As you have self signed certificates, CA certs are not needed and trust certificate will be there by default in CUCM.
Reg impact for ipsec cert, it impacts DRF (backup and restore). if this is expiring, you can simply regenerate and reboot the node in which it expired to complete the process. Please refer the below link for the procedure:
You will not be able to up load the (tomcat) certificate as the CA (and intermediate) certificates will no be present in the server's trust store. You will have to upload those first.
Thank you for the reply. What I wanted to know is what if I won't upload any of those certs and what type of impact will be there. Say I am getting an alert for ipsec.der certificate gonna expire. What should I do here since it is a self signed certificate. Just regenerate it or request csr and go through the process?
If your requirements have not changed (i.e. if you still don't need CA signed certificates) you may as well regenerate the (tomcat/ipsec-trust) self-signed certificates.
As you have self signed certificates, CA certs are not needed and trust certificate will be there by default in CUCM.
Reg impact for ipsec cert, it impacts DRF (backup and restore). if this is expiring, you can simply regenerate and reboot the node in which it expired to complete the process. Please refer the below link for the procedure:
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
