CUCM 12.0.1.21900-7 generating and deleting certificate

[mljevakovic]

Hi,

per print screen in the attahch I have two questions:

1. Do we need regenerate certificate for CUCM.

2. Which certificates is safely to remove?

M

[Jaime Valencia]

Look at your service certificates to determine if they need to be re-generated or not

Certificates that are expired are no longer valid for any use.

[mljevakovic]

"Look at your service certificates to determine if they need to be re-generated or not"

IP telephony work without any issue, and the rest of certificates are valid, so we don't need to regenerate them?

"Certificates that are expired are no longer valid for any use."

So any certificates which is expired we can remove?

[Jaime Valencia]

Any certificate in the x-trust store that is expired doesn't work anymore, if those are from external servers, you will need to import valid certificates again.

[Vaijanath Sonvane]

Hi,

Even though your IP Telephony is working without any issue, make sure to re-generate expired service certificates and delete expired certificates that are in trust store. You can use attached document and follow the procedure in sequence to re-generate and delete expired certificates.

[HARIS_HUSSAIN]

You need to remove the expired certificates. Based on the screenshot it is CallManagerTrust certificates which were expired in 2018.
Follow the procedures carefully and perform the same during a downtime.

*** Please rate helpful post; Mark "Accept as a Solution" if applicable

Thanks,
Haris