<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Bill,<div><br></div><div>I've seen issues when the hostname in the directory URL etc. doesn't match the server name (i.e. a dns name used for the UCM server name and an IP Address used in the directory URL), as this invalidates the matching of the subject name when validating the HTTPS cert, however this is assuming the ITL trusts the TVS service.</div><div><br></div><div>Are your phones accepting config changes from UCM, i.e. does it trust the config file from the TFTP server, I would have though it must have at some point, possibly when you were on 8.0. If it doesn't now, then something has gone wrong with the TFTP cert as part of the last upgrade, I suspect the ITL file no longer trusts the cert used by the TFTP server, I wonder if it's possible to obtain the TFTP cert from a back-up from before the upgrade and use it (just a thought, be careful ;).</div><div><br></div><div>If you are really stuck with deleting the ITL file from all the phones you should have a look at PhoneView from Unified FX (<a href="http://www.unifiedfx.com">http://www.unifiedfx.com</a>), among a number of other capabilities it can send bulk remote key presses based on macros, allowing for the deletion of ITL files remotely in a matter on minutes without leaving your chair ;)</div><div><br></div><div>There is a short demo on the Cisco support form on how to remotely delete the ITL file from multiple phones:</div><div><br></div><div><a href="https://supportforums.cisco.com/videos/2572">https://supportforums.cisco.com/videos/2572</a></div><div><br></div><div>Thanks</div><div><br></div><div>Stephen</div><div><br></div><div><br><div><div>On 18 Aug 2011, at 15:15, Carter, Bill wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div bgcolor="#FFFFFF"><div>We are having a big problem with this. </div><div><br></div><div>We have a 2 node cluster. Upgraded servers from 7.1(3) to 8.0 then DRS backup. Installed 8.0 on two virtual servers then DRS restore. Then upgraded cluster to 8.5. </div><div><br></div><div>It looks like the physical server hostnames were in all caps and the VM servers are lower case. </div><div><br></div><div>Phones won't download ring tones all can't view any of the directories. The phones UCM server shows either a single UCM or the same UCM as #1 and #2.</div><div><br></div><div>Is there anything we can do besides deleting each phones ITL file?</div><div><br>-Bill Carter<div><br></div></div><div><br>On Aug 13, 2011, at 7:11 AM, "Jason Burns" <<a href="mailto:burns.jason@gmail.com">burns.jason@gmail.com</a>> wrote:<br><br></div><div><span></span></div><blockquote type="cite"><div>I wanted to follow up on this thread. The "show itl" command was a key piece of the troubleshooting process that let us track this down. After this incident though I wanted to take some time to explain how ITL and Security By Default worked, and also document the common troubleshooting steps I used.<div>
<br></div><div>Hopefully this document will help you out in the future!</div><div><br></div><div><a href="https://supportforums.cisco.com/docs/DOC-17679"></a><a href="https://supportforums.cisco.com/docs/DOC-17679">https://supportforums.cisco.com/docs/DOC-17679</a></div><div><br></div>
<div>Support Forums mangles pictures in the thumbnail view, but you should be able to click on each diagram to full size it and get a better understanding of what goes on in the background.</div><div><br></div><div>-Jason Burns<br>
<br><div class="gmail_quote">On Thu, Jun 30, 2011 at 5:31 PM, Wes Sisk <span dir="ltr"><<a href="mailto:wsisk@cisco.com"></a><a href="mailto:wsisk@cisco.com">wsisk@cisco.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<u></u>

  
    
  
  <div text="#000000" bgcolor="#ffffff">
    Summary for the innocent bystanders:<br>
    <br>
    * Phone previously registered to 7.1.5 cluster with no CTL.  Phone
    got ITL file from new cluster successfully.<br>
    * Phone console logs show:<br>
    2155: ERR 12:08:23.841097 SECD: EROR:verifyFile: sgn verify file
    failed</usr/ram/SEP00260BD749E9.cnf.xml>, errclass 8, errcode
    19 (signer not in CTL)<br>
    2156: ERR 12:08:23.841825 SECD: EROR:verifyFile: verify
    FAILED,</usr/ram/SEP00260BD749E9.cnf.xml><br>
    2157: NOT 12:08:23.844821 SECD: sendRespToClient: Sent the response
    to the TVS client, len : 2056<br>
    2158: NOT 12:08:23.860569 tftpClient: authorize file = 13, isEncr =
    0<br>
    <br>
    * phones show ITL downloading successfully. suspect problem with ITL
    file. Get TVS logs.<br>
    <br>
    * This is where things got sketchy. CLI command 'show ITL' shows the
    TFTP entry for the publisher with a serial number.  We checked all
    certificates in ccmadmin under
    system->security->certificates.  No serial numbers match the
    current ITL file.  We tried regenerating CallManager.pem as that
    should be the cert TFTP uses. After regenerating, restarting TVS,
    and restarting TFTP the cli command 'show itl' still shows incorrect
    serial number for TFTP certificate.  This means ITL file is not
    being updated properly.<br>
    <br>
    * Checked TVS logs.  Many red herrings there but one substantial
    error:<br>
    11:45:18.827 |   debug ERROR:writeFile () - Unable to open file
    /usr/local/cm/tftp/ITLFile.tlv for writing (errno - 13)<br>
    11:45:18.827 |   debug In function : tvsGetPublicKeyFromX509<br>
    11:45:19.100 |ITLFileRegenerated - New ITL File has been generated.
    <br>
    <br>
    TVS could not write new ITL file.<br>
    <br>
    Checked filesystem permissions on Matthew's box:<br>
    [root@server ~]# ls -la /usr/local/cm/tftp/ITLFile.tlv<br>
    -rw-r--r--  1 ctftp ccmbase 3664 May 25 13:18
    /usr/local/cm/tftp/ITLFile.tlv<br>
    <br>
    On lab box:<br>
    [root@CUCM85Pub sdi]# ls -la /usr/local/cm/tftp/ITLFile.tlv<br>
    -rw-r--r--  1 certbase ccmbase 4930 Jun 30 15:38
    /usr/local/cm/tftp/ITLFile.tlv<br>
    <br>
    Permissions issue.  On Matthew's box:<br>
    [root@server ~]# ps -eaf | grep -iE "TFTP|TVS"<br>
    certbase 31007 17132  0 15:35 ?        00:00:00
    /usr/local/cm/bin/tvs<br>
    ctftp    31574 17132  0 15:36 ?        00:00:02
    /usr/local/cm/bin/ctftp<br>
    <br>
    Looks like ctftp service most likely wrote or created ITL file on
    May 25.  The owner of ITLFile.tlv should be certbase not ctftp.  We
    did:<br>
    1. chown certbase ITLFile.tlv - this set the correct owner<br>
    2. restarted TVS service - TVS regenerated ITL file and successfully
    wrote it to the file system<br>
    3. restart TFTP service so it could pickup the new ITL file from the
    file system.<br>
    <br>
    After this phones successfully registered. So far there is at least
    one new bug out of this:<br>
    CSCtr27100 TVS inaccurately reports New ITL File has been generated<br>
    <br>
    In CUCM 8.6 ctftp does indeed generate the ITL file.  In
    8.5.1.11900-21 (aka 8.5.1su1) that Matthew is running ITL file
    should be generated by TVS.<br>
    <br>
    Regards,<br><font color="#888888">
    Wes</font><div><div></div><div class="h5"><br>
    <br>
    On 6/30/2011 4:17 PM, Matthew Loraditch wrote:
    <blockquote type="cite">
      
      
      
      <div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Well I just finished what amounted to 5 hours on
            the phone and 6 hours for Cisco. Most of that with Wes and
            apparently Ryan Ratliff and Jason Burns stopped by for a
            while as well!<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Anyway we got it fixed. Wes said he is going to
            do a write up but the gist was the ITL cert was written by
            the wrong service and thus not matching up  and they had to
            go in with root and do something so that right service could
            properly create it.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Major Kudos to Wes and if we are ever within 50
            miles or less of each other drinks are in order!<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p>
        <div><p class="MsoNormal"><span style="font-size:10pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p><p class="MsoNormal"><b><span style="font-size:11pt;color:black">Matthew Loraditch, CCVP, CCNA, CCDA</span></b><span style="font-size:11pt;color:black"><br>
              1965 Greenspring Drive<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:black">Timonium, MD 21093
              <br>
              <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a><br>
              (p) <a href="tel:%28410%29%20252-8830" value="+14102528830" target="_blank">(410) 252-8830</a><br>
              (F) <a href="tel:%28443%29%20541-1593" value="+14435411593" target="_blank">(443) 541-1593</a><br>
              <br>
              Visit us at <a href="http://www.heliontechnologies.com/" target="_blank"><span style="color:black">www.heliontechnologies.com</span></a>
              <br>
              Support Issue? Email <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a>
              for fast assistance!</span><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u><u></u></span></p>
        </div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p>
        <div>
          <div style="border-right:medium none;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;padding:3pt 0in 0in"><p class="MsoNormal"><b><span style="font-size:10pt">From:</span></b><span style="font-size:10pt">
                <a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>
                [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>]
                <b>On Behalf Of </b>Matthew Loraditch<br>
                <b>Sent:</b> Thursday, June 30, 2011 11:24 AM<br>
                <b>To:</b> Lelio Fulgenzi<br>
                <b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                <b>Subject:</b> Re: [cisco-voip] Phones Not Getting
                Auth, Idle, Services URLS, etc<u></u><u></u></span></p>
          </div>
        </div><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Wes is helping out and watching my case so far we
            have just verified normal settings, regenerated the tomcat
            certs to no avail and then totally factory defaulted the
            phone (the 123456789*0#) and now the phone comes up
            unprovisioned and won’t connect at all!<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Engineers seem pretty stumped<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p>
        <div><p class="MsoNormal"><span style="font-size:10pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p><p class="MsoNormal"><b><span style="font-size:11pt;color:black">Matthew Loraditch, CCVP, CCNA, CCDA</span></b><span style="font-size:11pt;color:black"><br>
              1965 Greenspring Drive<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;color:black">Timonium, MD 21093
              <br>
              <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a><br>
              (p) <a href="tel:%28410%29%20252-8830" value="+14102528830" target="_blank">(410) 252-8830</a><br>
              (F) <a href="tel:%28443%29%20541-1593" value="+14435411593" target="_blank">(443) 541-1593</a><br>
              <br>
              Visit us at <a href="http://www.heliontechnologies.com/" target="_blank"><span style="color:black">www.heliontechnologies.com</span></a>
              <br>
              Support Issue? Email <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a>
              for fast assistance!</span><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u><u></u></span></p>
        </div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"><u></u> <u></u></span></p>
        <div>
          <div style="border-right:medium none;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;padding:3pt 0in 0in"><p class="MsoNormal"><b><span style="font-size:10pt">From:</span></b><span style="font-size:10pt"> Lelio
                Fulgenzi [<a href="mailto:lelio@uoguelph.ca" target="_blank"></a><a href="mailto:lelio@uoguelph.ca">mailto:lelio@uoguelph.ca</a>]
                <br>
                <b>Sent:</b> Thursday, June 30, 2011 11:21 AM<br>
                <b>To:</b> Matthew Loraditch<br>
                <b>Cc:</b> Matthew Loraditch; <a href="mailto:cisco-voip@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                <b>Subject:</b> Re: [cisco-voip] Phones Not Getting
                Auth, Idle, Services URLS, etc<u></u><u></u></span></p>
          </div>
        </div><p class="MsoNormal"><u></u> <u></u></p>
        <div><p class="MsoNormal">Let us know how that goes...<br>
            <br>
            Sent from my iPhone<u></u><u></u></p>
        </div>
        <div><p class="MsoNormal" style="margin-bottom:12pt"><br>
            On Jun 30, 2011, at 9:09 AM, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com" target="_blank"></a><a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>>
            wrote:<u></u><u></u></p>
        </div>
        <blockquote style="margin-top:5pt;margin-bottom:5pt">
          <div>
            <div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Well I have done what Lelio
                  suggested, I have rebooted the cluster. I noticed from
                  the phone logs and in security settings that the certs
                  they are getting say the hostname so I changed the
                  CCMs from IP back to hostname. Still no dice…</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Time to open a TAC case!</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p>
              <div><p class="MsoNormal"><span style="font-size:10pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p><p class="MsoNormal"><b><span style="font-size:11pt;color:black">Matthew Loraditch, CCVP, CCNA, CCDA</span></b><span style="font-size:11pt;color:black"><br>
                    1965 Greenspring Drive</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:black">Timonium, MD 21093
                    <br>
                    <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a><br>
                    (p) <a href="tel:%28410%29%20252-8830" value="+14102528830" target="_blank">(410) 252-8830</a><br>
                    (F) <a href="tel:%28443%29%20541-1593" value="+14435411593" target="_blank">(443) 541-1593</a><br>
                    <br>
                    Visit us at <a href="http://www.heliontechnologies.com/" target="_blank"><span style="color:black">www.heliontechnologies.com</span></a>
                    <br>
                    Support Issue? Email <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a>
                    for fast assistance!</span><u></u><u></u></p>
              </div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p>
              <div>
                <div style="border-right:medium none;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;padding:3pt 0in 0in"><p class="MsoNormal"><b><span style="font-size:10pt">From:</span></b><span style="font-size:10pt">
                      <a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>
                      [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>]
                      <b>On Behalf Of </b>Matthew Loraditch<br>
                      <b>Sent:</b> Wednesday, June 29, 2011 9:57 PM<br>
                      <b>To:</b> Lelio Fulgenzi<br>
                      <b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                      <b>Subject:</b> Re: [cisco-voip] Phones Not
                      Getting Auth, Idle, Services URLS, etc</span><u></u><u></u></p>
                </div>
              </div><p class="MsoNormal"> <u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">Will give it a whirl in the am</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p>
              <div><p class="MsoNormal"><b><span style="font-size:11pt;color:black">Matthew Loraditch, CCVP, CCNA, CCDA</span></b><span style="font-size:11pt;color:black"><br>
                    1965 Greenspring Drive</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:black">Timonium, MD 21093
                    <br>
                    <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a><br>
                    (p) <a href="tel:%28410%29%20252-8830" value="+14102528830" target="_blank">(410) 252-8830</a><br>
                    (F) <a href="tel:%28443%29%20541-1593" value="+14435411593" target="_blank">(443) 541-1593</a><br>
                    <br>
                    Visit us at <a href="http://www.heliontechnologies.com/" target="_blank"><span style="color:black">www.heliontechnologies.com</span></a>
                    <br>
                    Support Issue? Email <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a>
                    for fast assistance!</span><u></u><u></u></p>
              </div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p>
              <div>
                <div style="border-right:medium none;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;padding:3pt 0in 0in"><p class="MsoNormal"><b><span style="font-size:10pt">From:</span></b><span style="font-size:10pt"> Lelio
                      Fulgenzi [<a href="mailto:lelio@uoguelph.ca" target="_blank"></a><a href="mailto:lelio@uoguelph.ca">mailto:lelio@uoguelph.ca</a>]
                      <br>
                      <b>Sent:</b> Wednesday, June 29, 2011 9:43 PM<br>
                      <b>To:</b> Matthew Loraditch<br>
                      <b>Cc:</b> <a href="mailto:wsisk@cisco.com" target="_blank"></a><a href="mailto:wsisk@cisco.com">wsisk@cisco.com</a>;
                      <a href="mailto:cisco-voip@puck.nether.net" target="_blank">
                        </a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                      <b>Subject:</b> Re: [cisco-voip] Phones Not
                      Getting Auth, Idle, Services URLS, etc</span><u></u><u></u></p>
                </div>
              </div><p class="MsoNormal"> <u></u><u></u></p>
              <div><p class="MsoNormal">Try the service parameter
                  I mentioned. <u></u><u></u></p>
              </div>
              <div><p class="MsoNormal"> <u></u><u></u></p>
              </div>
              <div><p class="MsoNormal">If you do a search on the
                  archives, Wes posted a link to the doc bug.  <br>
                  <br>
                  Sent from my iPhone<u></u><u></u></p>
              </div>
              <div><p class="MsoNormal" style="margin-bottom:12pt"><br>
                  On Jun 29, 2011, at 9:31 PM, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com" target="_blank"></a><a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>>
                  wrote:<u></u><u></u></p>
              </div>
              <blockquote style="margin-top:5pt;margin-bottom:5pt">
                <div>
                  <div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)">7942s and 7945s so
                        far, in re someone else’s email have restarted
                        tftp etc already.</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p>
                    <div><p class="MsoNormal"><b><span style="font-size:11pt;color:black">Matthew Loraditch, CCVP,
                            CCNA, CCDA</span></b><span style="font-size:11pt;color:black"><br>
                          1965 Greenspring Drive</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:11pt;color:black">Timonium, MD 21093
                          <br>
                          <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a><br>
                          (p) <a href="tel:%28410%29%20252-8830" value="+14102528830" target="_blank">(410) 252-8830</a><br>
                          (F) <a href="tel:%28443%29%20541-1593" value="+14435411593" target="_blank">(443) 541-1593</a><br>
                          <br>
                          Visit us at <a href="http://www.heliontechnologies.com/" target="_blank"><span style="color:black">www.heliontechnologies.com</span></a>
                          <br>
                          Support Issue? Email <a href="mailto:support@heliontechnologies.com" target="_blank"><span style="color:black">support@heliontechnologies.com</span></a>
                          for fast assistance!</span><u></u><u></u></p>
                    </div><p class="MsoNormal"><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span><u></u><u></u></p>
                    <div>
                      <div style="border-right:medium none;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;padding:3pt 0in 0in"><p class="MsoNormal"><b><span style="font-size:10pt">From:</span></b><span style="font-size:10pt">
                            Lelio Fulgenzi
                            <a href="mailto:[mailto:lelio@uoguelph.ca]" target="_blank">[mailto:lelio@uoguelph.ca]</a>
                            <br>
                            <b>Sent:</b> Wednesday, June 29, 2011 7:50
                            PM<br>
                            <b>To:</b> Matthew Loraditch<br>
                            <b>Cc:</b> <a href="mailto:wsisk@cisco.com" target="_blank"></a><a href="mailto:wsisk@cisco.com">wsisk@cisco.com</a>;
                            <a href="mailto:cisco-voip@puck.nether.net" target="_blank">
                              </a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                            <b>Subject:</b> Re: [cisco-voip] Phones Not
                            Getting Auth, Idle, Services URLS, etc</span><u></u><u></u></p>
                      </div>
                    </div><p class="MsoNormal"> <u></u><u></u></p>
                    <div><p class="MsoNormal">Are these 7941/61? I
                        had a problem where I had to change the service
                        provisioning service parameter to external to
                        make this work. <br>
                        <br>
                        Sent from my iPhone<u></u><u></u></p>
                    </div>
                    <div><p class="MsoNormal" style="margin-bottom:12pt"><br>
                        On Jun 29, 2011, at 6:23 PM, Matthew Loraditch
                        <<a href="mailto:MLoraditch@heliontechnologies.com" target="_blank"></a><a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>>
                        wrote:<u></u><u></u></p>
                    </div>
                    <blockquote style="margin-top:5pt;margin-bottom:5pt">
                      <div><p class="MsoNormal"><span style="color:black">Googled and found that and
                            it’s not working….<br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            Matthew Loraditch, CCVP, CCNA, CCDA<br>
                            1965 Greenspring Drive<br>
                            <br>
                            Timonium, MD 21093<br>
                            <br>
                            <a href="mailto:support@heliontechnologies.com" target="_blank"></a><a href="mailto:support@heliontechnologies.com">support@heliontechnologies.com</a><br>
                            (p) <a href="tel:%28410%29%20252-8830" value="+14102528830" target="_blank">(410) 252-8830</a><br>
                            (F) <a href="tel:%28443%29%20541-1593" value="+14435411593" target="_blank">(443) 541-1593</a><br>
                            <br>
                            Visit us at <a href="http://www.heliontechnologies.com/" target="_blank"></a><a href="http://www.heliontechnologies.com/">www.heliontechnologies.com</a><br>
                            <br>
                            Support Issue? Email <a href="mailto:support@heliontechnologies.com" target="_blank"></a><a href="mailto:support@heliontechnologies.com">support@heliontechnologies.com</a><br>
                            for fast assistance!<br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            From: Wes Sisk<br>
                            <a href="mailto:[mailto:wsisk@cisco.com]" target="_blank">[mailto:wsisk@cisco.com]</a>
                            <br>
                            Sent: Wednesday, June 29, 2011 5:24 PM<br>
                            To: Matthew Loraditch<br>
                            Cc: <a href="mailto:cisco-voip@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                            Subject: Re: [cisco-voip] Phones Not Getting
                            Auth, Idle, Services URLS, etc<br>
                            <br>
                            <br>
                            <br>
                            <br>
                            <br>
                            These lines pretty much say it all.
                            verification of the downloaded file failed.
                            Delete the CTL/ITL from the phone and try
                            again.<br>
                            <a href="https://supportforums.cisco.com/docs/DOC-15799#Manual_ITL_Delete" target="_blank"></a><a href="https://supportforums.cisco.com/docs/DOC-15799#Manual_ITL_Delete">https://supportforums.cisco.com/docs/DOC-15799#Manual_ITL_Delete</a><br>
                            <br>
                            Regards,<br>
                            Wes<br>
                            <br>
                            On 6/29/2011 5:03 PM, Matthew Loraditch
                            wrote: <br>
                            <br>
                            1715: ERR 16:59:35.170584 SECD:
                            EROR:verifyFile: sgn verify file failed
                            </usr/ram/SEP00260BD749E9.cnf.xml>,
                            errclass 8, errcode 19 (signer<br>
                            not in CTL)<br>
                            <br>
                            1716: ERR 16:59:35.171327 SECD:
                            EROR:verifyFile: verify FAILED,
                            </usr/ram/SEP00260BD749E9.cnf.xml><br>
                            <br>
                            Sent from my Android phone using TouchDown (<a href="http://www.nitrodesk.com/" target="_blank"></a><a href="http://www.nitrodesk.com/">www.nitrodesk.com</a>)</span>
                          <u></u><u></u></p>
                      </div>
                    </blockquote>
                    <blockquote style="margin-top:5pt;margin-bottom:5pt">
                      <div><p class="MsoNormal">_______________________________________________<br>
                          cisco-voip mailing list<br>
                          <a href="mailto:cisco-voip@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
                          <a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank"></a><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></p>
                      </div>
                    </blockquote>
                  </div>
                </div>
              </blockquote>
            </div>
          </div>
        </blockquote>
      </div>
      <pre><fieldset></fieldset>
_______________________________________________
cisco-voip mailing list
<a href="mailto:cisco-voip@puck.nether.net" target="_blank"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank"></a><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a>
</pre>
    </blockquote>
  </div></div></div>

<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net"></a><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank"></a><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>
</div><div><span>_______________________________________________</span><br><span>cisco-voip mailing list</span><br><span><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a></span><br><span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span><br></div></blockquote></div>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>https://puck.nether.net/mailman/listinfo/cisco-voip<br></blockquote></div><br></div></body></html>