09-23-2021 11:00 AM
Hi,
Need assistance on regenerating CUCM 10.5 security certificates. Most of the certificates are expired. Please suggest best steps to regenerate.
Please see the attached notepad.
CertificateSort Common Name Type Distribution Issued By Expiration Description
CallManager CUCM Self-signed CUCM CUCM 08/22/2019 Self-signed certificate generated by system
CallManager-trust CAPF-b17dce92 Self-signed CAPF-b17dce92 CAPF-b17dce92 08/16/2019 Trust Certificate
CallManager-trust CAPF-cd0594d3 Self-signed CAPF-cd0594d3 CAPF-cd0594d3 08/22/2019 Trust Certificate
CallManager-trust CAPF-24ca3693 Self-signed CAPF-24ca3693 CAPF-24ca3693 08/22/2019 Trust Certificate
CallManager-trust CAPF-78729b2a Self-signed CAPF-78729b2a CAPF-78729b2a 08/22/2019 Trust Certificate
CallManager-trust CUCM Self-signed CUCM CUCM 08/22/2019 Trust Certificate
CallManager-trust CAPF-d3c36c19 Self-signed CAPF-d3c36c19 CAPF-d3c36c19 08/22/2019 Trust Certificate
CallManager-trust CUCM Self-signed CUCM CUCM 08/22/2019 Trust Certificate
CallManager-trust CAPF-147763e0 Self-signed CAPF-147763e0 CAPF-147763e0 08/22/2019 Trust Certificate
CallManager-trust CAPF-47c72a9e Self-signed CAPF-47c72a9e CAPF-47c72a9e 08/19/2019 Trust Certificate
CallManager-trust CAPF-affeb103 Self-signed CAPF-affeb103 CAPF-affeb103 03-09-2021 Trust Certificate
CallManager-trust CAPF-77aa10d5 Self-signed CAPF-77aa10d5 CAPF-77aa10d5 03-09-2021 Trust Certificate
CallManager-trust CAPF-fbaec16d Self-signed CAPF-fbaec16d CAPF-fbaec16d 03-09-2021 Trust Certificate
CAPF CAPF-78729b2a Self-signed CAPF-78729b2a CAPF-78729b2a 08/22/2019 Self-signed certificate generated by system
CAPF-trust CAPF-b17dce92 Self-signed CAPF-b17dce92 CAPF-b17dce92 08/16/2019
CAPF-trust CAPF-78729b2a Self-signed CAPF-78729b2a CAPF-78729b2a 08/22/2019
CAPF-trust CAPF-77aa10d5 Self-signed CAPF-77aa10d5 CAPF-77aa10d5 03-09-2021
tomcat-trust ABC_CA CA-signed CUCM ABC_Root_CA 10-06-2020 Trust Certificate
Regards
Jagdish
Solved! Go to Solution.
09-24-2021 03:05 AM
No an update does not do anything with the certificates. I would advise against this. Better to renew your certificates and then upgrade once you have verified that all phones can successfully register and receive updated configuration.
09-23-2021 11:07 AM
Please have a look at this document. Cisco UC Certificates Renewal Guide
09-24-2021 02:57 AM
Hi Roger,
Just a thought.. what if i upgrade the CUCM cluster from 10.5 to 12.5 without renewing the certificates ??
Hope refresh upgrade regenerates/updates all the security certificates right ?? Please suggest.
Regards
Jagdish
09-24-2021 03:05 AM
No an update does not do anything with the certificates. I would advise against this. Better to renew your certificates and then upgrade once you have verified that all phones can successfully register and receive updated configuration.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide