/mcpStep 6 Click Export. Step 7 Click Close. Note The preceding steps are performed when certificates are self-signed and there is no common trust in another cluster. If there is a common trust or the same signer, then the export of ALL certificates is not needed. Consolidate the Certificates Consolidate certificates when all participating clusters have exported their certificates. This option is available only if two or more clusters exported their certificates to the SFTP server. This procedure consolidates all PKCS12 files in the SFTP server to form a single file. If you export new certificates after consolidation, you must perform this procedure again to include the newly exported certificates. Note Procedure Step 1 From From Cisco Unified OS Administration, choose Security > Bulk Certificate Management > Consolidate > Bulk Certificate Consolidate. Step 2 In the Certificate Type field, choose All. Step 3 Click Consolidate. Note When the bulk certificate consolidate is performed, the certificates are then uploaded to the remote cluster as follows: • CAPF certificate gets uploaded as a CallManager-trust • Tomcat certificate gets uploaded as a Tomcat-trust • CallManager certificate gets uploaded as a CallManager-trust • CallManager certificate gets uploaded as a Phone-SAST-trust • ITLRecovery certificate gets uploaded as a PhoneSast-trust and CallManager-trust Import the Certificates into the Clusters Import the certificates back into the home and remote (visiting) clusters. After an upgrade, these certificates are preserved. You do not need to reimport or reconsolidate certificates. Note Feature Configuration Guide for Cisco Unified Communications Manager, Release 15 and SUs 434 Receiving Calls Consolidate the Certificates
