In order to proceed the following must be met
- DNS servers configured on all CUCM servers
- Export Certificates from all Domain Controllers
- Check who Domain Controllers have the Global Catalog role installed
- Upload DC certificates on all CUCM and Presence servers using "tomcat-trust" for versions 8.x and newer.
- Restart Tomcat service from CLI/SSH using utils
service restart Cisco Tomcat
- Declare your LDAP servers with SSL and use port 3269 for GC enabled DCs and port 636 for non-GC servers.