This document describes the few frequently asked questions regarding the certifates druing software upgrade on Cisco TelePresence Server running on a VM (vTS).
To migrate from software version 4.2 (or earlier) to 4.3 (or later) on the vTS, it needs to be redeployed using the .ova file. Cisco have provided an upgrade redeployment tool that ensures serial numbers are preserved, and thus all the keys (activation, encryption, screen licenses) are carried across to the new deployment.
Does re-deployment procedure migrate the certificates to new VM ?
No. It requires to upload root CA and server certificates separately once the upgrade isfinished as the redeployment procedure does not migrate them.
Is there any way from Web UI or CLI to extract the certificates ?
There is no option, neither via Backup and Restore option nor via SSL Certificates tab in VTS through which the certificate can be extracted/downloaded. Backup file that is restored to the new VM, does not include the certificate information. It is always better to keep back-up of the certificates. The Telepresence Server does not have the ability to generate the CSR, and thus need to use 3rd party tool like Open-SSL to generate the certificate and private key.