Get old previously generated CSR from Expressway Edge

[alex.kanaykin]

Hi guys!

Is there a method to get old CSR file? To renew the expressway server certificate public authority asks for CSR, but generating new CSR procedure on expressway wil generate new private key too. So to just renew we have to get an old csr file from expressway. I've logged in as root to my expressway server, but there is no CSRs in  /tandberg/certs/.

with regards, Alex

[Anthony Holloway]

I'm fairly certain that every time you renew a cert, you need to generate a new CSR. I'm not sure what your concern over generating a new private key is though. Why does that concern you?

https://www.geocerts.com/support/do-i-need-a-new-csr-to-renew-my-ssl-certificate

[Andrew Skelly]

Anthony, as usual, raises a valid question.  Is there a reason you must have the current key and not generate a new one?  Also, not sure what version of VCS you are using but have you looked at the associated documentation (link below) for certificate creation and use?  You mentioned looking in /tandberg/certs but in looking over some of the documentation it calls out different folders.  Double check the documentation to make sure you are looking in the correct place if you truly need a copy of the existing key.

■ When you generate a CSR in X7, the application puts csr.pem and privkey_csr.pem into
/tandberg/persistent/certs.
■ When you generate a CSR in X8, the application puts csr.pem and privkey.pem into
/tandberg/persistent/certs/generated_csr.

https://www.cisco.com/c/en/us/support/unified-communications/telepresence-video-communication-server-vcs/products-installation-and-configuration-guides-list.html