CUCM Certificate

[Daniov1]

Hi all,

After CUCM Server installed there is CA certificate which generated by default after installation named "VeriSign _Class_3_Secure_Server_CA".
This certificate issued by "VeriSign class 3 public primary certificate authority- G5".
Certificate Purpose: tomcat-trust
Certificate group: product-cpi

This certificate going to be expire on the next week.
What was this certificate generated for?
What are the implications after this certificate expires?

Thanks.
Danielo.

[Chris Deren · Accepted solution]

This public cert comes pre-installed for "Call Home" feature that allows CUCM/etc to communicate with Cisco.  If you do not use Call Home feature then you do not need this cert and you can safely delete it.

[Anthony Holloway]

What if we do use call home? There are also a lot of public certs in UCCX too. I've never come across a document which explains what to do if they expire, but my guess would be that you up grade the system, and Cisco ships new certs (and hopefully has install scripts which delete old ones). I wonder...

[RichardMoore20826]

We are not using Call Home; what are the steps to delete the Verisign cert? I see a delete button in the OS Admin page once I open the Verisign cert, can I just delete it and restart tomcat?

[Daniov1]

Hi

Refer this document 

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200199-CUCM-Certificate-Regeneration-Renewal-Pr.html#anc13

[RichardMoore20826]

Thanks for the reply

Found this field notice

https://www.cisco.com/c/en/us/support/docs/field-notices/705/fn70511.html