Cisco Phone VPN-trust certificate

S Sadiq · ‎01-27-2017

Hi,

How to upload the Cisco Phone VPN-trust certificate in cucm and what are pre check and post verification I have to follow.

Jonathan Schulenberg · ‎01-28-2017

Here are the relevant documents. Let us know if you have a more specific question after reading them.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/cucos/10_0_1/CUCM_BK_C2F2626C_00_cucm-os-admin-guide-100/CUCM_BK_C2F2626C_00_cucm-os-admin-guide-100_chapter_0110.html#CUCM_TP_M7B4E6D3_00

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html

S Sadiq · ‎02-01-2017

Thanks Jonathan.

Jonathan Schulenberg · ‎02-01-2017

I don't understand your question.

Jaime Valencia · ‎02-01-2017

He already posted this on another thread

https://supportforums.cisco.com/discussion/13191951/data-migration-one-site-another

HTH

java

if this helps, please rate

dianareyes · ‎04-25-2017

Hi,

I thought I'd reach out to the Cisco Community experts, since I haven't been able to find confirmation on this one.

Our phone-vpn certificate recently expired and we are in the process of uploading a new one. I've read through the posted link below, however my question is, instead of creating a new VPN Gateway configuration, can't I just switch out the vpn certificates from the Truststore?

Instead, of creating a completely new VPN Gateway, Profile, group, etc...

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html

Or is it best practice to just create a new one from scratch once the new phone-vpn trust certificate is uploaded?

Any feedback or suggestions will be greatly appreciated!

Thank you,

Diana

dianareyes · ‎04-26-2017

Hi All,

In case this helps anyone or for those who may have the same question. I ended up uploaded the new phone-vpn trust certificate and just switched it out from the CUCM > Advanced Features > VPN Gateway - Truststore - Saved. I then deleted the expired phone-vpn trust certificate.

For testing, I simply used one of the vpn phones, confirmed Common Phone profile was set correctly and tested login. All was successful.

Thanks!

-Diana