cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

141
Views
15
Helpful
2
Replies
Beginner

IM&P Certificates

All the certificates in IM&P have expired. I understand the premise behind Tomcat and IPSEC which i have regenerated. What are the other critical certs that needs to be regenerated. I could think of below 3 that needs to be addressed. Wanted to make sure. These are self-signed certs.

cup

cup-xmpp

cup-xmpp-s2s

Alos, i see a couple of tomcat-trust certs in call-manager that are pertaining to IM&P cluster. When i regenerated the tomcat certs in IM&P, shouldn't the trust certs pertaining to IM&P in CUCM nodes automatically renew? How can i address the situation with tomcat-trust certs for IM&P in CUCM nodes. Is it a manual export of tomcat certs from IM&P and importing them to each CUCM node?

2 REPLIES 2
Hall of Fame Master

Re: IM&P Certificates

All expired certs should be re-generated, cup-xmpp is the critical one used by Jabber clients for IM/P and would generate warnings on Jabber client if expired.  

Highlighted
VIP Advisor

Re: IM&P Certificates

I agree, all expired certs should be corrected, if for nothing else, to squelch the alarms generated by the system, so you can focus on the real problems.

By the way, the certs and their purpose are listed here:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/configAdminGuide/10_5_1/CUP0_BK_CE43108E_00_config-admin-guide-imp-105/CUP0_BK_CE43108E_00_config-admin-guide-imp-105_chapter_01010.html#CUP0_RF_C4534017_00

Anthony Holloway

If you found this post helpful, please consider clicking that helpful button!

And for a limited time, by marking helpful posts, you're also helping Doctors Without Borders
CreatePlease to create content
Content for Community-Ad
FusionCharts will render here