SMGR Certs

[trilogy8]

My SMGR alerted about upcoming certificates that are expiring in the next 2 months. When looking at the managed elements and under the system manager one, the identity certs look to be the ones upcoming. I use my own PKI for Session Manager identity certs. Avaya has installed some utility because I'm on a 7.0 version that has to be run for the renewal to work. Will these System Manager certs cause any issues with anything else attached to it when I renew?

 

[kyle555]

SM has a few certs - database, management, SIP, PPM. You quite simply could have put your own domain certs on the SIP and PPM interfaces to simplify trust with softphones and use SMGR signed certs for everything else.
If you're not using your own PKI for anything other than the SIP and PPM interfaces, I'd figure if you ran the cert renewal utility on SMGR, you'd be ok. Then you'd go in the inventory and pick your SM and you'd have the ability to renew each cert individually - either with a SMGR signed cert like for mgmt and database or manually importing your own cert - like for SIP and PPM you'd be OK.

But yeah, if there's a bug in renewal at your load... check check check

 

[trilogy8]

For my SM's I'm using my own certs for all of those items.. ppm, sip..the other 2 or 3 as well. For SMGR itself we didn't give it any identity certs and only put our root/sub ca in the trust store. Just want to make sure this renewal thing won't bust the SM's.