[cisco-voip] Telepresence DX 80 CE 8.x to 9.5 and CTL vs ITL

[Jason Aarons (Americas)]

   Found the problem, appears CTS only used CTL and not ITL.  Did that change with CE 9.5 ?
https://community.cisco.com/t5/telepresence-and-video/telepresence-endpoints-itl-security-by-default/td-p/2702643


Pubs and subs have CTL, but not new subs.
admin:show ctl
Length of CTL file: 0
CTL File not found. Please run CTLClient plugin or run the CLI - utils ctl.. to generate the CTL file.
Error parsing the CTL File.


Looks like they ran a USB hardware eToken on the cluster,  I'd rather do a "utils ctl set-cluster non-secure-mode" and reboot cluster then convert to Tokenless CTL.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245

From: Jason Aarons (Americas)
Sent: Friday, November 30, 2018 6:23 PM
To: cisco-voip (cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
Subject: Telepresence DX 80 CE 8.x to 9.5 and CTL vs ITL

Anyone familiar about changes in CE endpoints going from 8.2 to 9.5 ?  Did older video endpoints use CTL and maybe change to ITL?



I added some new subscribers and TFTP server (realized now without running the capf utility) , and noticed the DX80s have issues talking to new subs/tftp (we are in Mixed Mode) but if I upgrade 9.5+ CE they work fine.  Maybe the upgrade is resetting security settings?  Kind of stumped why upgrade fixes problem.  Also think I need to run a "tils ctl set-cluster non-secure-mode" and reboot cluster.  Don't really need mixed-mode.





Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245

This email and all contents are subject to the following disclaimer:

"http://www.dimensiondata.com/emaildisclaimer"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20181201/f3012510/attachment.html>