CUCM 8.x: organization name change in certificates

[dmuizebelt]

Hi,

Because of a name change I would like to update the O= parameter in the CUCM certificates. The O= is also automatically used when generating a CSR. Is there a way to change this without reinstalling the Callmanager?

As this would affect all generated certificates and license files would it be better to just ignore it?

Thanks,

Danny

[Aaron Harrison · Accepted solution]

Hi

Use 'set web-security' from the server CLI/SSH.

It will regenerate tomcat certs, so you would need to reissue if you have proper certificates installed.

It will also break your license MAC if you do this on the publisher, so you'll have to get your licensees rehosted.

So unless it's really causing an issue, I'd leave well alone :-)

Regards

Aaron Harrison

Principal Engineer at Logicalis UK

Please rate helpful posts...

[dmuizebelt]

Good point, as I was more interested in the CAPF certificates I didn't expect this feature to be located under web-security. This also (unfortunately) shows that the Cisco development engineers kind of ignore the possibility to sign the CAPF certs against a 3rd party CA.

Anyway, thanks for the quick reply.

-Danny