uccx 12.5 tomcat-ECDSA is expiring

[vijayS]

Hi Guys,

i have this ECDSA tomcat is expiring.  we use the RSA tomcat signed by CA. ECDSA is self signed. if i regenerate this ECDSA , would it cause finesse agent cert warning? 

have anyone done this ECDSA re-generation??

Thank you

vijay 

[rikardkrvaric]

The only guide I follow is @Roger Kallberg 's UC Cert guide.
It doesn't have UCCX specifically, but it mentions the ECDSA certs for CUCM and Unity, etc...
https://community.cisco.com/t5/collaboration-knowledge-base/cisco-uc-certificates-renewal-guide/ta-p/4077131

[Roger Kallberg]

From what I can remember renewal of this certificate is not user facing, it’s internally used in CCX.

[timuryuldashev]

When you use self-signed certificates, it is required to replace both the tomcat and the tomcat-ECDSA certificates with the CA signed ones to ensure Live Data gadgets connect to the SocketIO service in 11.5. 

https://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/200651-UCCX-Version-11-5-Prerelease-Field-Commu.html?cachemode=refresh

[timuryuldashev]

To ensure correct Finesse Tomcat operation without warnings, an only Tomcat certificate signed by a trusted Certificate Authority (CA) is required.

Rate if its helpful.