CUCM 11.5.1.15900-18 "Orphaned" Trust Certificates

[TONY SMITH]

Hi,

I'm reviewing this cluster, which has three nodes all CUCM and no IM&P. One TVS certificate needs to be renewed which is fine.  However looking for expired certificates there are quite a few old "trust" certificates with no apparent matching certificate.

For example the Publisher has three "CallManager-trust" and one "CAPF-trust", expired 2016 or 2018.  

The two Subscribers each have one "CallManager-trust", same ID as one of those on the Pub, and same expiry date.

There a no expired CallManager or CAPF certificates on any of the servers.

My question, can these orphaned "-trust" just be deleted, or do I need to do some more checks f

[Roger Kallberg · Accepted solution]

You can remove them without any impact.

[TONY SMITH]

Thanks, I have a few bits and pieces to do on that cluster so will deal with them then.