Deleting old callmanager certs

[Brad Martin]

Running callmanager version 9.1.2.10000-28 with one pub and three subs. There is a tomcat-trust and callmanager-trust for a subscriber that has been removed from the cluster some time ago that is still there and is now notifying pending expiration. I turned off certificate expiry monitor and certificate change notification services and deleted the certs. After services are restarted, certs are still there.

Better to regenerate or let them expire?

[Gordon Ross]

Even once they expire I think you'll still get the annoying emails.

The process you followed sounds correct. Just make sure you stop the services on all servers at the same time before you delete the cert.

GTG

[Brad Martin]

Thanks for the reply. Both services were stopped on all four callmanagers before deleting. Even tried it twice as I thought I must have made a mistake. Going to reboot cluster this weekend (uptime near 450 days) and try again.

[Jon Clark1]

Brad,

You may be hitting a bug that makes the certs reappear. Sorry I dont have a bug ID but i remember reading about them.Open a case with TAC before rebooting your cluster.  Hope this helps.