TLS Certificate has Expired 2

[tac84]

Hi all,

I've had this error since upgrading to R11. I remember someone helping me with a similar problem previously but can't resolve the problem. I've regenerated the certificate but still can't clear this error in System Status.

Can anyone help me with the correct process?

Any assistance would be greatly appreciated.

Thanks!!

Avaya IPO R11.0.4.2.0 build 58

Thanks, Tim
Adelaide, Australia

 

[janni78]

It depends which certificate that has expired

IP Office: VeriSign Certificate Expiring February 2020
[URL unfurl="true"]https://support.avaya.com/ext/index?page=content&id=SOLN346495&viewlocale=en_US[/url]

IP Office: Let's Encrypt Certificate Expired in 11.x
[URL unfurl="true"]https://support.avaya.com/ext/index?page=content&id=SOLN356197&viewlocale=en_US[/url]

"Trying is the first step to failure..." - Homer

 

[tac84]

Hi @Janni78
These are the certificates listed:

Thanks, Tim
Adelaide, Australia

 

[tac84]

Hi @Janni78
I clicked on your VeriSign link above but I don't have a SSO login on the Avaya website.

Thanks, Tim
Adelaide, Australia

 

[janni78]

You can export/download the expired certificate and use that instead of downloading it from the Avaya site.

"Trying is the first step to failure..." - Homer

 

[janni78]

You copy the certificate you want to delete to /system/primary/certificates/tcs/delete/ and reboot the system.

"Trying is the first step to failure..." - Homer

 

[tac84]

@Janni78 - Ah yes I remember having to do this once before. So just delete the certificate using the above method and that's the end of it?

Thanks, Tim
Adelaide, Australia

 

[tac84]

Thanks very much @Janni78- This resolved the issue!

I received an error message when trying to upload the certificate using Manager (403 Forbidden) - Found this other post from the below user:
Credit to user: 3budbyrd

Found a trick that does work. You can only do this if you are on site. The embedded file management won't load the certificate. Gives a 403 error. Forbidden.

Download the certificate with web manager.
Pull the SD card out of the IPO and put it in your PC.
Copy the certificate to the system/primary/certificates/tcs/delete
Reboot

From the readme.txt in that folder.

This folder contains certificates that should be automatically deleted from the IPOFFICE
Trusted Certificate Store. The system can interpret both PEM and DER encodings. The
certificate file name extension must indicate the type of encoding. PEM encoded files
should end with .pem and DER encoded files should end with .der.

When the IPOFFICE boots, the system will check if there are any certificates that exactly match
a certificate in the TCS (byte for byte). If a matching certificate is found in the TCS,
it will then be removed.

Thanks, Tim
Adelaide, Australia

 

[budbyrd]

You're Welcome!

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'