What is the validity period of the ITL Recovery certificate in Cisco UCM?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
The validity of ITLRecovery has been extended from 5 years to 20 years to ensure that the ITLRecovery certificate remains same for a longer period Reference: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/12_0_1/secugd/cucm_b_cucm-security-guide-1201/cucm_b_cucm-security-guide- 1201_chapter_011.html.
In Cisco Unified Communications Manager (UCM), the ITL (Initial Trust List) Recovery certificate is used to recover the IP phones that are no longer able to trust the CUCM cluster due to the deletion or corruption of their ITL files. The ITL Recovery certificate is used to sign a new ITL file that can be loaded onto the phone, allowing the phone to trust the CUCM cluster again.
The validity period of the ITL Recovery certificate in Cisco UCM is 1 year. This means that after the certificate is issued, it can be used to sign new ITL files for a period of 1 year. After that, a new ITL Recovery certificate must be generated and distributed to the appropriate devices.
It's important to note that the ITL Recovery certificate is not the same as the CUCM Certificate Authority (CA) certificate. The CA certificate is used to sign other certificates and is typically valid for a longer period of time (e.g., 5 or 10 years). The ITL Recovery certificate is specific to the recovery of ITL files and has a shorter validity period.
In summary, the validity period of the ITL Recovery certificate in Cisco UCM is 1 year. After this period, a new certificate must be generated and distributed to the devices that require it.