<div dir="ltr">You'll want the CallManager.pem of each node as a CallManager-Trust on all servers on all clusters to ensure you can move back and forth. TVS should then take care of the rest.<div><br></div><div>You can use the Bulk Certificate Export/Consolidate/Import process to do this a little more automagically. Make sure to do the consolidate on the newer version cluster.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Aug 7, 2017 at 2:53 PM, Mike O <span dir="ltr"><<a href="mailto:MikeeO@msn.com" target="_blank">MikeeO@msn.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_-2064040799937506745divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr">
<p>Ryan,</p>
<p><br>
</p>
<p>If I export the <span>CallManager.pem</span> from the new cluster and import to the old cluster. I can then just change option 150 on the DHCP server to the new cluster and reset? Won't that over write the existing
<span>CallManager.pem</span>? I need to verify that the phones are indeed connecting to the TVS on the old cluster, but I don't see any reason why they aren't connecting to the TVS.</p>
<p><br>
</p>
<p>Thanks,</p>
<p>Mike<br>
</p>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_-2064040799937506745divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" color="#000000" face="Calibri, sans-serif"><b>From:</b> Ryan Ratliff (rratliff) <<a href="mailto:rratliff@cisco.com" target="_blank">rratliff@cisco.com</a>><br>
<b>Sent:</b> Sunday, August 6, 2017 9:53 AM<br>
<b>To:</b> Schlotterer, Tommy; Mike O<br>
<b>Cc:</b> cisco-voip voyp list<br>
<b>Subject:</b> Re: [cisco-voip] CUCM 10.5 cluster migration</font>
<div> </div>
</div><div><div class="h5">
<div>Corporate Directory will work with the default settings in 10.4.2, secure EM will not.
<div><br>
</div>
<div>If both clusters are up and running you are much better off just adding CallManager.pem from the TFTP server of the new cluster to Certificate Management of the old cluster as "Phone-sast-trust”.</div>
<div>This will let TVS on the old cluster authenticate the new cluster’s ITL and you don’t need to mess with anything.</div>
<div><br>
</div>
<div>It does require that the phones can establish a secure connection to TVS on the old cluster, but if they can’t do that already then they wouldn’t take the rollback parameter change either.</div>
<div><br>
<div>-Ryan </div>
<br>
<div>
<div>On Aug 3, 2017, at 2:03 PM, Schlotterer, Tommy <<a href="mailto:tschlotterer@presidio.com" target="_blank">tschlotterer@presidio.com</a>> wrote:</div>
<br class="m_-2064040799937506745Apple-interchange-newline">
<div>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<div class="m_-2064040799937506745WordSection1" style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">They will register and work, but no SSL functions will work, eg secure Extension mobility or the corporate directory.</span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Tommy</span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<a name="m_-2064040799937506745__MailEndCompose"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></a></div>
<div></div>
</div>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<span style="font-style:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:xx-small;font-family:Verdana;font-weight:bolder;color:rgb(128,128,128)"><br>
Tommy Schlotterer | Systems Engineer - Collaboration<br>
Presidio (NASDAQ: PSDO) |<span class="m_-2064040799937506745Apple-converted-space"> </span><a href="http://www.presidio.com/" title="" style="color:rgb(149,79,114);text-decoration:underline" target="_blank">www.presidio.com</a><br>
20 N Saint Clair 3rd Floor, Toledo, OH 43604<br>
D: <a href="tel:(419)%20214-1415" value="+14192141415" target="_blank">419.214.1415</a> | C: <a href="tel:(419)%20706-0259" value="+14197060259" target="_blank">419.706.0259</a> |<span class="m_-2064040799937506745Apple-converted-space"> </span><a href="mailto:tschlotterer@presidio.com" title="Click to send email to Schlotterer, Tommy" style="color:rgb(149,79,114);text-decoration:underline" target="_blank">tschlotterer@presidio.com</a><br>
<br>
</span><span style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important"></span>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<div class="m_-2064040799937506745WordSection1" style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<div></div>
</div>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<span style="font-style:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:xx-small;font-family:Verdana;font-weight:bolder;color:rgb(128,128,128)"><br>
<br>
<a href="http://www.presidio.com/" style="color:rgb(149,79,114);text-decoration:underline" target="_blank"><img id="m_-2064040799937506745IMG1" alt="Future. Built." width="223" height="49" border="0" src="https://www2.presidio.com/signatures/Presidio_Blue_FutureBuilt_200px.png"></a><br>
<br>
</span><span style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important"></span>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<div class="m_-2064040799937506745WordSection1" style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<div></div>
</div>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<span style="font-style:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-family:Verdana;color:rgb(128,128,128);font-size:xx-small;font-weight:bolder"><br>
Follow us:<br>
<br>
<a href="http://www.twitter.com/presidio" style="color:rgb(149,79,114);text-decoration:underline" target="_blank"><img id="m_-2064040799937506745IMG1" alt="Follow Presidio on Twitter" width="22" height="22" border="0" src="http://twitter-badges.s3.amazonaws.com/t_small-a.png"></a><br>
<br>
</span><span style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important"></span>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<div class="m_-2064040799937506745WordSection1" style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<div></div>
</div>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<span style="font-style:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-family:Verdana;color:rgb(128,128,128);font-size:xx-small;font-weight:bolder"><br>
<br>
</span><span style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important"></span>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p class="m_-2064040799937506745ImprintUniqueID" style="margin:0cm 0cm 0pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<div class="m_-2064040799937506745WordSection1" style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<div>
<div style="border-style:solid none none;border-top-width:1pt;border-top-color:rgb(225,225,225);padding:3pt 0in 0in">
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"><span class="m_-2064040799937506745Apple-converted-space"> </span>cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color:rgb(149,79,114);text-decoration:underline" target="_blank">mailto:cisco-voip-bounces@<wbr>puck.nether.net</a>]<span class="m_-2064040799937506745Apple-converted-space"> </span><b>On
Behalf Of<span class="m_-2064040799937506745Apple-converted-space"> </span></b>Mike O<br>
<b>Sent:</b><span class="m_-2064040799937506745Apple-converted-space"> </span>Thursday, August 03, 2017 1:52 PM<br>
<b>To:</b><span class="m_-2064040799937506745Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color:rgb(149,79,114);text-decoration:underline" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b><span class="m_-2064040799937506745Apple-converted-space"> </span>[cisco-voip] CUCM 10.5 cluster migration</span></div>
</div>
</div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
</div>
<div id="m_-2064040799937506745divtagdefaultwrapper">
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-family:Calibri,sans-serif">Hi All, I need to move about a 100 phones to a new cluster, and then add an additional 200+ phones. My problem is I want to use the "Prepare Cluster for Rollback to pre-8.0" parameter, but I can't change
the option 150 in the DHCP server until the next day. My question is once I set this parameter and I reset the phones they will register with an empty ITL file, but will the phones still function? If I can reset the phones to clear the existing ITL and have
them work the following day I can then change the option 150 to the new cluster and then reset the existing phones and add new phones in. I know I can lab this up, but wanted to make sure there were no gotchas associated with this method.</span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-family:Calibri,sans-serif"> </span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-family:Calibri,sans-serif">Thanks,</span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-family:Calibri,sans-serif">Mike</span></div>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">
<span style="font-family:Calibri,sans-serif"> </span></div>
</div>
</div>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<br style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<span><em><span style="font-size:11px">This message w/attachments (message) is intended solely for the use of the intended recipient(s) and may contain information that is privileged, confidential or proprietary. If you are not an
intended recipient, please notify the sender, and then please delete and destroy all copies and attachments<span style="color:rgb(31,73,125)">.<span class="m_-2064040799937506745Apple-converted-space"> </span></span>Please be advised that any review or dissemination of,
or the taking of any action in reliance on, the information contained in or attached to this message is prohibited.</span></em></span><span style="font-size:10.5pt"></span></div>
<p style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</p>
<span style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">______________________________<wbr>_________________</span><br style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<span style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">cisco-voip
mailing list</span><br style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<a href="mailto:cisco-voip@puck.nether.net" style="color:rgb(149,79,114);text-decoration:underline;font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">cisco-voip@puck.nether.net</a><br style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color:rgb(149,79,114);text-decoration:underline;font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><br style="font-family:LucidaGrande;font-size:12px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</div>
</div>
<br>
</div>
</div>
</div></div></div>
</div>
</div>
<br>______________________________<wbr>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>