[cisco-voip] Updating Certificates on CUCM?

[Lelio Fulgenzi]

In Connection v7, under Cisco Unified OS Administration > Security > Certificate Management there is the option to create the CSR and upload whatever certificates are generated. 

Changing it shouldn't be a big deal, unless you've loaded that certificate elsewhere. 

Granted, this is v7, not v6, but I would think the appliance models are somewhat familiar. 


--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
"Bad grammar makes me [sic]" - Tshirt 


----- Original Message ----- 
From: "Jonathan Madziarczyk" <JMad at cityofevanston.org> 
To: cisco-voip at puck.nether.net 
Sent: Monday, October 5, 2009 2:44:28 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [cisco-voip] Updating Certificates on CUCM? 




Oh, I’m just trying to set the general certs for mgmt and user management web pages into the publisher/subscribers. Since IE8 and the latest FireFox, they no longer give user friendly popups when you try to go to a site that does not have a known certificate. 



Rather than try to train our users how to read the web page and make their own determination, it’s easier to just fix the cert to correlate to our own internal CA. (the PCs inside already have our CA in their list) 



I’ve gotten the request files and made certs for tomcat/CAPF/callmanager/ipsec but I’m a little leery about just overwriting what’s there on the server. Do they have to be .der or .cer or .pem. I don’t see a place to upload the site cert either. 



So I assumed Cisco had a document on the proper steps to install these, but I have been unsuccessful in finding it. 



JM 








From: Jason Burns [mailto:burns.jason at gmail.com] 
Sent: Monday, October 05, 2009 1:37 PM 
To: Madziarczyk, Jonathan 
Cc: cisco-voip at puck.nether.net 
Subject: Re: [cisco-voip] Updating Certificates on CUCM? 



JM, 

Which certificates exactly do you want to update? 

The ones used to access the CCMAdmin GUI, or the ones used to secure SIP/TLS connections? 


On Mon, Oct 5, 2009 at 1:59 PM, Madziarczyk, Jonathan < JMad at cityofevanston.org > wrote: 



Does anyone have a good writeup for the procedure to update the certificate on call manager 6.1? 



I think I’ve got most of it figured out, I just want to see some official documentation before I start wiping certs. 



I guess I fail at google, because I can’t seem to find any documentation that addresses my issue. 



JM 


_______________________________________________ 
cisco-voip mailing list 
cisco-voip at puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-voip 


_______________________________________________ cisco-voip mailing list cisco-voip at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20091005/69c9755f/attachment.html>