CUCM 10.5 Certificates Expired

[Jagadish2]

Hi,

Need assistance on regenerating CUCM 10.5 security certificates. Most of the certificates are expired. Please suggest best steps to regenerate.

Please see the attached notepad.

CertificateSort Common Name Type Distribution Issued By Expiration Description
CallManager CUCM Self-signed CUCM CUCM 08/22/2019 Self-signed certificate generated by system
CallManager-trust CAPF-b17dce92 Self-signed CAPF-b17dce92 CAPF-b17dce92 08/16/2019 Trust Certificate
CallManager-trust CAPF-cd0594d3 Self-signed CAPF-cd0594d3 CAPF-cd0594d3 08/22/2019 Trust Certificate
CallManager-trust CAPF-24ca3693 Self-signed CAPF-24ca3693 CAPF-24ca3693 08/22/2019 Trust Certificate
CallManager-trust CAPF-78729b2a Self-signed CAPF-78729b2a CAPF-78729b2a 08/22/2019 Trust Certificate
CallManager-trust CUCM Self-signed CUCM CUCM 08/22/2019 Trust Certificate
CallManager-trust CAPF-d3c36c19 Self-signed CAPF-d3c36c19 CAPF-d3c36c19 08/22/2019 Trust Certificate
CallManager-trust CUCM Self-signed CUCM CUCM 08/22/2019 Trust Certificate
CallManager-trust CAPF-147763e0 Self-signed CAPF-147763e0 CAPF-147763e0 08/22/2019 Trust Certificate
CallManager-trust CAPF-47c72a9e Self-signed CAPF-47c72a9e CAPF-47c72a9e 08/19/2019 Trust Certificate
CallManager-trust CAPF-affeb103 Self-signed CAPF-affeb103 CAPF-affeb103 03-09-2021 Trust Certificate
CallManager-trust CAPF-77aa10d5 Self-signed CAPF-77aa10d5 CAPF-77aa10d5 03-09-2021 Trust Certificate
CallManager-trust CAPF-fbaec16d Self-signed CAPF-fbaec16d CAPF-fbaec16d 03-09-2021 Trust Certificate
CAPF CAPF-78729b2a Self-signed CAPF-78729b2a CAPF-78729b2a 08/22/2019 Self-signed certificate generated by system
CAPF-trust CAPF-b17dce92 Self-signed CAPF-b17dce92 CAPF-b17dce92 08/16/2019
CAPF-trust CAPF-78729b2a Self-signed CAPF-78729b2a CAPF-78729b2a 08/22/2019
CAPF-trust CAPF-77aa10d5 Self-signed CAPF-77aa10d5 CAPF-77aa10d5 03-09-2021
tomcat-trust ABC_CA CA-signed CUCM ABC_Root_CA 10-06-2020 Trust Certificate

Regards

Jagdish

[Roger Kallberg]

Please have a look at this document. Cisco UC Certificates Renewal Guide 

[Jagadish2]

Hi Roger,

Just a thought.. what if i upgrade the CUCM cluster from 10.5 to 12.5 without renewing the certificates ??

Hope refresh upgrade regenerates/updates all the security certificates right ?? Please suggest.

Regards

Jagdish

[Roger Kallberg · Accepted solution]

No an update does not do anything with the certificates. I would advise against this. Better to renew your certificates and then upgrade once you have verified that all phones can successfully register and receive updated configuration.