IM&P Certificates

[harresh123]

All the certificates in IM&P have expired. I understand the premise behind Tomcat and IPSEC which i have regenerated. What are the other critical certs that needs to be regenerated. I could think of below 3 that needs to be addressed. Wanted to make sure. These are self-signed certs.

cup

cup-xmpp

cup-xmpp-s2s

Alos, i see a couple of tomcat-trust certs in call-manager that are pertaining to IM&P cluster. When i regenerated the tomcat certs in IM&P, shouldn't the trust certs pertaining to IM&P in CUCM nodes automatically renew? How can i address the situation with tomcat-trust certs for IM&P in CUCM nodes. Is it a manual export of tomcat certs from IM&P and importing them to each CUCM node?

[Chris Deren]

All expired certs should be re-generated, cup-xmpp is the critical one used by Jabber clients for IM/P and would generate warnings on Jabber client if expired.  

[Anthony Holloway]

I agree, all expired certs should be corrected, if for nothing else, to squelch the alarms generated by the system, so you can focus on the real problems.

By the way, the certs and their purpose are listed here:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/configAdminGuide/10_5_1/CUP0_BK_CE43108E_00_config-admin-guide-imp-105/CUP0_BK_CE43108E_00_config-admin-guide-imp-105_chapter_01010.html#CUP0_RF_C4534017_00