Phones connects to the VPN however unable to register to CUCM

[iptsupport]

Hello,

I have issue with phones that registered via ASA.

we replaced the ASA after we upload new certificate to CUCM.

now the phones still unregistered .

how phones can to receive new certificate ?

[Manish Gogna]

Can you verify the config as per the following

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html

HTH

Manish

[iptsupport]

yes, all configuration is fine.

before replace ASA , the phones was working.

[Manish Gogna]

Has the certificate related part been done on the new ASA?

Manish

[iptsupport]

yes.

the issue that phones not receive new certificate via ASA .

[george_price]

The certificate has to be loaded onto the phone by one of the trusted servers in the file. If the cert has been uploaded to the CUCM the phone will get it once it connects. We use the same model however we push both certs to the phones prior to the ASA changing over. Unfortunately for you I don't see an option other than bringing the phone back to the host network to register without the ASA in between and get the new certificate.