HA setup / SSL certs

[treefiddy]

Hi,

With an Enterprise HA setup does "Include license key information and FQDN" need to be checked in the backups for the SSL cert to be properly copied to the secondary host?

I notice on the secondary that the certificate is many months old but only in the Program Files directory which appears to be where the active cert is used from. The current cert I found the ProgramData directory but that isn't actually being used.

Can anyone shed some light on this issue?

 

[treefiddy]

Also the primary SSL cert is stuck using an expired cert even though the renewal process completed and restarted services a few weeks ago. Restarting all services has not resolved this issue.

 

[JohnS_3CX]

Hi @treefiddy

Are you referring to 3CX Failover? https://www.3cx.com/docs/failover/

If the certs are expired on the primary PBX then you should investigate that before doing anything else, since the backup file that the secondary retrieves will include whatever the primary put in there.