cucm out of date certificates

[johnsnave1]

Hi, I have a customer that has experienced CUCM DRS backup problems. The are running version 7.1.5. I have attached a show output and a screen shot. It looks like the certificates have expired on the publisher. Could you please confirm that this is likely to cause the backup failure and if it is how do I renew the certificates?

Many thanks, John.

[Deepak Rawat · Accepted solution]

Absolutely yes, it can cause the issue with DRF backup specially the IPSec certificates. Simply, go to CUCM OS Administration page >> Security >> Certificate Management >> Find

Click on the Common Name next to tomcat certificate and then Regenerate

Click on the Common Name next to ipsec and the Regenerate

After this, restart below services from CUCM CLI:

utils service restart Cisco Tomcat

utils service restart Cisco DRF Master (will only work on Publisher)

utils service restart Cisco DRF Local

Looking at the Screenshot, it seems to fail for CUCM subscriber hence do the above process for that node only. In case, if the certificates are expired on Publisher as well then do it for that as well (simply open the Tomcat and Ipsec certificate server on Publisher and check the Expiry Date to be sure about it.) Also, do the above process for tomcat and ipsec certificate respectively and not for tomcat-trust and ipsec-trust

Regards

Deepak

[johnsnave1]

Many thanks Deepak - greatly appreciated!

[Jaime Valencia · Accepted solution]

https://www.youtube.com/watch?v=xTnS7HEADdU&index=8&list=PLFuOESqSTxEvZChqWgAJanctohRMe99CR

[johnsnave1]

Many thanks Jaime. Excellent video. You must be the busiest person at Cisco - I hope they pay you well.

[dsobrinho]

Hi Jaime,

how are you doing?

So, I would like to know if you have a vídeo for that specific problem of DRS certificate expired? regenerated the ipsec and tomcat?

Tks