Certificate update 7925g

[alexeykulikov7768]

Hello.

How to update an expired item?

[b.winter]

This phone is EoL since almost 5 years and therefore is not supported anymore:
https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7900-series/eos-eol-notice-c51-737580.html

[alexeykulikov7768]

This phone worked in 2023.

[b.winter]

Just because it is not supported anymore, doesn't mean it won't work.
But it means, that you won't get any updates or support.
There is no way to manually update the MIC root CA. You should replace the old phones with newer types.

[alexeykulikov7768]

it turns out that this certificate is responsible for receiving promises and technical support, did I understand correctly?

[b.winter]

Why should your sentence mean?!

The PHONE TYPE 7925G is End of Life. Which means, you won't get any support from Cisco anymore. You are running those devices at your own risk. This has nothing to do with any certificates.
That's a general thing. If a product is End of Life, and therefore not supported by the manufacturer, you are operating and running the product at your own risk.

[alexeykulikov7768]

And if I manually issue a certificate and sign it on a CA, then upload it to the device, will it work?

[eyalraba]

Hi @alexeykulikov7768 

You cannot delete or regenerate the MIC certificate, instead you can install the LSC, just make sure that the CAPF certificate on pub is not expired.

You can refer to the following guide for the procedure:

https://www.cisco.com/c/en/us/support/docs/content-networking/certificates/213295-how-to-install-an-lsc-on-a-cisco-ip-phon.html#:~:text=Configure%20LSC%20on%20IP%20Phone%20with%20CUCM%201,confirm%20that%20your%20configuration%20works%20properly.%206%...