Cisco Phone VPN-trust certificate

[S Sadiq]

Hi,

How to upload the Cisco Phone VPN-trust certificate in cucm and what are pre check and post verification I have to follow.

[Jonathan Schulenberg]

Here are the relevant documents. Let us know if you have a more specific question after reading them.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/cucos/10_0_1/CUCM_BK_C2F2626C_00_cucm-os-admin-guide-100/CUCM_BK_C2F2626C_00_cucm-os-admin-guide-100_chapter_0110.html#CUCM_TP_M7B4E6D3_00

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html

[S Sadiq]

Thanks Jonathan.

[Jonathan Schulenberg]

I don't understand your question.

[Jaime Valencia]

He already posted this on another thread

https://supportforums.cisco.com/discussion/13191951/data-migration-one-site-another

[dianareyes]

Hi,

I thought I'd reach out to the Cisco Community experts, since I haven't been able to find confirmation on this one.  

Our phone-vpn certificate recently expired and we are in the process of uploading a new one.  I've read through the posted link below, however my question is, instead of creating a new VPN Gateway configuration, can't I just switch out the vpn certificates from the Truststore?

Instead, of creating a completely new VPN Gateway, Profile, group, etc...  

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html

Or is it best practice to just create a new one from scratch once the new phone-vpn trust certificate is uploaded?

Any feedback or suggestions will be greatly appreciated!

Thank you,

Diana 

[dianareyes]

Hi All,

In case this helps anyone or for those who may have the same question.  I ended up uploaded the new phone-vpn trust certificate and just switched it out from the CUCM > Advanced Features > VPN Gateway - Truststore - Saved.  I then deleted the expired phone-vpn trust certificate.

For testing, I simply used one of the vpn phones, confirmed Common Phone profile was set correctly and tested login.  All was successful.

Thanks!

-Diana