Exam 350-801 topic 1 question 277 discussion

https://www.voipinfo.net/docs/cisco/CUCM_BK_D9A29FAD_00_disaster-recovery-system-cucm-91.pdf

The Disaster Recovery System contains two key functions, Master Agent (MA) and Local Agent (LA). MA coordinates backup and restore activity with LA. The system automatically starts the MA service on each node of the cluster, but MA is functional only on the First node. The MA on the subsequent nodes DO NOT perform any function. LA is the one who perform backup and restore functions. ALL the servers in the cluster including the server that contains the MA, must have its own LA to perform backup and restore functions for the server. // TROUBLESHOOTING // DRS use an SSL-based communication between the MA and the LA for authentication and encryption of data between the publisher and subscriber servers. DRS make use of the IPSec certificates for its Public/Private Key encryption.

CUCM DRS uses the Cisco Tomcat certificate for TLS encryption between the master agent and local agents.

From the same link as papahawaii posted: The Disaster Recovery System uses an Secure Socket Layer (SSL) based communication between the Master Agent and the Local Agent for authentication and encryption of data between the CUCM cluster nodes. DRS makes use of the IPSec certificates for its Public/Private Key encryption.

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/214231-certificate-regeneration-process-for-cis.html Disaster Recovery System (DRS)/Disaster Recovery Framework (DRF) is unable to function properly IPsec tunnels to Gateway (GW) to other CUCM clusters do not work