Upgrade cucm from 8.5 to 9.1 : Security issue (CTL Files)

[Driss BENATTOU]

Hello All,

I am in the process of performing a P2V upgrade from CUCM 8.5 to CUCM 9.1. The same IP address and Hostname on the new cluster will be kept.

Could you please advise on what are the right steps to do this operation, knowing that I have deployed CTL files on my phones using usb etokens.

My cluster includes 1 PUB + 8 SUB distributed over WAN.

Total phones is : 1800 phones

Only the Publisher will be upgraded to virtual instance. All subscribers servers will be kept at mcs.

Actually, I'm working on the Publisher to restore the cucm DB v8.5, do an upgrade to v9 and test all phones behavior before upgrade the whole cluster.

Do i to take care about subscribers before upgrade, knowing that tftp role is on different servers not only the publisher ?

What is the behaviour of phones when going to the new cluster ?

What is needed to be done in maintenance mode and in production mode ?

Thanks,

Driss

[Hermanus Janse van Vuuren]

Please see the following document on Page 10 Upgrade of all nodes in Cluster:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/elmuserguide/9_1_1/license_migration/CUCM_BK_CBF8B56A_00_cucm-license-upgrade-guide.pdf

[Joseph Martini]

What version of 8.5.1 are you on?  Look out for https://tools.cisco.com/bugsearch/bug/CSCtn50405/ which causes certificates to not be backed up properly so when you do the backup/restore you could run into problems.  The good news is that you are using CTLs which uses a physical token so you cannot run into a state where the phones do not trust anything (unless the tokens are lost/damaged of course).