<div dir="ltr">Basically just need to run "<span style="color:rgb(88,88,91);font-family:CiscoSans,Arial,sans-serif;font-size:14px">utils ctl set-cluster non-secure-mode" and delete the CTL from each node using "<span class="gmail-cmdname" style="margin:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;line-height:inherit;vertical-align:baseline;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">file delete tftp</span><span style="background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><span> </span></span><var class="gmail-varname" style="margin:0px;padding:0px;border:0px;font-style:oblique;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;line-height:inherit;vertical-align:baseline;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">CTLFile.tlv".</var></span><div><span style="color:rgb(88,88,91);font-family:CiscoSans,Arial,sans-serif;font-size:14px"><var class="gmail-varname" style="margin:0px;padding:0px;border:0px;font-style:oblique;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;line-height:inherit;vertical-align:baseline;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br></var></span></div><div><font color="#58585b" face="CiscoSans, Arial, sans-serif"><span style="font-size:14px">Probably worth restarting TFTP after that.</span></font></div><div><font color="#58585b" face="CiscoSans, Arial, sans-serif"><span style="font-size:14px"><br></span></font></div><div><font color="#58585b" face="CiscoSans, Arial, sans-serif"><span style="font-size:14px">At that point, new phones won't get a CTL and the cluster will be non-secure. However, you'll still need a way to delete the CTL off of all the phones that downloaded the CTL at some point. You could using something like UnifiedFX for this.</span></font></div><div><font color="#58585b" face="CiscoSans, Arial, sans-serif"><span style="font-size:14px"><br></span></font></div><div><font color="#58585b" face="CiscoSans, Arial, sans-serif"><span style="font-size:14px">Here's the official guide- <a href="https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/10_0_1/secugd/CUCM_BK_C68276B4_00_cucm-security-guide-100/CUCM_BK_C68276B4_00_cucm-security-guide-100_chapter_0100.html">https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/10_0_1/secugd/CUCM_BK_C68276B4_00_cucm-security-guide-100/CUCM_BK_C68276B4_00_cucm-security-guide-100_chapter_0100.html</a></span></font></div><div><font color="#58585b" face="CiscoSans, Arial, sans-serif"><span style="font-size:14px"><br></span></font></div></div><br><div class="gmail_quote"><div dir="ltr">On Fri, Jul 13, 2018 at 12:46 AM Reto Gassmann <<a href="mailto:voip@mrga.ch">voip@mrga.ch</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div dir="auto">All IP phones have a no secure profile. </div></div><div dir="auto">We replace the old 7960/61 with 8851 and plan to use MigrationFX to ease the process. Our integrator now informed us, that we have to set the cluster to no secure for that. </div><div><br><div class="gmail_quote"><div dir="ltr">Brian Meade <<a href="mailto:bmeade90@vt.edu" target="_blank">bmeade90@vt.edu</a>> schrieb am Do. 12. Juli 2018 um 23:31:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Did you use tokens or the tokenless process?</div><br><div class="gmail_quote"><div dir="ltr">On Thu, Jul 12, 2018 at 4:40 PM Reto Gassmann <<a href="mailto:voip@mrga.ch" target="_blank">voip@mrga.ch</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div dir="auto">Hi Daniele</div></div><div dir="auto"><br></div><div dir="auto">I‘d love to upgrade to 11.5 but there are some compatibility issues (eg UCCE) that do not allow me to upgrade right away.</div><div><br><div class="gmail_quote"><div dir="ltr">daniele visaggio <<a href="mailto:visaggio.daniele@gmail.com" target="_blank">visaggio.daniele@gmail.com</a>> schrieb am Do. 12. Juli 2018 um 22:14:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">
<div>What about upgrading to 11.5? from 11.5 auto-registration in mixed mode is supported.<br></div><div><br></div><div><a href="https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200716-CUCM-Auto-registration-Process-In-Mixed.html" target="_blank">https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200716-CUCM-Auto-registration-Process-In-Mixed.html</a></div>
<br></div><div class="gmail_extra"><br><div class="gmail_quote"></div></div><div class="gmail_extra"><div class="gmail_quote">2018-07-12 19:24 GMT+02:00 Reto Gassmann <span dir="ltr"><<a href="mailto:voip@mrga.ch" target="_blank">voip@mrga.ch</a>></span>:<br></div></div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Hallo Group</div><div dir="auto"><br></div><div dir="auto">What are the steps, challanges and risks if I switch a CUCM 10.5 cluster from mixed mode back to no secure. </div><div dir="auto">I have to do that because I need IP phone autregistration back.</div><div dir="auto"><br></div><div dir="auto">Thanks a lot</div><div dir="auto">Regards Reto</div><div dir="auto"><br></div><div dir="auto"><br></div>
<br></blockquote></div></div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>
</blockquote></div></div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div>
</blockquote></div></div>
</blockquote></div>