrinho]

Hi @Jonathan Schulenberg 

How are you doing?
So I have the same problem happens and we have them (both cucm and UCCX) in same version 12.5.1.

Cisco Unified CM Authentication Failed because of CCMAXL Exception. Please check the logs for details.

The self signed tomcat from cucm was copied to UCCX as trusted cert tomcat.

[Jonathan Schulenberg]

Did you upload the self-signed Tomcat cert of all CUCM nodes?

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/crs/express_12_5/install/guide/uccx_b_125install-and-upgrade-guide/uccx_b_125install-and-upgrade-guide_chapter_010.html

[Matheus Lopes]

I have the same issue when trying to configure the UCCX and I've fixed that uploading the self-signed Tomcat cert as suggested by Jonathan. Thanks for that buddy!

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/crs/express_12_5/install/guide/uccx_b_125install-and-upgrade-guide/uccx_b_125install-and-upgrade-guide_chapter_010.html

Make sure you restart the UCCX Server after the procedure.

Upload Self-Signed Certificate

The following procedure is an example for uploading the CUCM self-signed certificate to Unified CCX Tomcat trust store.

Note	The same procedure can be followed to upload CCP and Standalone CUIC self-signed certificates.

Procedure

---

Step 1	Log in to Cisco Unified OS Platform CLI using administrator credentials.
Step 2	Enter the show cert own tomcat command to view the CUCM certificate details. The CUCM certificate is displayed.
Step 3	Copy the certificate information starting from -----BEGIN CERTIFICATE----- to -----END CERTIFICATE----- and press Enter. Example: A sample certificate is as follows: -----BEGIN CERTIFICATE----- MIID+TCCAuGgAwIBAgIQRMN6rnHtbGwm1nNqJ1pCfTANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJJTjEOMAwGA1UECgwFQ0lTQ08xDjAMBgNVBAsMBUNCQUJVMR4w HAYDVQQDDBVsb2FkdWNjeC1uMS5jaXNjby5jb20xEjAQBgNVBAgMCUtBUk5BVEFL QTESMBAGA1UEBwwJQkFOR0FMT1JFMB4XDTIwMTAxMjA2NDQzN1oXDTIyMTAxMjA2 NDQzNlowdTELMAkGA1UEBhMCSU4xDjAMBgNVBAoMBUNJU0NPMQ4wDAYDVQQLDAVD QkFCVTEeMBwGA1UEAwwVbG9hZHVjY3gtbjEuY2lzY28uY29tMRIwEAYDVQQIDAlL QVJOQVRBS0ExEjAQBgNVBAcMCUJBTkdBTE9SRTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMPL3K6yC5i7n/KidIpae3KMoet7BA5V+IT0x7Wyz9OV6M+U rOJPsSryNiDwMYMeUFfpY4pxaA5KD4Hqh5pzWt887fc7nmMZIqb+tJutbeClEFeP QIAbB1hLRYMGnMyqppVAmrvYwRCDCQfaOVMUDTFACLFtF4xxyJl+ov3AdRuHew7b rw1wsnhI2dR3z/0CJ53wN5mdPmBEd83n5LIxLEH3HZBffz3anuJeHKkJg0TpTdd+ tWR3I0u/URaKcpci9q06h6bWrBmpYtM/hScYnS0ZuqVU0aO1Za7e7C+v4/CS1rOY usnI0uLDZv/iVfuxcE0MoS8eqPxtH+0x4eK5lzECAwEAAaOBhDCBgTALBgNVHQ8E BAMCArQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTt jixZBx6x+k6rZ0zaqQ4PA+jWHzASBgNVHRMBAf8ECDAGAQH/AgEAMCAGA1UdEQQZ MBeCFWxvYWR1Y2N4LW4xLmNpc2NvLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAqhe+ B3duk1inR5pmzIWdjKvYYm4CtNeAn9tRYlK2BijKV6a0qDuZwSpN0dGblRr0epRI thfkZvQGDzo5VZ45mVfxla+wxT3UrfmsoiKmncXBdaYhSsEoKbmWjHbsxwSklRWb nZatxwglXTluPbF5F9wJSJHTTwPk3P0pjZENF09S5hY/xDEM7wfOrnKUETHJJPts z4LArPgdaFbmWv8YLCp1YBcOI9mdxQnUUn4in6G9Nv5c9BYDKctPWKHhX8Hr7gO2 RTyBJc9tnhG4LjD0ykokeSp+5u77Xug9ZCtAgiliHZu7cWpGu9lRToiFklgah23+ XbRBYlZpO5v7rd6HbQ== -----END CERTIFICATE-----
Step 4	Log in to Unified CCX CLI using administrator credentials.
Step 5	Enter the set cert import trust tomcat command to provide the CUCM certificate details. Paste the copied CUCM certificate details and press Return. The CUCM certificate is imported to Unified CCX Tomcat trust store.

[devrogers]

I tried this on UCCX 12.5.1.1003-511 on CLI. I got the message that the import was successful. I rebooted UCCX node, tried again, same error. Retried import same issue. I used the GUI to export tomcat.pem and tomcat-ECDSA.per as trust certs and imported to UCCX. Rebooted UCCX, this worked!