<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style id="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
</head>
<body style="WORD-WRAP: break-word" fPStyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<p>On NetPro someone mentioned it would be fixed in 10.6</p>
<p> </p>
<p> </p>
<div style="FONT-FAMILY: Times New Roman; COLOR: #000000; FONT-SIZE: 16px">
<hr tabindex="-1">
<div style="DIRECTION: ltr" id="divRpF809210"><font color="#000000" size="2" face="Tahoma"><b>From:</b> Ryan Ratliff (rratliff) [rratliff@cisco.com]<br>
<b>Sent:</b> Thursday, October 09, 2014 2:54 PM<br>
<b>To:</b> Matthew Loraditch<br>
<b>Cc:</b> Brian Meade; Jason Aarons (AM); cisco-voip voyp list<br>
<b>Subject:</b> Re: [cisco-voip] Bug with mult-server certificate and phones reset every 7 min?<br>
</font><br>
</div>
<div></div>
<div>Yup, looks like a continuous loop of each server being told about the new cert, then telling the rest of the cluster about it. The delay is likely related to the fact that we require a delay before subsequent certs can be regenerated/installed specifically
to allow the phones to reset and pick up a new ITL. No more regenerating tomcat + CallManager certs at the same time and nuking your ITLs.
<div><br>
<div>-Ryan </div>
<br>
<div>
<div>On Oct 9, 2014, at 2:41 PM, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com" target="_blank">MLoraditch@heliontechnologies.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div><style>@font-face {
font-family: Cambria Math;
}
@font-face {
font-family: Calibri;
}
@page WordSection1 {margin: 1.0in 1.0in 1.0in 1.0in; }
P.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; FONT-SIZE: 12pt
}
LI.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; FONT-SIZE: 12pt
}
DIV.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; FONT-SIZE: 12pt
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
FONT-FAMILY: "Calibri","sans-serif"; COLOR: #1f497d
}
.MsoChpDefault {
FONT-FAMILY: "Calibri","sans-serif"
}
</style>
<div lang="EN-US">
<div class="WordSection1">
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Yes this is the bug, it is super fun… Migrated to a customer to 10.5 and updated the certs.. spent a day finding out this was the bug.. I am eagerly awaiting
SU1.</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Something to do with the sever being on multiple servers it continuously sends the cert to the other servers which causes the change notification.</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Matthew G. Loraditch – CCNP-Voice, CCNA-R&S, CCDA</span></p>
<p style="MARGIN-BOTTOM: 12pt" class="MsoNormal"><span style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #1f497d; FONT-SIZE: 9pt">1965 Greenspring Drive</span><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><br>
</span><span style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #1f497d; FONT-SIZE: 9pt">Timonium, MD 21093</span><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><br>
</span><span style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #1f497d; FONT-SIZE: 9pt"><br>
direct voice. 443.541.1518<br>
fax. 410.252.9284<br>
<br>
<a href="http://twitter.com/heliontech" target="_blank">Twitter</a> | <a href="http://www.facebook.com/#!/pages/Helion/252157915296" target="_blank">
Facebook</a> | <a href="http://www.heliontechnologies.com/" target="_blank">Website</a> |
<a href="mailto:support@heliontechnologies.com?subject=Technical%20Support%20Request" target="_blank">
Email Support</a></span></p>
<p style="MARGIN-BOTTOM: 12pt" class="MsoNormal"><span style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #1f497d; FONT-SIZE: 9pt">Support Phone. 410.252.8830</span><span style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p class="MsoNormal"><b><span style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 11pt">From:</span></b><span style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 11pt"> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Brian Meade<br>
<b>Sent:</b> Thursday, October 09, 2014 2:32 PM<br>
<b>To:</b> Jason Aarons (AM)<br>
<b>Cc:</b> cisco-voip (<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>)<br>
<b>Subject:</b> Re: [cisco-voip] Bug with mult-server certificate and phones reset every 7 min?</span></p>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">That's what it looks like. Starting in CUCM version 8.6, we started resetting all registered phones on the cluster whenever a certificate used in the ITL changed. This was to prevent the ITL from changing too much at once before the phones
go the update such as regenerating CallManager.pem and TVS.pem at the same time which will force you to have to delete the ITL on all phones unless the phones got the updated ITL after the first certificate was regenerated.</p>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">It sounds like this bug is due to that behavior but I'm not sure why it repeats every 7 minutes. I would expect it to only happen the single time when the certificate database is updated.</p>
</div>
</div>
<div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">On Thu, Oct 9, 2014 at 1:52 PM, Jason Aarons (AM) <<a href="mailto:jason.aarons@dimensiondata.com" target="_blank">jason.aarons@dimensiondata.com</a>> wrote:</p>
<blockquote style="BORDER-BOTTOM: medium none; BORDER-LEFT: #cccccc 1pt solid; PADDING-BOTTOM: 0in; PADDING-LEFT: 6pt; PADDING-RIGHT: 0in; MARGIN-LEFT: 4.8pt; BORDER-TOP: medium none; MARGIN-RIGHT: 0in; BORDER-RIGHT: medium none; PADDING-TOP: 0in">
<div>
<div>
<p class="MsoNormal"><a href="https://tools.cisco.com/bugsearch/bug/CSCup28852" target="_blank">https://tools.cisco.com/bugsearch/bug/CSCup28852</a></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The way I read this (it’s not in a fixed version of CallManager yet) is that after you Upload Certificate a multi-server certificate you have to stop the Cisco Certificate Change Notification (CCMServe > Tools > network Services > Cisoc
Certificate Change Notification.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">If you don’t do this then the phones will reset every 7 minutes? Am I right in reading the bug?</p>
</div>
</div>
<p style="MARGIN-BOTTOM: 12pt" class="MsoNormal"><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></p>
</blockquote>
</div>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
https://puck.nether.net/mailman/listinfo/cisco-voip<br>
</div>
</div>
<br>
</div>
</div>
</div>
</div>
</body>
</html>