[cisco-voip] TLS Error on Phone after reset

[Jason Burns]

Reto and Chris,

I wonder how long this cluster has been installed and using security. The
CAPF certificates and LSC Certificates have a lifetime of 5 years from the
date of generation. It could be possible that these certificates (Either
CAPF or the individual LSC certificates) have expired.

I would check the OS Administration page under Security > Certificates and
view the validity period of the CAPF.pem certificate. Also, now would be a
good time to go into OS Admin > Security > Certificate Monitor and
configure a valid email address so you can be emailed for future
certificate expiration. Keep in mind that this means you'll need to enter a
valid SMTP server under  OS Admin > Settings > SMTP

Even if I'm wrong hopefully you got some good info ;)

-Jason


On Thu, Feb 7, 2013 at 9:53 AM, Chris Ward (chrward) <chrward at cisco.com>wrote:

>  What is the model and firmware version of the phones facing this issue?
> Is it all phones or just a subset?****
>
> ** **
>
> +Chris****
>
> Unity Connection TME****
>
> ** **
>
> *From:* cisco-voip-bounces at puck.nether.net [mailto:
> cisco-voip-bounces at puck.nether.net] *On Behalf Of *Reto Gassmann
> *Sent:* Thursday, February 07, 2013 9:45 AM
> *To:* cisco-voip at puck.nether.net
> *Subject:* [cisco-voip] TLS Error on Phone after reset****
>
> ** **
>
> Hello group
>
> we have a problem with our phones that started this afternoon. If a phone
> restarts for any reason (reset oder network unplugged) it shows a TLS Error
> (TLS Error: [CUCM IP]).****
>
> We can fix the problem, when we go to the device in the CUCM
> Administration and choose Install/Upgrade in the CAPF Information section.
> After resetting the Device the IPPhone starts and updates the
> certificate. ** **
>
>
> What could cause such a behaviour and how could we fix it?****
>
> We have a CUCM 7.1(3a) and have the phones authenticated.****
>
> Thanks Reto****
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20130207/c8a0d73e/attachment.html>