Guest

Preview Tool

Cisco Bug: CSCvu50156 - Post Upgrade to 12.5(1)SU2 ICSA Certificate Audit Job runs continuously spiking CPU

Last Modified

Sep 26, 2020

Products (2)

  • Cisco Unified Communications Manager IM & Presence Service
  • Cisco Unified Communications Manager IM and Presence Service Version 12.5

Known Affected Releases

12.5(1)

Description (partial)

Symptom:
Post Direct Refresh Upgrade to 12.5(1)SU2 All IM&P Nodes CPU spike to ~50% and remain there continuously.

Repeated IDSEngineAttention alarms as following can be seen on all IM&P Nodes

Jun  3 12:49:53 imp01-pub local7 3 : 49: imp01-pub.domain.com: Jun 03 2020 16:49:53.735 UTC :  %UC_-3-UNKNOWN_ALARM:IDSEngineAttention: %[class_id=48][class_msg=CDR][specific_msg=  ATS and/or RIS files spooled to disk.:/var/log/active/cm/log/informix/ris/ris.g_13_ccm12_5_1_12900_25.g_16_ccm12_5_1_12900_25.D][AppID=Cisco Database Layer Monitor][ClusterID=ClusterID][NodeID=imp01-pub.domain.com]:

Conditions:
This Race condition that leads to perpetual CPU spike and Certificates being out of sync across IM&P nodes is seen in a large inter-clustered IM&P deployment. 

With the number of inter-clustered nodes + all the required CA Certificates the cuptrustcertificate table has ~375 certificates in it.

CPU Spike is seen after IM&P Cluster Database Replication setup and initial Sync with CUCM Database has been completed. Shortly after ICSA Services on all nodes are started the CPU Spike is observed.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.