Regenerate self signed certificate for Cisco Tomcat on a CUCM

[themizzz21]

Hello,

I'm trying to understand the impact of regenerating the self signed certificate for CUCM's Cisco Tomcat on the operation of internal jabbers.

If this happens, the next time a user opens jabber, does he/she have to go through the process of accepting the new certificate?

Thank you.

[b.winter]

Yes, if the self-signed Tomcat certificate changes, then the users have to accept this new certificate again.

[Roger Kallberg]

Yes all users will have to accept the new certificate. That’s why it is recommended to use signed certificates for the once that are user facing. Apart from the certificate on the MRA E all of these certificates can be signed by an internal CA. Baring that this CA is put into all clients list of trusted CAs.

[Nithin Eluvathingal]

If this happens, the next time a user opens jabber, does he/she have to go through the process of accepting the new certificate? Yes, user need to accept the certificate. 

This is not applicable, if the certificate of   Root CA who signed the sever certificate is available on the users  Device trust store.

2.12.0.0