IM and Presence 10.0

[orddie234]

Hi All,

I was trying to setup an signed ssl cert for my presence install but i broke something.  Thus far i have only generated a sign request for the tomcat web services, and uploaded the root cert as well as the signed cert from the vender.

Now call manager does not see the services running in im and presence server.  When i do a diag in IM and presence server, the following fail

erify Cisco IM and Presence Data Monitor service is running on all nodes.

Could not determine the status of the Cisco IM and Presence Data Monitor service on the following nodes im01.domain.com

On all impacted nodes verify that no other services are currently starting, stopping or restarting. Wait until all service operations have completed and retry the test. Check System > Notifications and verify that communication between IM and Presence and the CUCM publisher node is working. If the CUCM publisher node has been upgraded to a Maintenance Release or Service Update and the IM and Presence nodes in the cluster are not being upgraded, you must reboot them.

Verify Cisco XCP Connection Manager's service status		Cisco XCP Connection Manager service is currently down.service state=[UNKNOWN] reason=[null]	To start the Cisco XCP Connection Manager service, please use the Serviceability application (fix)
Verify Cisco XCP Authentication's service status		Cisco XCP Authentication service is currently down.service state=[UNKNOWN] reason=[null]	To start the Cisco XCP Authentication service, please use the Serviceability application (fix)

[Clifford McGlamry]

If you look on CUCM, there are Tomcat-Trust certs....essentially copies of the certificate so that CUCM knows to trust it. 

Chances are good that if you replaced the tomcat cert on the IM&P server you'll need to delete the existing Tomcat-Trust on the CUCM servers, and upload an exported copy of the TOMCAT cert into them as a tomcast-trust. 

This is a real pain, but I've had to do it to get servers relinked before when a cert replacement breaks something.

[gabiulici]

Just Generate Self-signed from Cisco Unified OS Administration/Security on both server and wait 10 minutes and will work.

Cheers 

[Philip Denton]

I'm having the same problem.  In an attempt to change the IM&P default domain I disabled HA on the Presence Group then disabled the requisite services on each member of the cluster then went to the Advanced Presence settings but the option was still grayed out.  Now when I look in the system troubleshooter I see the message above (Could not determine the status of the Cisco IM and Presence Data Monitor service on the following nodes) in addition to errors resulting from the services I stopped.  I have made sure no services are starting, stopping, or restarting and retried the tests with the same results.

We are in the process of installing certs for tomcat and cup-xmpp.  So far tomcat is done and I was working on xmpp when I realized the default domain field was adding an invalid SAN to the CSR.

Any ideas?