Roomkit, SX80, A certificate is about to expire. Please, update.

[BW Dijk]

Hello all,
At client’s sites and at our office we have several codec's, Roomkit, Roomkit Plus, SX80, that is giving a Certificate Expiration issue. I read the admin guides and tried to find similar issues online and here in the Cisco Community but could not find a solution to fix this issue.

Any one any idea?

PS: That is not an operational issue I know, but it is visible on the touchscreen, and I am getting questions. And users are getting nerves.

Best regards, Bert

[BW Dijk]

Forgot to mention the firmware version: ce 9.15.3.22

[Roger Kallberg]

Have you checked what certificate that is about to expire?

[BW Dijk]

Yes I checked, is for the WEB interface (HTTPS) of the unit.

[Roger Kallberg]

If you’re using the standard self signed certificate it’s just to renew it on the device and if you’re using CA signed certificates you would generate a CSR on the device and have it signed by the CA of choice and then upload the signed certificate on the device.

[BW Dijk]

All I can find about (self-signed) certificates, is that they request a hostname or domain, the codec has neither one, it just has a IP address and that is not even a fixed IP address.....

Any other tips or idea’s

[albertlatshaw]

I am unbale to delete the old expired cert. It is greyed out.. I need to generate a new CSR for CA signature. 

[Nithin Eluvathingal]

Go to Admin guide and refer the topic manage certificates.

2.12.0.0

[BW Dijk]

On page 31 of the [D15374.15 Room Kit Administrator Guide CE9.14, OCTOBER 2020] there is a chapter regarding managing certificates.

>>> But not how to get a new one. <<<

That is my issue.

[Wayne DeNardi]

If you log in to the web interface of the SX80 and go to the Security, then Certificates, you can see a list of which ones are on the unit.   You can click on the View Certificate button and see the expiry date - that will then let you work out which one has expired.  Depending on which one it is, and whether it's critical to your environment, you can make a choice as to whether you can just delete it, or whether you need to add a new one.

[HOLGER HAHN · Accepted solution]

BW Dijk already has figured out which certificate is about to expire!!! The self signed for HTTPS.

But there is no buton to regenerate it. You can only view it.

The good news is:

Just reboot the device and the certificate will regenerate during this process...

[albertlatshaw]

How do I delete it if it is greyed out.. How would I generate a new one?

[BW Dijk]

The solution is to boot the codec and the will regenerate the certificate. Or instal a new software immage

[albertlatshaw]

Rebooting the Codec didn't work, so I am leaning towards a factory reset.. 

[BW Dijk]

Did you ty to upload a new firmware file?