Certificate has Expired

[Rosa Ladera]

Needing a howto installation for renewing Certificate

Message received;

May 11 17:00:00 voip2 local99 0 : 2337: voip2.impa.br: May 11 2020 20:00:00.91 UTC : %UC_CERT-0-CertExpired: %[Message=Certificate expiration Notification. Certificate name:VeriSign_Class_3_Secure_Server_CA_-_G3.der Unit:tomcat-trust Type:own-cert ][AppID=Cisco Certificate Monitor][ClusterID=][NodeID=voip2]: Certificate has Expired and needs to be changed at the earliest

running this software

Active Master Version: 11.5.1.12900-21 Unrestricted
Active Version Installed Software Options:
cmterm-6901-sccp.9-3-1-SR2-2.cop
ciscocm.version3-keys.cop
cmterm-7970_7971-sccp.9-4-2SR3-1.k3.cop
ciscocm.migrate-export-v1.18.cop
cmterm-7975-sccp.9-4-2SR3-1.k3.cop
cmterm-7941_7961-sccp.9-4-2SR3-1.k3.cop
ciscocm.11_5_struts_2_3_32_upgrade_v2.cop
cmterm-69xx-SCCP.9-4-1-3SR3.k3.cop
cmterm-7942_7962-sccp.9-4-2SR3-1.k3.cop
cm-locale-pt_BR-11.5.1.3000-1.cop
ciscocm.ucmap_platformconfig.cop
cmterm-6911-sccp.9-3-1-SR2-3.cop
ciscocm.dst-updater.2018c-el6-00.11.5.1.cop

[Jaime Valencia · Accepted solution]

This topic has been discussed hundreds of times at CSC, and there's a lot of literature on cisco.com on how to handle certificates, most of them specific to CUCM.

Did you review any of that?

[M Rinaldy Aulia · Accepted solution]

Did you found the certificate had been expired?

You can check by opening the CUCM or anything by web.

If it was expired, do regenerate the certificate on OS Admin & Certificate Management

[Roger Kallberg · Accepted solution]

Please have a look at this document for this that I wrote a few weeks back as this is as Java wrote a very common asked question. https://community.cisco.com/t5/collaboration-voice-and-video/cisco-uc-certificates-renewal-guide/ta-p/4077131

[Roger Kallberg]

---

@Rosa Ladera wrote:

Message received;

May 11 17:00:00 voip2 local99 0 : 2337: voip2.impa.br: May 11 2020 20:00:00.91 UTC : %UC_CERT-0-CertExpired: %[Message=Certificate expiration Notification. Certificate name:VeriSign_Class_3_Secure_Server_CA_-_G3.der Unit:tomcat-trust Type:own-cert ][AppID=Cisco Certificate Monitor][ClusterID=][NodeID=voip2]: Certificate has Expired and needs to be changed at the earliest

---

The specific certificate you get the warning for is only used if you use Call Home feature in CUCM. If you don't use that you can safely remove this certificate. If you do use Call Home there are a number of posts that explains how to remove this certificate and replace it with the current.

[Roger Kallberg · Accepted solution]

One example of another post for the same topic. https://community.cisco.com/t5/unified-communications/cucm-11-5-certificate-expiration-feb-2020-verisign-class-3/m-p/3995693