Acano X3 (Cisco Meeting Server 2.5.3) Certificate Issue

[Paul Richardson]

Hi All,

We have a CMS cluster and one of the devices developed a h/w fault and was RMA'd.  The replacement came with 2.1 s/w and was upgraded to 2.5.3 and a backup was restored.  The device was sitting in our office during our COVID lockdown.  When I was able to get to it I found that the server and client certs for database clustering had expired.  Received new certs and confirmed the expiry dates and uploaded.  Ran the database cluster remove command  and then set the new certs up as in Cisco documentation.  When running the database cluster status command I am informed that the new server and client certs have expired!

Has anyone struck this issue and if so, how did you resolve it?

Cheers, Paul R.

[Nithin Eluvathingal]

Have a look on below link.

https://video.cisco.com/video/6112150560001

[Paul Richardson]

Hi Nithin,

Thanks for the link. Unfortunately s/w version 2.5.3 does not have the pki sign option. That was introduced in 2.7, so this is not an option. My server cert is from EnTrust and the client cert is from a local CA. Both have all the bundles uploaded and pki verify shows the trust chain is complete for both server and client certs.

Thanks, Paul R.