Bulk Cert delete

[Mohsin Khan Feroz]

Hello Experts,

We would like to delete all the expired certs in the CUCM / CUC Cluster. There are 100s of them, so is there anyway to delete it in bulk? We are planning to migrate our cluster to 11.5 shortly, so if there is an option to delete during PCD migration, we shall entertain that. So please advise.

CUCM / CUC = v10.5

Mohsin.

[Mohammed al Baqari]

I don't think you can do this from CUCM Admin GUI. The only way I can think
off is to do it using AXL by scripting it. You can post that in DevNet

[Mohsin Khan Feroz]

Can't we do it thru the SQL script from the database?

[Jaime Valencia]

No, because certificates are not in any DB in CUCM. Certificates are handled at OS level directly in Linux, you get a nice interface for that via OS admin.

You can also do it from CLI, but you don't see all the info as via GUI to make completely sure you're not deleting a cert you actually need.

PCD has no way to delete any data via a migration.

[Mohsin Khan Feroz]

Thank You Jaime,

we can delete it from GUI but, we have around 400 old certs in one cluster and similarly, we have 4 clusters in our environment. It will take high man hours to do so.. We need to come up with something better to do it.

[Jaime Valencia]

Those would be your options do it I'm afraid, GUI, CLI or as Mohammed mentioned, AXL.