CUCM 8.x: self-signed certificates expiring

[raziel78kain]

Hello,

we have a CUCM 8.x cluster (made by 3 servers).

We have noticed that the self-signed certificates are going to expire.

Since we have seen that there are several certificates to regenerate (tomcat, ipsec, CallManager, CAPF, TVS), and since we have read around that we could have issues with the devices  interacting with the CUCM (first of all the phones, but even other servers, Cisco and not) if we don't regenerate them correctly, we would like to know the right procedure to regenerate them on all the servers, and to update them on the various devices.

TIA and regards.

[Giovanni Sciotti]

Hello! Thanks for good suggestion. Great Video!

I understand a bit more about certificates involved in UC infrastructure now.

I still have some doubts about impacts on production environments when expecially callmanager.pem certificate expires

Thanks

Giovanni

[Nadav]

Hi Jaime,

I can't access that video with my account, is it found elsewhere?

[Jaime Valencia]

I'm afraid not, the video is in PEC (Partner Education Connection), which means a CCO associated to a Cisco partner is required to access it.

[raziel78kain]

Hello Jaime,

I've found the PDF showed on that video:

https://salesconnect.cisco.com/#/content-detail/ab5ace36-2e9e-472a-9a74-604277e586ed

I've a question for you regarding the page 85/112 (Avoiding phone trust list update failure): What does the author mean with "Track phone(s) not registered to the cluster before regenerating ccm+tftp, tvs certificate"?

Thanks and regards.

[Nadav]

Hi raziel,

The link doesn't work, any chance you can provide the name of the PDF/presentation?

[raziel78kain]

Hello Nadav,

try to:

• go on https://salesconnect.cisco.com/#/
• search "piw certificate management pdf"

Regards.

[raziel78kain]

Hello Jaime,

do you have any comment about the page 85/112 (Avoiding phone trust list update failure) of the document showed on that video (https://salesconnect.cisco.com/#/content-detail/ab5ace36-2e9e-472a-9a74-604277e586ed)?

In particular, what does the author mean with "Track phone(s) not registered to the cluster before regenerating ccm+tftp, tvs certificate"?

Thanks and regards.