Hello Akhil and Aashish   I have a question, about LSC certs.  I have CUCM cluster in my company, and I am in the process of rolling out LSC certs on multiple 9971 IP Phones.     I am trying to figure out how to automatically roll out LSC certs from CUCM when the IP Phones gets reset to factory default settings.   Currently in CUCM I have to modify CAPF settings for IP phone and chose install option for LSC cert as well as specify the date for 2048 bit cert.  If i do it manually this way, LSC gets installed, and I was able to verify that indeed it gets installed form the phone.   However, when I reset the phone to factory default settings the LSC cert is no longer getting pushed back to the phone automatically, unless i log back into CUCM find the phone and once again select install setting for LSC inside CAPF Section.   The thing is, after resetting phones to factory default i would like the certs to also automatically get pushed from CUCM onto the phones, without me manually logging into CUCM and selecting the phone, then modifying install setting.   Do you guys happen to know if this is intended way of how factory default works with CUCM?  Or is there anyway to somehow modify this behavior for the phone to automatically obtain LSC?   Note after resetting the phone.. all the other... settings get pushed, meaning phone gets an IP Address etc..  It's just i am doing this for over 1000 phones, and prefer to have LSC rolled out automatically even if the phone gets reset to factory default.     I realize there is also a bulk function available to do a bulk load of configurations on multiple phones, however the problem is not in bulk loading the config on multiple phones, but rather insuring that the LSC cert gets deployed automatically.    Please help, I can't seem to figure this one one. ... View more

Hello Sebastien, I have the similar issue, where the uccx1 ( publisher) tomcat and ipsec. pem certificates are about to expire in a few days.  can you please share the steps you have taken to regenerate the certs..? can i regenerate them before it expires ? Regards ... View more

Thank you Sumiaror, your response of pointing out the optimization helped us resolve the issue.. Our issues was Intersite calls from US to UK not working via the ICT..and the traces show the below error.. ccm trace error: 10:17:37.074 |TranslateAndTransport(83)::waitForSdlRsp_TcpAwaitRespTimer - ERROR: Fail to setup H245 signaling connection!!!|6,100,28,83.1^*^* sdl trace error: 002012469 |2016/12/15 10:17:37.074 |100 |AppError  |||TranslateAndTransport(6,100,21,83)|||H245Log: Process=TranslateAndTransport LogicalChannelNumber=1011 -- TCP ERROR: TcpAwaitRespTimer times out, or received SdlCloseInd from H245Handler, Perform cleanup of H245 Session We had riverbed optimize the traffic between two sites and the voice subnet was not excluded. The strange thing is we have this setup working for long time and suddenly the issue occurred in one direction only ( US to UK) The issues was resolved after excluding the voice subnet from optimization.. ... View more

worked like a charm!!! Thanks for the all the help!!! ... View more