06-23-2016 05:36 AM - edited 03-19-2019 11:17 AM
On a UCM 10.5 cluster, we have replaced the expired Root CA certificate with a new one. We disabled certificate change notification on all servers in the UCM cluster and the IM&P intercluster sync agent. Then, we deleted the Root CA certificate. After we deleted the Root CA certificate, we started these services again and uploaded a new version of the Root CA certificate.
All the CUCM servers in the cluster received the new Root CA certificate from the CUCM Publisher. However, the IM&P servers received an outdated version of that same certificate.
Is there a defect of some sort in which the old version of the certificate is stored somewhere and is propagated through the Intercluster Sync Agent?
06-28-2016 12:44 PM
Yes there was a defect regarding what I believe you are experiencing. It is noted in CSCuy13916.
Have you tried deactivating and re-activating the TFTP service on your IM&P servers?
06-28-2016 12:44 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide