Security Guide for Cisco Unified Communications Manager Release 14 and SUs - Certificates

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/14SU2/cucm_b_security-guide-14su2/cucm_m_certificates.html

Published

2026-04-08

Updated

unknown

Accessed

2026-09-25

HTTP status

200

License

Cisco website terms of use; copyrighted; no-redistribution; short excerpts and locators only

Source notes citing this source

• From Release 14, the CAPF certificate is generated only on the publisher. It is present as a CallManager-trust certificate on both the publisher and the subscribers. in context
• The certificate monitor service runs once every 24 hours by default. It runs every hour once a certificate has expired or will expire within one day. in context
• From Release 14, the Tomcat, Tomcat-ECDSA, CallManager and CallManager-ECDSA certificates can be multi-server SAN self-signed certificates. Before that, multi-server SAN was supported only for CA-signed certificates. in context
• The TVS certificate can be a multi-server SAN certificate, self-signed or CA-signed, so one TVS certificate can cover the whole cluster. in context

Cite this source record

APA

WarmTransfer. (2026, April 8). Security Guide for Cisco Unified Communications Manager Release 14 and SUs - Certificates. WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-cucm-security-14su2-certificates

BibTeX

@misc{warmtransfer-cisco-cucm-security-14su2-certificates,
  title  = {Security Guide for Cisco Unified Communications Manager Release 14 and SUs - Certificates},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-cucm-security-14su2-certificates},
  note   = {Cisco Systems, accessed 2026-09-25}
}