I know this is an old thread, however, I just had this issue on UCCX 11.5.1. The same issue as the OP. Here is my fix:
Login to the publisher under Cisco Unified CCX Serviceability.
Navigate to Tools->Control Center - Network Services
Verify Cisco Unified CCX Database shows as Out-of-Service
Navigate to Tools->Data Store Control Center->Replication Servers.
Disable CDS and HDS. This is a non-service-impacting event. Just don't try to make changes while its disabled
Navigate to Tools->Data Store Control Center->DataStores.
Confirm that only publisher was present.
Go back to Replication Servers page and select Reset Replication.
Wait 15 minutes and then re-enable CDS and HDS.
Check for fix by navigating back to the Data Store Control Center and confirm that both servers were listed as "yes" under Read Access AND Write Access.
Navigate to Tools->Control Center - Network Services
Verify Cisco Unified CCX Database shows as In-Service
... View more
I have scoured the documentation for the different types of cards and as many datasheets as I could possibly find. I cannot locate a specific place that dictates exactly how many individual serial circuits are able to be used on a 4431 router. Technically, I could install 3x NIM-8MFT-T1/E1 cards with the appropriate PVDMs but how many of them could I actually use? Surely the router would recognize a maximum number of configurable PRIs.
I have found this link about the PVDMs and am a little confused about the support of PVDMs on the 4431 platform.
PVDM4 Platform Availability and Performance
I've clicked on (and read) nearly every link here:
http://www.cisco.com/c/en/us/support/routers/4441-x-integrated-services-router-isr/model.html
I *thought* the solution might have been here:
http://www.cisco.com/c/en/us/support/docs/routers/4000-series-integrated-services-routers/118792-config-isr-00.html
Does anyone have a document of any sort in which Cisco tells you how many NIM cards you can expect to use for PRI circuits?
... View more
There are actually several URLs to use.
5.5.0 U2
https://my.vmware.com/web/vmware/details?downloadGroup=OEM-ESXI55U2-CISCO&productId=353
5.5.0 GA Install CD
https://my.vmware.com/web/vmware/details?productId=353&downloadGroup=OEM-ESXI55GA-CISCO
6.0
https://my.vmware.com/web/vmware/details?productId=491&downloadGroup=OEM-ESXI60GA-CISCO
Use this to make sure your hardware and software are compatible:
UCS HW and SW Interoperability
http://www.cisco.com/web/techdoc/ucs/interoperability/matrix/matrix.html
Hope this helps. Please rate if helpful.
... View more
I actually found the Cisco document that details the platforms that support 4096 encryption. In case the link gets broken, this was the statement as of July 25, 2016.
----------------------------------------------------------------------------------------------------------------------------------
CSR Generation
This is the first step in the lifecycle of any X.509 digital certificate. Once the private/public Rivest-Shamir-Adleman (RSA) or Elliptic Curve Digital Signature Algorithm (ECDSA) keypair is generated (Appendix A details the difference between the use of RSA or ECDSA), a Certficate Signing Request (CSR) is created. A CSR is basically a PKCS10 formatted message that contains the public key and identity information of the requesting host. PKI Data Formatsexplains the different certificate formats applicable to the ASA and Cisco IOS ® .
Notes: 1. Check with the CA on the required keypair size. The CA/Browser Forum has mandated that all certificates generated by their member CAs have a minimum size of 2048 bits. 2. ASA currently does not support 4096 bit keys (Cisco bug ID CSCut53512) for SSL server authentication. However, IKEv2 does support the use of 4096 bit server certificates on the ASA 5580, 5585, and 5500-X platforms alone. 3. Use the DNS Name of the ASA in the FQDN field of the CSR in order to prevent Untrusted Certificate warnings and pass Strict Certificate check.
----------------------------------------------------------------------------------------------------------------------------------
ASA 4096 RSA key
I know this is an old thread, but I searched for an hour after I found this post. Would have been nice to have it here.
... View more
