CUCM - VPN Phones Certificate

[Ayaz Khan]

Hello,

We currently have some VPN Phones deployed that have a wildcard certificate installed on them. If that certificate was revoked by our CA would the VPN phones continue to work? Can we update the VPN Phones certificate or VPN configurations remotely?"

Thanks,

AK

[Carlo Poggiarelli]

Hi Ayaz.

IP phone can download the new cert from asa only if the old one is still valid.

You should upload the newly created cert to CUCM as phone-vpn-trust and add it to gateway certificates.

Once that has been done, cycle the phone.

HTH

Regards

Carlo