<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML con formato previo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
span.EstiloCorreo18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;}
span.EstiloCorreo19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EstiloCorreo20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EstiloCorreo21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;}
span.HTMLconformatoprevioCar
{mso-style-name:"HTML con formato previo Car";
mso-style-priority:99;
mso-style-link:"HTML con formato previo";
font-family:"Consolas",serif;
color:black;}
span.EstiloCorreo25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="ES-AR" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US">My main issue is not about the deletion process, but about the purpose and usefulness of each of those certificates. Being able to judge if it is good to delete or not
certain certificates (even when expired).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US">I have this guide:<br>
<a href="https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200199-CUCM-Certificate-Regeneration-Renewal-Pr.htm">https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200199-CUCM-Certificate-Regeneration-Renewal-Pr.htm</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US">that gives a description of the purpose of each store, but it does not give specifics on why is there a particular certificate in a store. Ie. Why is there SERVER2.DER
in the phone-vpn-trust store? Is this expected? Does a phone contact SERVER2 while using the Phone VPN? Is there by default, or someone added, even by mistake?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US">And the expired certs that I have are not some that are renewable. All of them are in –trust stores.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US">So I am quite puzzled about them.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="color:windowtext">De:</span></b><span lang="EN-US" style="color:windowtext"> cisco-voip [mailto:cisco-voip-bounces@puck.nether.net]
<b>En nombre de </b>James Andrewartha<br>
<b>Enviado el:</b> martes, 23 de octubre de </span><span lang="ES" style="color:windowtext">2018 12:39 a.m.<br>
<b>Para:</b> cisco-voip@puck.nether.net<br>
<b>Asunto:</b> Re: [cisco-voip] How to handle expired Phone-VPN-trust, phone-SAST-trust, other certificates<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">And if you have any problems deleting them (I had one that just would not go away and gave me alarms for years), just call TAC and they'll take you through the SQL to kill them permanently.<br>
<br>
On 23/10/18 03:08, NateCCIE wrote:<span style="font-size:12.0pt"><o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">The expired certs will throw alarms even if they have been superseded by newer certs.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">So during a maintenance window, renew anything that is expired, and just delete all the old ones. The newer versions of cucm make this easier by being able to sort by expiration date.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">-Nate<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b>From:</b> cisco-voip <a href="mailto:cisco-voip-bounces@puck.nether.net">
<cisco-voip-bounces@puck.nether.net></a> <b>On Behalf Of </b>ROZA, Ariel<br>
<b>Sent:</b> Monday, October 22, 2018 11:52 AM<br>
<b>To:</b> cisco-voip (<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>)
<a href="mailto:cisco-voip@puck.nether.net"><cisco-voip@puck.nether.net></a><br>
<b>Subject:</b> [cisco-voip] How to handle expired Phone-VPN-trust, phone-SAST-trust, other certificates<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Hi, guys!</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">I have a customer that is receiving alarms over some expired certificates, and I would like to know which is the best way to handle them.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">The certs are loaded in SERVER1 and all named SERVER2.der, except the CAPF ones.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><servername>.der in phone-vpn-trust.
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><servername> .der in phone-trust</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><servername>.der in phone-SAST-trust</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><servername>.der in phone-CTL-trust</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">And several CAPF-xxxxxx.der in Callmanager-trust</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">So far I have dealt with renewing Callmanager, TFTP and TVS cert, but I always kept clear from those other certs</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Shoud I delete them, shoud I keep them, even as they are expired and throwing alarms?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Regards.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#E41E26"> </span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif;color:#E41E26">Ariel Roza</span></b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">
<br>
</span><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#3F4243">Collaboration Support Engineer
</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">t: +54 11 5282-0458
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">c: +54 9 11 5017-4417 webex:
</span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flogicalis-la.webex.com%2Fjoin%2Fariel.roza&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C42e5247c66914b1d315c08d638992622%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636758627765789267&sdata=cqchqbY98HGTZ4rDIEBWzaoBX2dPJkE8dCnqeu%2BmSXA%3D&reserved=0"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:blue">http://logicalis-la.webex.com/join/ariel.roza</span></a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">Av. Belgrano 955 – Piso 20 – CABA – Argentina – C1092AAJ</span><o:p></o:p></p>
<p class="MsoNormal"><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.la.logicalis.com%2F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C42e5247c66914b1d315c08d638992622%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636758627765789267&sdata=gJhPidfXD%2BeH0mg8xm0p1NRM7RmDRZ%2BWZouhlcUEgFE%3D&reserved=0"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#E41E26">www.la.logicalis.com</span></a><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#E41E26">_________________________________________________<br>
</span></b><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">Business
</span></b><b><span lang="EN-GB" style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#3F4243">and technology working as one</span></b><b><span lang="EN-GB" style="font-size:9.0pt;color:#3F4243"> </span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><img border="0" width="166" height="40" id="Imagen_x0020_7" src="cid:image001.png@01D46ACF.21A234C0" alt="cid:image003.png@01D3894B.346BF840"></span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><img border="0" width="331" height="50" id="Imagen_x0020_15" src="cid:image002.png@01D46ACF.21A234C0" alt="cid:image005.png@01D3894B.43930F20"></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="_x0000_s1026" type="#_x0000_t75" alt="" style='position:absolute;margin-left:0;margin-top:0;width:57pt;height:21pt;z-index:251658240;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:text;mso-position-vertical-relative:line' o:allowoverlap="f">
<v:imagedata src="cid:image003.jpg@01D46ACF.21A234C0" o:title="part5.437D118E.0BD3326C@ccgs.wa.edu" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img width="76" height="28" src="cid:image003.jpg@01D46ACF.21A234C0" align="left" v:shapes="_x0000_s1026"><![endif]><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftwitter.com%2FLogicalisLatam&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C42e5247c66914b1d315c08d638992622%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636758627765789267&sdata=S2AHX%2Bxshq4krLr54BNC6j7ih6d%2BvETh2QPhtf4BK7g%3D&reserved=0"><span style="font-size:8.0pt;color:blue;text-decoration:none"><img border="0" width="23" height="24" id="Imagen_x0020_3" src="cid:image004.png@01D46ACF.21A234C0" alt="Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: tw"></span></a><span style="font-size:8.0pt;color:#1F497D"> </span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fes-es.facebook.com%2Fpages%2FLogicalis-Latam%2F234648439078&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C42e5247c66914b1d315c08d638992622%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636758627765789267&sdata=LEgXTk5yp6f2at0cHQ3oAARRsdStH6SZooGkmWZPCuQ%3D&reserved=0"><span style="font-size:8.0pt;color:blue;text-decoration:none"><img border="0" width="23" height="24" id="Imagen_x0020_4" src="cid:image005.png@01D46ACF.21A234C0" alt="Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: fb"></span></a><span style="font-size:8.0pt;color:#1F497D"> </span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.youtube.com%2Flogicalislatam&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C42e5247c66914b1d315c08d638992622%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636758627765789267&sdata=zH3Z3qakossmepmjj3PIwFNfVi1zlfEdIhf5OM3stRg%3D&reserved=0"><span style="font-size:8.0pt;color:blue;text-decoration:none"><img border="0" width="23" height="24" id="Imagen_x0020_5" src="cid:image006.png@01D46ACF.21A234C0" alt="Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: Descripción: Descripción: Descripción:
Descripción: yt"></span></a><span style="font-size:8.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#A6A6A6">Logicalis Argentina S.A. solo puede ser obligado por sus representantes legales conforme los límites establecidos en el acto constitutivo y la legislación en vigor.
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#A6A6A6">El contenido del presente correo electrónico e inclusive sus anexos contienen información confidencial.
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#A6A6A6">El mismo no puede ser divulgado y/o utilizado por cualquiera otro distinto al destinatario, ni puede ser copiado de cualquier forma.</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>cisco-voip mailing list<o:p></o:p></pre>
<pre><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><o:p></o:p></pre>
<pre><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C42e5247c66914b1d315c08d638992622%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636758627765789267&sdata=dMXCZhW5XIfGfzcarRm3%2BCaMeXKCYiMCn1lxmHkI2u8%3D&reserved=0">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></pre>
</blockquote>
<p><o:p> </o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>James Andrewartha<o:p></o:p></pre>
<pre>Network & Projects Engineer<o:p></o:p></pre>
<pre>Christ Church Grammar School<o:p></o:p></pre>
<pre>Claremont, Western Australia<o:p></o:p></pre>
<pre>Ph. (08) 9442 1757<o:p></o:p></pre>
<pre>Mob. 0424 160 877<o:p></o:p></pre>
</div>
</body>
</html>