Chrome cannot access CUCM

[iptsupport]

Hello,

I am currently using Cisco Unified Communications Manager (CUCM) version 11.5.1.16900-16,
and I am experiencing difficulties accessing the system with the browser version 127.0.6533.88/89 as of July 30, 2024.
The error message displayed is: “Your connection to this site is not secure.”

The Tomcat certificate is sign by ROOT CA.

when I switch to an older browser version, 11.0.5481.78, the access issue does not occur, and it functions correctly.

any idea to resolve this security error?

[Jonathan Schulenberg]

The browser will usually tell you exactly what it doesn’t like about a cert. One plausible reason is the cert chain uses SHA-1 which has been deprecated as of Chrome 56.

PS- CUCM 11.5 is end of support. You need to upgrade to 15.

[iptsupport]

We are currently planning to upgrade.

how I know if problem is SHA1 or another issue in certificate ?

[Leon Felix]

The error "Your connection to this site is not secure" typically indicates a compatibility issue between the Cisco Unified Communications Manager (CUCM) and the newer browser version. Try updating the Tomcat certificate or adjusting the browser’s security settings to resolve this issue. Using a supported browser version, as you've noted, avoids the problem, so checking for browser compatibility updates from Cisco could also help.