[cisco-voip] Certificates expires - what happens next?

[Brian Meade]

Nothing really stops working besides certificate warnings in the browser.
The phones don't check validity dates.  Only issue with a secure cluster is
the CAPF on the publisher expiring since it signed all of the LSCs on the
phones.  CallManager service will care about those being expired and they
won't be able to re-register if they are reset.


On Mon, May 4, 2015 at 11:09 AM, Reto Gassmann <voip at mrga.ch> wrote:

> Hello Group
>
> I am just curious what happens, when certificates on an CUCM cluster
> expire. We run a UCM cluster 9.1.2 in Mix Mode with 8 UCM server and 2 CUPS
> server.
>
> What happens if one or all of the following certificates expire:
> CallManager.pem, ipsec.pem, tomcat.pem or CAPF.pem and the according -trust
> certificates.
>
> Will the UCM cluster stop working, DB replication issues or will I have
> error messages on the phones?
>
> Thanks for your thoughts
> Regards Reto
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20150504/e17188cc/attachment.html>