CUCM certificate expire

[yellomello]

Hi all,

recently I have regenerated CUCM certificates on customer site. The regeneration itself was successful but the certificates of type "trust-certs" haven't been regenerated or at least, not all of them. Now I still receive alarms that "tomcat-trust" & "CallManager-trust" are expired. The only option I have is to download or delete these certificates. Does someone know how I can resolve this issue and how it will affect my system if you do / don't do it ?

The customer has CUCM PUB and SUB and is on version 8.6.

If more information are required, I am happy to provide them.

Thanks in advance,

Cheers

Michael                  

[Joseph Martini · Accepted solution]

To be extra safe you can download all the expired trust certificated and then delete them from each server.  If something breaks you can always but them back even though nothing should break since they're expired they should be invalid already.  Removing expired certificates should have no impact to your system at all.

[yellomello]

Hi Joe,

thanks for your answer.

After your answer I noticed that after the regeneration of the certificates, that also the "trust-certs" have been generated but with name "server-name-1" (original file "server-name").

However, the old files are still there and that's why I still received these error messages.

Anyway, your tip was correct. 5 stars. Thank you

Topic closed.