[cisco-voip] Root Certs Not Installed During CUCM Upgrade?/Smart Registration Not Working

[Lelio Fulgenzi]

When we configured APNS support and TLS to webex, we had to install the Quovadis root certs as well. I _think_ that’s along the same lines of what you were doing.

So, no, they were not installed. We’re on v11.5 CUCM and x8.10 on Expressway.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | lelio at uoguelph.ca<mailto:lelio at uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: cisco-voip <cisco-voip-bounces at puck.nether.net> On Behalf Of Matthew Loraditch
Sent: Thursday, January 10, 2019 9:24 AM
To: Matthew Loraditch <MLoraditch at heliontechnologies.com>; cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] Root Certs Not Installed During CUCM Upgrade?/Smart Registration Not Working

Addendum, Uploading all the certs AND a full reboot fixed it. Not sure if I could have tried restarting a service besides Tomcat as well.



Matthew Loraditch​

Sr. Network Engineer


p: 443.541.1518<tel:443.541.1518>



w: www.heliontechnologies.com<http://www.heliontechnologies.com/>

 |

e: MLoraditch at heliontechnologies.com<mailto:MLoraditch at heliontechnologies.com>


[cid:image006.png at 01D4A8C9.5DB19900]


[Facebook]<https://facebook.com/heliontech>



[Twitter]<https://twitter.com/heliontech>


[LinkedIn]<https://www.linkedin.com/company/helion-technologies>







From: cisco-voip <cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>> On Behalf Of Matthew Loraditch
Sent: Thursday, January 10, 2019 9:03 AM
To: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: [cisco-voip] Root Certs Not Installed During CUCM Upgrade?/Smart Registration Not Working

Is there a known bug on this?

Upgraded a customer from 10.5.2.11900 to 12.0 SU2. Was trying to register to Smart and saw some issues with the keystore in the logs and stumbled upon similar issues and noticed that the VeriSign, QuoVadis and Class 3 Primary CA Certs weren’t in my Tomcat Trust.

Not sure if they all were necessary but they are all on another 12.x cluster so I’ve uploaded them, although I still have issues. DNS is working so it’s not that.

I know SmartCallHome uses some related servers, and interestingly I get access Denied trying to look at those settings.

The errors I’m seeing in the SLM logs that I can identify are:
08:45:53.966 |24503,,,CuSlmSvr,4,10-01-2019 DEBUG [SLM-5] com.cisco.nesla.agent.impl.AgentKeyStoreManager#save - JCEKS not found

08:45:53.966 |24503,,,CuSlmSvr,4,10-01-2019 ERROR [SLM-5] com.cisco.nesla.agent.impl.AgentKeyStoreManager#save - saving to keystore failed


Matthew Loraditch​

Sr. Network Engineer


p: 443.541.1518<tel:443.541.1518>



w: www.heliontechnologies.com<http://www.heliontechnologies.com/>

 |

e: MLoraditch at heliontechnologies.com<mailto:MLoraditch at heliontechnologies.com>


[cid:image006.png at 01D4A8C9.5DB19900]


[Facebook]<https://facebook.com/heliontech>



[Twitter]<https://twitter.com/heliontech>


[LinkedIn]<https://www.linkedin.com/company/helion-technologies>








-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20190110/36e33f99/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 1297 bytes
Desc: image005.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20190110/36e33f99/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 8404 bytes
Desc: image006.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20190110/36e33f99/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 431 bytes
Desc: image007.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20190110/36e33f99/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 561 bytes
Desc: image008.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20190110/36e33f99/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 444 bytes
Desc: image009.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20190110/36e33f99/attachment-0004.png>