How to regenerate self-signed certificates on CUCM, IM&P and CUC

hi and welcome to this video my name is Henry Rollins here I'm with the PDA technical advisors team in Cisco and crew this video I'm going to show you how to regenerate the self-signed certificates on an IM on present server this is also applicable for see you cm and sister unity connection I hope you enjoy it in my last video as I was changing the domain from just swisco.com the PDI MX that cisco.com that triggered a notification in my I am and present server which is this one as you can see I need to regenerate a couple of certificates and I think that this is a good opportunity to show you how to regenerate certificates on your servers in order to regenerate the certificates we need to go to the US administration page from our am present server and then we go to security certificate management and we are going to click on find I'm going to show you two ways in which you can do this for the first one we are going to change the cup - XMPP certificate we click on the common name and you will get this screen as you can see we have four options in the tab which are regenerate generic CSR download PE M file and download the de AR file we are going to use the regenerate one we click on it and you will get the message that it was a success and you will also need to restart the Cisco XP router in order for changes to take effect I will do that at a later time now we can close this and the page is going to refresh the other way in which we can regenerate a self-signed certificate is to click on generate slav site this will trigger there's new window and here we're going to choose cup - XMPP - s to us we are going to leave the default settings for the kill end and also for the hash algorithm and we click on generate and we get the same success message and also and notice that we need to restart the Cisco XP router we closed and it's going to refresh one more time as you can see the expiration date of these two certificates has changed when would you need to do this one a scenario could be in which you have always used yourself signed certificates and they are about to expire or that you are coming from a public CA certificate scenario and you want to go back to self-signed certificates as you can see the procedure is really simple and depending on what certificates you need to change you may need to restart services and that's it for this video thank you very much for watching this video I hope it was useful for you

Channel: Cisco Community

Views: 18,118

Keywords: Cisco Unified Communications Manager, Self-signed Certificate

Id: xTnS7HEADdU

Length: 3min 24sec (204 seconds)

Published: Sun Dec 06 2015