Tomcat

[George Clark]

Quick question we have 7 cm servers to update tomcat cert do we have to do a csr on each server for tomcat get it signed and upload it to the same server ?

[Jaime Valencia]

If your version doesn't have the option for multi-san certificates when generating the CSR, yes. That's the way it was done before multi-san was an option, per server certificates. 

[George Clark]

We are on cucm 11.5.1 so if we generate on publisher sign it and upload it will replicate then we don’t have to do 1 for each

[Nithin Eluvathingal · Accepted solution]

Use Multi san, it update all the nodes listed. But you need to restart the tomcat service on all node. Refer the below guide.

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/118731-configure-san-00.html