IP Phones validating SSL certificates

[Gordon Ross]

We point our Cisco IP Points at one of our own (non-CUCM) webservers for some custom directory services. We've recently changed the SSL certificate on the website and the phones will no longer work with the custom directory saying "Host not found". Checking the phone logs, the phones aren't trusting the website's SSL certificate. (They are contacting the CUCM TVS service)

I've added the root & intermediate certfificate to the Tomcat-Trust store and restarted the TVS service (as well as rebooting the phone) but the phone still fails to accept the SSL certificate.

What minor step am I missing?

[Roger Kallberg]

Did you restart Tomcat after you uploaded the CA certificates?

[Gordon Ross]

I've restarted Tomcat on all cluster nodes and then restarted the TVS service. Still no dice.