<div dir="ltr">Right, ok so a few things here.<div><br></div><div>First up, the notification says "Certificate name:<unityconn02hostname>.der Unit:tomcat-trust" and I don't see that cert in your tomcat-trust on 01. So, I'm not too certain what it's actually complaining about. Could be a red herring.</div><div><br></div><div>Next, I think you should fix your NTP since the utils diagnose command complained about it. Can you issue the command utils ntp status, and share that?</div><div><br></div><div>Also, you shouldn't use Windows servers as NTP servers. It is possible to do it right, but it's not supported by Cisco.<br></div><div><br></div><div>"Using Windows Time Services as an NTP server is not recommended or supported because Windows Time Services often use Simple Network Time Protocol (SNTP), and Linux-based Unified CM cannot successfully synchronize with SNTP."<br></div><div>Source: <a href="https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/collab10/collab10/netstruc.html#pgfId-1185637">CUCM 10.5 SRND</a></div><div><br></div><div>Then, usually when I see DNS unreachable, but they're pingable/resolving for me (e.g., utils network host), that typically means you have more than one PTR record entered for your server. Double check that you have no duplicate A or PTR records in DNS.</div><div><br></div><div>That's about all I've got for you at the moment. Good luck.</div></div><br><div class="gmail_quote"><div dir="ltr">On Sat, Feb 17, 2018 at 6:34 AM naresh rathore <<a href="mailto:nareh84@hotmail.com">nareh84@hotmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_1151535018302888336divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr">
<p style="margin-top:0;margin-bottom:0">anyone??</p>
<br></div></div><div dir="ltr"><div id="m_1151535018302888336divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr"><div style="color:rgb(0,0,0)"><div id="m_1151535018302888336divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> naresh rathore <<a href="mailto:nareh84@hotmail.com" target="_blank">nareh84@hotmail.com</a>><br>
<b>Sent:</b> Friday, February 16, 2018 3:01 PM<br>
<b>To:</b> Anthony Holloway</font></div></div></div></div><div dir="ltr"><div id="m_1151535018302888336divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr"><div style="color:rgb(0,0,0)"><div id="m_1151535018302888336divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CUC voicemail certificate issue and UCCX</font></div></div></div></div><div dir="ltr"><div id="m_1151535018302888336divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr"><div style="color:rgb(0,0,0)">
<div dir="ltr">
<div id="m_1151535018302888336x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0;margin-bottom:0">hi Anthony,</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">thanks for the reply.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"></p>
<ol style="margin-bottom:0px;margin-top:0px">
<li>for unity connection 01, i have to browse couple if times. most of the times i get
<h1 style="color:rgb(51,51,51);font-size:1.6em;font-weight:normal;line-height:1.25em;margin-bottom:16px;margin-top:0px;word-wrap:break-word;font-family:"Segoe UI",Tahoma,sans-serif;background-color:rgb(247,247,247)">
This site can’t be reached</h1>
for unityconnection02, thats not the case.</li></ol>
<p></p>
<div><br>
</div>
<div><br>
</div>
2. I see <span>WARNING: DNS unreachable message on gui. but i am able to ping both DNS servers and also i am able to ping using hostnames.</span>
<div><br>
</div>
<div><br>
</div>
<div><span></span>3.
<div>admin:utils diagnose test</div>
<div><br>
</div>
<div>Log file: platform/log/diag5.log</div>
<div><br>
</div>
<div>Starting diagnostic test(s)</div>
<div>===========================</div>
<div>test - disk_space : Passed (available: 18327 MB, used: 10261 MB)</div>
<div>skip - disk_files : This module must be run directly and off hours</div>
<div>test - service_manager : Passed</div>
<div>test - tomcat : Passed</div>
<div>test - tomcat_deadlocks : Passed</div>
<div>test - tomcat_keystore : Passed</div>
<div>test - tomcat_connectors : Passed</div>
<div>test - tomcat_threads : Passed</div>
<div>test - tomcat_memory : Passed</div>
<div>test - tomcat_sessions : Passed</div>
<div>skip - tomcat_heapdump : This module must be run directly and off hours</div>
<div>test - validate_network : Passed</div>
<div>test - raid : Passed</div>
<div>test - system_info : Passed (Collected system information in diagnostic log)</div>
<div>test - ntp_reachability : Passed</div>
<div>test - ntp_clock_drift : Passed</div>
<div>test - ntp_stratum : Failed</div>
<div>The reference NTP server is a stratum 5 clock.</div>
<div>NTP servers with stratum 5 or worse clocks are deemed unreliable.</div>
<div>Please consider using an NTP server with better stratum level.</div>
<div><br>
</div>
<div>Please use OS Admin GUI to add/delete NTP servers.</div>
<div><br>
</div>
<div>skip - sdl_fragmentation : This module must be run directly and off hours</div>
<div>skip - sdi_fragmentation : This module must be run directly and off hours</div>
<div><br>
</div>
<div>Diagnostics Completed</div>
<div><br>
</div>
<br>
4. find the attached images of ucservice page, certificate list page and tomcat certificate of both unityconnection01 and 02.</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards</div>
<div><br>
</div>
<div>Naresh<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_1151535018302888336x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Anthony Holloway <<a href="mailto:avholloway%2Bcisco-voip@gmail.com" target="_blank">avholloway+cisco-voip@gmail.com</a>><br>
<b>Sent:</b> Friday, February 16, 2018 12:03 PM<br>
<b>To:</b> naresh rathore<br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CUC voicemail certificate issue and UCCX</font>
<div> </div>
</div>
<div>
<div dir="ltr">Can you paste a screenshot of your CUC 01 and 02 Tomcat certs?<br>
<br>
I agree with you that a cert issue would prevent Jabber from connecting to VoiceMail. Also, do you have your UC Service in CUCM for CUC defined as FQDN with HTTPS? Screenshot?</div>
<br>
<div class="m_1151535018302888336x_x_gmail_quote">
<div dir="ltr">On Thu, Feb 15, 2018 at 11:29 PM naresh rathore <<a href="mailto:nareh84@hotmail.com" target="_blank">nareh84@hotmail.com</a>> wrote:<br>
</div>
<blockquote class="m_1151535018302888336x_x_gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_1151535018302888336x_x_m_5079388875736358014divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0;margin-bottom:0">hi,</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">I think because of this issue, when i connect Jabber within my office, show connection status on Jabber shows voicemail as "not connected. waiting To retry".</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Regards</p>
<br>
</div>
</div>
<div dir="ltr">
<div id="m_1151535018302888336x_x_m_5079388875736358014divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif">
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_1151535018302888336x_x_m_5079388875736358014divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>>
on behalf of naresh rathore <<a href="mailto:nareh84@hotmail.com" target="_blank">nareh84@hotmail.com</a>><br>
<b>Sent:</b> Friday, February 16, 2018 9:31 AM<br>
<b>To:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> [cisco-voip] CUC voicemail certificate issue and UCCX</font>
<div> </div>
</div>
</div>
</div>
</div>
<div dir="ltr">
<div id="m_1151535018302888336x_x_m_5079388875736358014divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif">
<div style="color:rgb(0,0,0)">
<div dir="ltr">
<div id="m_1151535018302888336x_x_m_5079388875736358014x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0;margin-bottom:0">hi,</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">i am currently facing following issue.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"></p>
<ol style="margin-bottom:0px;margin-top:0px">
<li><span style="font-size:12pt"></span>when i connected jabber internally. show connection showed voicemail status as not connected. i logged into unity connection via ssh and saw following message<span>admin:Feb 16 13:00:00 <unityconn01hostname> local99 0
: 832: <span style="font-family:Calibri,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">
<unityconn01hostname></span>: Feb 16 2018 02:00:00 AM.248 UTC : %UC_CERT-0-CertExpired: %[Message=Certificate expiration Notification. Certificate name:<span style="font-family:Calibri,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px"><unityconn02hostname></span>.der
Unit:tomcat-trust Type:own-cert Expiration:Sun Dec][AppID=Cisco Certificate Monitor][ClusterID=][NodeID=<span style="font-family:Calibri,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px"><unityconn01name></span>]:
Certificate has Expired and needs to be changed at the earliest</span></li></ol>
<br>
<p></p>
<p style="margin-top:0;margin-bottom:0">when i logged into OS of both unity connection 01 and 02. In certificate management, couldnt find any certificate which expired today. </p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">is there any other location where we can check expired certificate? what should be done to resolve this issue.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Regards</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Naresh Rathore</p>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div>