Thank you, both ☺ De: Ryan Ratliff (rratliff) [mailto:[email protected]] Enviado el: martes, 27 de marzo de 2018 04:13 p.m. Para: Brian Meade <[email protected]>; ROZA, Ariel <[email protected]> CC: [email protected] Asunto: Re: [cisco-voip] Renewing TVS and IPSec certificates
You also don’t need to restart the TFTP service when regenerating TVS certs, in fact it can cause problems depending on how quickly you pull the trigger and how many phones you have. -Ryan On Mar 27, 2018, at 1:37 PM, Brian Meade <[email protected]<mailto:[email protected]>> wrote: If just doing IPSec, you just need to restart the DRS services. No affect on ITL. As soon as you regenerate TVS on any node, all phones will reboot and ITL will be updated instantly. Be very careful to do this one node at a time making sure all phones re-register before moving on. Really only a huge issue if you are doing the CallManager.pem at the same time. TVS certs aren't in the CTL last I checked so you shouldn't need to regenerate the CTL on mixed-mode clusters if just updating TVS/IPSec. On Tue, Mar 27, 2018 at 1:03 PM, ROZA, Ariel <[email protected]<mailto:[email protected]>> wrote: Hi guys, I have some specific questions regarding renewing some certificates. The situation is this. In a cluster with 4 servers, I have two of them that have their tvs.pem and ipsec.pem certificates paste their due date. I have reviewed a lot of the documentation available, and designed a step-by-step procedure to renew them, doing so one server at a time, stopping the TFTP, etc. But still I have some specific doubts: If I just want to renew the ipsec.pem cert ¿Do I have to go through the complete process to renew the ITL and reset the phones to get it? Or can I just renew the self-signed cert and restart the DRS Services? If I am using mixed mode ¿Do I have to regenerate the CTL file as well? Regards, Ariel Roza Collaboration Support Engineer t: +54 11 5282-0458<tel:+54%2011%205282-0458> c: +54 9 11 5017-4417<tel:+54%209%2011%205017-4417> webex: http://logicalis-la.webex.com/join/ariel.roza<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flogicalis-la.webex.com%2Fjoin%2Fariel.roza&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=U8nZXPD%2FWP%2B4NPv4kDLgy5fEywLuSL03sh9wpiFY%2FTs%3D&reserved=0> Av. Belgrano 955 – Piso 20 – CABA – Argentina – C1092AAJ www.la.logicalis.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.la.logicalis.com%2F&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=xkcF%2B8pZ5HA0BeDJrz2v6TqduatATD4utGDIgEYq3Ik%3D&reserved=0> _________________________________________________ Business and technology working as one <image001.png> <image002.png> <image004.jpg><image005.png><https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftwitter.com%2FLogicalisLatam&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636577747920378175&sdata=CXeDrepNJfymOfx8qiCF%2FMM3hF3rpPXupmQOdDzEnf4%3D&reserved=0> <image006.png><https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fes-es.facebook.com%2Fpages%2FLogicalis-Latam%2F234648439078&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=DrIwuhEzx44ljqrSAsnXyMX6ImxgyXoesszPNgpkQMc%3D&reserved=0> <image007.png><https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.youtube.com%2Flogicalislatam&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636577747920378175&sdata=5sQ%2BbYI7eKpBBzL2t%2Fxdq07f71VK5Xksy8Iz6jcdRZs%3D&reserved=0> Logicalis Argentina S.A. solo puede ser obligado por sus representantes legales conforme los límites establecidos en el acto constitutivo y la legislación en vigor. El contenido del presente correo electrónico e inclusive sus anexos contienen información confidencial. El mismo no puede ser divulgado y/o utilizado por cualquiera otro distinto al destinatario, ni puede ser copiado de cualquier forma. _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7CAriel.ROZA%40la.logicalis.com%7C5938325dd18c4a3dbffa08d59416c5ce%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C1%7C636577747920378175&sdata=z6VXBIvT8%2BsDxUmuluIeIll4kRdblcD8ZhdTI11v3sw%3D&reserved=0> _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
