Renewal a CA-signed Certificate in CUCM

[A_]

my understanding is, that I can't use regenerate for third-party certificates? If I use the regenerate function of CUCM, then it creates a self-signed certificate? Is the only way to renewal a certificate that is going to expire to generate a new CSR?

So I never should use regenerate for ca-signed certificates? Is this correct?

[Mike_Brezicky · Accepted solution]

This is correct - if you have a CA signed cert, only use regenerate if you want to revert back to self signed.

Otherwise, when needing to replace / update a CA cert, use the Generate CSR option and go through the process of acquiring a new CA cert. Generating the CSR will have no impact on the current cert or services.