[cisco-voip] License MAC if you change cert?

[Nicholas Samios]

Run your CUCM config twice through the answer file generator selecting Virtual Machine - once with old cert details then with new - http://www.cisco.com/web/cuc_afg/index.html
It will spit out a License MAC - if they match you're in luck.

As Mike said, if the cert values are the same - Org, Unit, Location, State, Country you should be ok as they're the values in the cert cisco hashes against afaik.

Cheers,
Nick

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Mike King
Sent: Thursday, June 09, 2011 7:05 AM
To: cisco-voip (cisco-voip at puck.nether.net)
Subject: Re: [cisco-voip] License MAC if you change cert?

Yep, bottom variable:
Certificate Information (Organization, Unit, Location, State, Country):

So it's possible.  If the person that setup the Cluster chose bogus values (or values different from what is required to to submit to the CA), then it will cause a license re-key.

If they originally generated the Self signed Cert with the correct values, it's possible it will not trigger a re-key (Since the those units will not change).   I've not personally tried this.  I'd suggest labbing it up if you have the opportunity.

Mike



On Wed, Jun 8, 2011 at 3:40 PM, Jason Aarons (AM) <jason.aarons at dimensiondata.com<mailto:jason.aarons at dimensiondata.com>> wrote:
My customer wants to change the Self Signed Certificate on their Unity Connection 8.5 running on UCS C210M2 to a Verisign Cert.  My understanding is doing so will require them to contact licensing at cisco.com<mailto:licensing at cisco.com> to get a new .lic file as doing so will change the license mac in show status?

Need confirmation, any one of the 10 variables in the refernce invalidates the license file.  (PS what was Cisco thinking?)

Reference
http://docwiki.cisco.com/wiki/Licensing_Model_for_Virtualized_UC_Applications

Installing New Certificate in 8x Platform OS (CallManager 8x, Unity Connection 8x)
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/8_0_2/cucos/iptpch6.html



_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20110609/811b26d1/attachment.html>