<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EstiloCorreo17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES-AR" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Thank you, both
</span><span style="font-size:11.0pt;font-family:Wingdings;color:#1F497D;mso-fareast-language:EN-US">J</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="ES" style="font-size:11.0pt;font-family:"Calibri",sans-serif">De:</span></b><span lang="ES" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Ryan Ratliff (rratliff) [mailto:rratliff@cisco.com]
<br>
<b>Enviado el:</b> martes, 27 de marzo de 2018 04:13 p.m.<br>
<b>Para:</b> Brian Meade <bmeade90@vt.edu>; ROZA, Ariel <Ariel.ROZA@LA.LOGICALIS.COM><br>
<b>CC:</b> cisco-voip@puck.nether.net<br>
<b>Asunto:</b> Re: [cisco-voip] Renewing TVS and IPSec certificates<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">You also don’t need to restart the TFTP service when regenerating TVS certs, in fact it can cause problems depending on how quickly you pull the trigger and how many phones you have.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">-Ryan <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Mar 27, 2018, at 1:37 PM, Brian Meade <<a href="mailto:bmeade90@vt.edu">bmeade90@vt.edu</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">If just doing IPSec, you just need to restart the DRS services. No affect on ITL.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">As soon as you regenerate TVS on any node, all phones will reboot and ITL will be updated instantly. Be very careful to do this one node at a time making sure all phones re-register before moving on. Really only a huge issue if you are
doing the CallManager.pem at the same time.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">TVS certs aren't in the CTL last I checked so you shouldn't need to regenerate the CTL on mixed-mode clusters if just updating TVS/IPSec.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Mar 27, 2018 at 1:03 PM, ROZA, Ariel <<a href="mailto:Ariel.ROZA@la.logicalis.com" target="_blank">Ariel.ROZA@la.logicalis.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi guys,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">I have some specific questions regarding renewing some certificates.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">The situation is this. In a cluster with 4 servers, I have two of them that have their tvs.pem and ipsec.pem certificates paste their due date.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">I have reviewed a lot of the documentation available, and designed a step-by-step procedure to renew them, doing so one server at a time, stopping the TFTP, etc.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">But still I have some specific doubts:</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">If I just want to renew the ipsec.pem cert ¿Do I have to go through the complete process to renew the ITL and reset the phones to get it? Or can I just renew
the self-signed cert and restart the DRS Services?<br>
If I am using mixed mode ¿Do I have to regenerate the CTL file as well?</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">Regards,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#E41E26"> </span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-family:"Arial",sans-serif;color:#E41E26">Ariel Roza</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">
<br>
</span><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#3F4243">Collaboration Support Engineer
</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">t:
<a href="tel:+54%2011%205282-0458" target="_blank">+54 11 5282-0458</a> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">c:
<a href="tel:+54%209%2011%205017-4417" target="_blank">+54 9 11 5017-4417</a> webex:
</span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flogicalis-la.webex.com%2Fjoin%2Fariel.roza&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=U8nZXPD%2FWP%2B4NPv4kDLgy5fEywLuSL03sh9wpiFY%2FTs%3D&reserved=0" target="_blank"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif">http://logicalis-la.webex.com/join/ariel.roza</span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">Av. Belgrano 955 – Piso 20 – CABA – Argentina – C1092AAJ</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.la.logicalis.com%2F&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=xkcF%2B8pZ5HA0BeDJrz2v6TqduatATD4utGDIgEYq3Ik%3D&reserved=0" target="_blank"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#E41E26">www.la.logicalis.com</span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#E41E26">_________________________________________________<br>
</span></b><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">Business
</span></b><b><span lang="EN-GB" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">and technology working as one</span></b><b><span lang="EN-GB" style="font-size:9.0pt;color:#3F4243"> </span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"><image001.png></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"><image002.png></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:8.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><image004.jpg><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftwitter.com%2FLogicalisLatam&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636577747920378175&sdata=CXeDrepNJfymOfx8qiCF%2FMM3hF3rpPXupmQOdDzEnf4%3D&reserved=0" target="_blank"><span style="font-size:8.0pt;text-decoration:none"><image005.png></span></a><span style="font-size:8.0pt;color:#1F497D"> </span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fes-es.facebook.com%2Fpages%2FLogicalis-Latam%2F234648439078&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=DrIwuhEzx44ljqrSAsnXyMX6ImxgyXoesszPNgpkQMc%3D&reserved=0" target="_blank"><span style="font-size:8.0pt;text-decoration:none"><image006.png></span></a><span style="font-size:8.0pt;color:#1F497D"> </span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.youtube.com%2Flogicalislatam&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636577747920378175&sdata=5sQ%2BbYI7eKpBBzL2t%2Fxdq07f71VK5Xksy8Iz6jcdRZs%3D&reserved=0" target="_blank"><span style="font-size:8.0pt;text-decoration:none"><image007.png></span></a><span style="font-size:8.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:8.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#A6A6A6">Logicalis Argentina S.A. solo puede ser obligado por sus representantes legales conforme los límites establecidos
en el acto constitutivo y la legislación en vigor. </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#A6A6A6">El contenido del presente correo electrónico e inclusive sus anexos contienen información confidencial.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#A6A6A6">El mismo no puede ser divulgado y/o utilizado por cualquiera otro distinto al destinatario, ni puede ser
copiado de cualquier forma.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=z6VXBIvT8%2BsDxUmuluIeIll4kRdblcD8ZhdTI11v3sw%3D&reserved=0" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>