01-14-2021 05:01 PM
Hopefully this is a straight forward question.
Our CAPF cert is about to expire, but the service isn't currently running on CUCM. Nor is our call manager cluster running in secure mode.
I would like to regenerate the CAPF cert to begin using the ASA phone vpn feature, but I've come across this document here that has a warning that if a CAPF cert is to be regenerated that this would cause phones to reset.
Does anyone know if the phones will still restart or will cause any other type of outage, if the CAPF service isn't currently running when the cert is regenerated?
Solved! Go to Solution.
01-14-2021 10:48 PM
The document that you reference states this.
“Warning: If you regenerate the CAPF certificate or import a third-party signed CAPF certificate while the CAPF service is activated and started, phones are automatically reset by CUCM.”.
As you don’t have the service activated there should be no impact on the phones when you renew the CAPF certificate.
01-14-2021 10:48 PM
The document that you reference states this.
“Warning: If you regenerate the CAPF certificate or import a third-party signed CAPF certificate while the CAPF service is activated and started, phones are automatically reset by CUCM.”.
As you don’t have the service activated there should be no impact on the phones when you renew the CAPF certificate.
01-15-2021 05:06 AM - edited 01-15-2021 08:08 PM
The phone will reset when service is active irrespective of mixed mode or not . images from my lab.
Phone registration status after regenerating the CAPF certificate.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide