Cisco Certificate Monitor

[gene.evans]

I have recently recieved the following from our Call manager.  This is a UCS system.     

Date: Aug 26 17:01:49

Machine Name: utslcucmp1 - need to generate CSR

Severity: Notice

App ID: Cisco Certificate Monitor

Message: : 0: utslcucmp1.williams.com: Aug 27 2013 00:01:49.274 UTC : %UC_CERT-5-CertValidityOver30Days: %[Message=Certificate expiration Notification. Certificate name:CallManager.der Unit:CallManager Type:own-cert Expiration:Fri Oct 25 09:08:][ClusterID=][NodeID=utslcucmp1]: Alarm to Indicate certificate to Expiry is approaching but expiry date is more than 30 days

Date: Aug 26 17:01:49
Machine Name: utslcucmp1 - need to generate CSR
Severity: Notice
App ID: Cisco Certificate Monitor
Message: : 0: utslcucmp1.williams.com: Aug 27 2013 00:01:49.274 UTC : %UC_CERT-5-CertValidityOver30Days: %[Message=Certificate expiration Notification. Certificate name:CallManager.der Unit:CallManager Type:own-cert Expiration:Fri Oct 25 09:08:][ClusterID=][NodeID=utslcucmp1]: Alarm to Indicate certificate to Expiry is approaching but expiry date is more than 30 days

Since this seems to be a CA do I generate the csr and send that to our local people for the certificate?  And applying the new certificate is there any danger of an outage?

[raymond00 · Accepted solution]

Check out the below article. These are self-signed certs that can be regenerated. Thanks!

http://voiceonbits.com/2011/03/02/scenario29-certificate-expired-%ccm_unknown-cert-0-certexpiryemergency/

[gene.evans]

Just to clear this up for myself.  How do you determine if they are self signed or CA?

[raymond00 · Accepted solution]

The RTMT alert tells you the cert type.

Date: Aug 26 17:01:49

Machine Name: utslcucmp1 - need to generate CSR

Severity: Notice

App ID: Cisco Certificate Monitor

Message: : 0: utslcucmp1.williams.com: Aug 27 2013 00:01:49.274 UTC : %UC_CERT-5-CertValidityOver30Days: %[Message=Certificate expiration Notification. Certificate name:CallManager.der Unit:CallManager Type:own-cert Expiration:Fri Oct 25 09:08:][ClusterID=][NodeID=utslcucmp1]: Alarm to Indicate certificate to Expiry is approaching but expiry date is more than 30 days

More info on certs: http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a00808e9e1e.shtml

[gene.evans]

Thank You Raymond for your assistance.