CUCM 11.5 multi SAN certificate error

[iptsupport]

Hello ,

I try to generate certificate multi–SAN in CUCM PUB and I got error.

"csr export operation failed for the nodes cup-pub, cucm-sub "

my CUCM version is 11.5

the replication is good.

any idea?

[Nithin Eluvathingal]

Have  you tried restarting the service and try again  generating the CSR?

[iptsupport]

what is impact of reset "Platform Administrative Web Service" ?

[iptsupport]

I perform reset but it still problem. 

[Carlo Poggiarelli]

Hi

did you restart Cisco Tomcat service?

If you go to Cisco Unified Serviceability menu on the top right corner on the Pub and you go to tools Network Services… if  you select the Sub an click go, do you receive an error?

Please let us know.

Regards

Carlo

[iptsupport]

I perform reset to cisco Tomcat  and I didn't see any error on the network service .

[Carlo Poggiarelli]

Hi,

It temporarily makes unavailable cucm web services such as Corporate directory, EM login and , obviously, the admin pages  for the node you are restarting the service.. but it lasts maximum 5 minutes depending on your deployment.

HTH

Regards

Carlo

[iptsupport]

I am waiting for maintenance window .

Are there other tests that can be done? These are servers located in 2 different sites.

if I try generate certificate   from CUCM subscriber I got error on SUB:

"csr export operation failed for the nodes cup-sub, cucm-pub"

(upside from PUB)  

[Nithin Eluvathingal]

You said these servers are spread across different data centers. I assume, the CSR export is working for the nodes in the same Data center and the one failing are on a different node.

Can you share the output of  "show network Cluster"

[Carlo Poggiarelli]

Based on your information, you are probably hitting the following bug:   CSCvw09332

https://bst.cisco.com/bugsearch/bug/CSCvw09332

As workaround you need to reboot Sub and IMP node.

HTH

Regards

Carlo