When we configured APNS support and TLS to webex, we had to install the Quovadis root certs as well. I _think_ that’s along the same lines of what you were doing.
So, no, they were not installed. We’re on v11.5 CUCM and x8.10 on Expressway. --- Lelio Fulgenzi, B.A. | Senior Analyst Computing and Communications Services | University of Guelph Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1 519-824-4120 Ext. 56354 | [email protected]<mailto:[email protected]> www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, Twitter and Facebook [University of Guelph Cornerstone with Improve Life tagline] From: cisco-voip <[email protected]> On Behalf Of Matthew Loraditch Sent: Thursday, January 10, 2019 9:24 AM To: Matthew Loraditch <[email protected]>; [email protected] Subject: Re: [cisco-voip] Root Certs Not Installed During CUCM Upgrade?/Smart Registration Not Working Addendum, Uploading all the certs AND a full reboot fixed it. Not sure if I could have tried restarting a service besides Tomcat as well. Matthew Loraditch Sr. Network Engineer p: 443.541.1518<tel:443.541.1518> w: www.heliontechnologies.com<http://www.heliontechnologies.com/> | e: [email protected]<mailto:[email protected]> [cid:[email protected]] [Facebook]<https://facebook.com/heliontech> [Twitter]<https://twitter.com/heliontech> [LinkedIn]<https://www.linkedin.com/company/helion-technologies> From: cisco-voip <[email protected]<mailto:[email protected]>> On Behalf Of Matthew Loraditch Sent: Thursday, January 10, 2019 9:03 AM To: [email protected]<mailto:[email protected]> Subject: [cisco-voip] Root Certs Not Installed During CUCM Upgrade?/Smart Registration Not Working Is there a known bug on this? Upgraded a customer from 10.5.2.11900 to 12.0 SU2. Was trying to register to Smart and saw some issues with the keystore in the logs and stumbled upon similar issues and noticed that the VeriSign, QuoVadis and Class 3 Primary CA Certs weren’t in my Tomcat Trust. Not sure if they all were necessary but they are all on another 12.x cluster so I’ve uploaded them, although I still have issues. DNS is working so it’s not that. I know SmartCallHome uses some related servers, and interestingly I get access Denied trying to look at those settings. The errors I’m seeing in the SLM logs that I can identify are: 08:45:53.966 |24503,,,CuSlmSvr,4,10-01-2019 DEBUG [SLM-5] com.cisco.nesla.agent.impl.AgentKeyStoreManager#save - JCEKS not found 08:45:53.966 |24503,,,CuSlmSvr,4,10-01-2019 ERROR [SLM-5] com.cisco.nesla.agent.impl.AgentKeyStoreManager#save - saving to keystore failed Matthew Loraditch Sr. Network Engineer p: 443.541.1518<tel:443.541.1518> w: www.heliontechnologies.com<http://www.heliontechnologies.com/> | e: [email protected]<mailto:[email protected]> [cid:[email protected]] [Facebook]<https://facebook.com/heliontech> [Twitter]<https://twitter.com/heliontech> [LinkedIn]<https://www.linkedin.com/company/helion-technologies>
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
