Cisco Prime License Manager -Security Error

[b.alrasheed]

Hello guys
Please help us
A problem with interruption of licenses and inability to synchronize

The last synchronization attempt on 2023-Nov-28 11:10:58 failed due to a certificate error. The last successful synchronization with this instance was Never.

The servers have been running since 2013
There was a crash in the database
We retrieved exact copies from 2020
Licenses stopped
License manager for all servers running from PUB

I did not know the detailed steps for renewing certificates and how to activate them

System version: 9.1.1.20000-5

[Nithin Eluvathingal · Accepted solution]

Your CUCM version is outdated and no longer supported. You should upgrade to the latest version as soon as possible. The current version is 14 and version 15 is coming soon.

The error message indicates that you have expired tomcat certificates. You need to renew them by following this guide. Then, try again. I also suggest that you remove the instance and add it back to PLM.

If you are not familiar with CUCM, I recommend that you contact a partner who is experienced in collaboration to assist you.

: https://community.cisco.com/t5/collaboration-knowledge-base/cisco-uc-certificates-renewal-guide/ta-p/4077131

[b.alrasheed]

What is meant by the team that signs the certificates?

Do we send the signature of the certificates to a support team from Cisco?
Or we may modify the certificates and then re-upload them

The other problem is that the support has ended and we have not renewed the contract

[b.alrasheed]

I will review the link before taking any steps
Thank you sir Nithin Eluvathingal

[b.alrasheed]

Step 4. Send the CSR to the Certificate Authority.

Do we send the signature of the certificates to a support team from Cisco?
Or we may modify the certificates and then re-upload them

[Nithin Eluvathingal · Accepted solution]

You can use self-signed certificates as well. You do not send the CSR to Cisco, but to your CA, which can be internal or external.

Your Windows or AD team can provide you with a signed certificate if you give them the CSR.

[b.alrasheed]

I have implemented all the steps listed in the link
It is still not activated

Usage data was updated but synchronization failed for one or more product instances.

did not register - SecurityError

[Nithin Eluvathingal]

Did you renewed your certificates ?

[b.alrasheed]

Yes
I renewed the certificates by following the steps I indicated in the link

• Yes, delete the product instance from the ELM and re add the CUCM

• I renewed the certificates & signing (tomcat- CallManager- CAPF)

• NTP server sync is running successfully

[b.alrasheed]

The system has not synchronized successfully with Enterprise License Manager for 52 days. If successful synchronization does not occur within the next 8 days, you will no longer be able to provision users and devices.