<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
More specifically if the phones have the ITLRecovery key on them (look at the phone's web page on newer firmware) then yes it'll work. Once generated the ITLRecovery shouldn't ever be regenerated and DRS will back it up.
<div><br>
</div>
<div>
<div>-Ryan </div>
<br>
<div>
<div>On Nov 11, 2014, at 12:06 PM, Brian Meade <<a href="mailto:bmeade90@vt.edu">bmeade90@vt.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div dir="ltr">Right. But download a backup of the key before doing anything. Usually the phones will all register fine after an ITL issue. You'll usually just see new config updates not trusted. This can be a really big deal if you use Extension Mobility
though and the phone configs are changing all the time as people sign in/out.</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Nov 11, 2014 at 11:58 AM, Heim, Dennis <span dir="ltr">
<<a href="mailto:Dennis.Heim@wwt.com" target="_blank">Dennis.Heim@wwt.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">With the recovery key thing, will that process work after you have screwed yourself and the phones won’t register?<u></u><u></u></span></p>
<span class="">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size: 10pt; font-family: Calibri, sans-serif;">Dennis Heim | Collaboration Solutions Architect</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif;"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size: 10pt; font-family: Calibri, sans-serif;">World Wide Technology, Inc. |
<a href="tel:%2B1%20314-212-1814" value="+13142121814" target="_blank">+1 314-212-1814</a><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><a href="https://twitter.com/CollabSensei" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;text-decoration:none"><span><image001.png></span></span></a><span style="font-size: 11pt; font-family: Calibri, sans-serif;"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d;text-decoration:none"><span><image002.png></span></span></a><a href="tel:+13142121814" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d;text-decoration:none"><span><image003.png></span></span></a><a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d;text-decoration:none"><span><image004.png></span></span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size: 11pt; font-family: Calibri, sans-serif;"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
</span>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a href="mailto:bmeade90@gmail.com" target="_blank">bmeade90@gmail.com</a> [mailto:<a href="mailto:bmeade90@gmail.com" target="_blank">bmeade90@gmail.com</a>]
<b>On Behalf Of </b>Brian Meade<br>
<b>Sent:</b> Tuesday, November 11, 2014 11:49 AM</span></p>
<div>
<div class="h5"><br>
<b>To:</b> Heim, Dennis<br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] Enable DNS<u></u><u></u></div>
</div>
<div><br class="webkit-block-placeholder">
</div>
<div>
<div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Since you're on 10.5, you can also take a backup of the ITL recovery key that you can use to recover with if anything goes wrong:<u></u><u></u></p>
<div>
<p class="MsoNormal"><a href="http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/10_0_1/delta/CUCM_BK_C206A718_00_cucm-new-and-changed-1001/CUCM_BK_C206A718_00_cucm-new-and-changed-1001_chapter_010.html#CUCM_RF_S1EF9820_00" target="_blank">http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/10_0_1/delta/CUCM_BK_C206A718_00_cucm-new-and-changed-1001/CUCM_BK_C206A718_00_cucm-new-and-changed-1001_chapter_010.html#CUCM_RF_S1EF9820_00</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Make sure all the devices are using a CM Group with both servers in it so they have a 2nd TVS server they can use and just do one server at a time making sure the phones get the updated ITLs before doing the next server.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">You could be really safe and set "Prepare Cluster for Rollback to 8.x" to "True", make your DNS changes, then change it back to "False".<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Brian<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Tue, Nov 11, 2014 at 11:21 AM, Heim, Dennis <<a href="mailto:Dennis.Heim@wwt.com" target="_blank">Dennis.Heim@wwt.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I meant ITL’s. We are in non-secure mode, so ITL’s only. This is 10.5SU1.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size: 10pt; font-family: Calibri, sans-serif;">Dennis Heim | Collaboration Solutions Architect</span></b><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size: 10pt; font-family: Calibri, sans-serif;">World Wide Technology, Inc. |
<a href="tel:%2B1%20314-212-1814" target="_blank">+1 314-212-1814</a></span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><a href="https://twitter.com/CollabSensei" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;text-decoration:none"><image001.png></span></a><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><image002.png></span><a href="tel:+13142121814" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d;text-decoration:none"><image003.png></span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><image004.png></span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size: 11pt; font-family: Calibri, sans-serif;"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a href="mailto:bmeade90@gmail.com" target="_blank">bmeade90@gmail.com</a> [mailto:<a href="mailto:bmeade90@gmail.com" target="_blank">bmeade90@gmail.com</a>]
<b>On Behalf Of </b>Brian Meade<br>
<b>Sent:</b> Tuesday, November 11, 2014 11:08 AM<br>
<b>To:</b> Heim, Dennis<br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] Enable DNS</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">What CUCM version? Also you mention CTLs so is this a mixed-mode cluster?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Tue, Nov 11, 2014 at 10:39 AM, Heim, Dennis <<a href="mailto:Dennis.Heim@wwt.com" target="_blank">Dennis.Heim@wwt.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">I have a 2 node cluster that currently has DNS disabled. My intention is to configure and enable DNS. I know this will regenerate all the certificates at once. My understanding is that as long as I do not do both nodes at the same time
and all the endpoints register with the other server all will be well. However, any endpoints that are offline will require their CTL’s to be cleared.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Has anyone seen anything different?<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size: 10pt;">Dennis Heim | Collaboration Solutions Architect</span></b><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size: 10pt;">World Wide Technology, Inc. |
<a href="tel:%2B1%20314-212-1814" target="_blank">+1 314-212-1814</a></span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><a href="https://twitter.com/CollabSensei" target="_blank"><span style="text-decoration:none"><image001.png></span></a><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><span><image002.png></span><a href="tel:+13142121814" target="_blank"><span style="color:windowtext;text-decoration:none"><image003.png></span></a><span><image004.png></span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none"><span style=""> </span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
https://puck.nether.net/mailman/listinfo/cisco-voip<br>
</div>
</div>
<br>
</div>
</body>
</html>