<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<blockquote type="cite" class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1; font-family: ArialMT;">
<div class="">
<div class="" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;">
<span class="" style="font-family: Arial, sans-serif;">My current working theory is that CUCM 12 seems to use an EC certificate on the HTTPS service that newer phones use to download firmware (<a href="https://%3ccucm%3e:6972" class="" style="color: rgb(149, 79, 114);">https://<cucm>:6972</a>)
, and the old firmware doesn’t support it. But if this was true, why didn’t the 8811 phone fall back to plain-old TFTP over UDP 69.</span></div>
</div>
</div>
</blockquote>
</blockquote>
<div class=""><br class="">
</div>
You are correct that TFTP uses an HTTPS cert on that port, but Jabber is the only client that uses 6972 (it’s based on the Tomcat cert as well). Endpoints will use TCP 6970 and until UCM 12.5 won’t do any HTTPS for TFTP.
<div class=""><br class="">
</div>
<div class="">The biggest difference I can think of between TFTP signed files on 12.0 and 10.5 is that the key signing files on 12.0 is going be the SHA2 private key that goes with the ITLRecovery cert. On 10.5 it’s likely still a SHA1 key for the CallManager.pem
cert.</div>
<div class=""><br class="">
</div>
<div class="">Can you provide the specific error you saw regarding the default config file?</div>
<div class=""><br class="">
<div class="">
<div style="color: rgb(0, 0, 0); font-family: "Lucida Grande"; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-east-asian: normal; font-variant-position: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
- Ryan Ratliff</div>
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On Jan 8, 2019, at 11:53 PM, Dana Tong <<a href="mailto:dana.tong@yellit.com.au" class="">dana.tong@yellit.com.au</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 10pt; font-family: Arial, sans-serif;" class="">You said you were able to get them upgraded on a 10.5x cluster and then connected them to the 12.x cluster? Did you delete the ITL file when trying to update on the 12.x cluster? Or have
I misinterpreted the steps you tried here.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 10pt; font-family: Arial, sans-serif;" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 10pt; font-family: Arial, sans-serif;" class="">Regards,<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 10pt; font-family: Arial, sans-serif;" class="">Dana<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<o:p class=""> </o:p></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 10pt; font-family: Arial, sans-serif;" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span lang="EN-US" class="">From:</span></b><span lang="EN-US" class=""><span class="Apple-converted-space"> </span>cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" class="">cisco-voip-bounces@puck.nether.net</a>><span class="Apple-converted-space"> </span><b class="">On
Behalf Of<span class="Apple-converted-space"> </span></b>Brian V<br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Wednesday, 9 January 2019 12:23 PM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>[cisco-voip] Odd phone Firmware upgrade issue - 8811 at firmware 10.3.1-20 won't upgrade on CUCM 12.0 but will on 10.5<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<o:p class=""> </o:p></div>
<div class="">
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Odd phone Firmware upgrade issue - 8811 at firmware 10.3.1-20 won't upgrade on CUCM 12.0 but will on 10.5<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">8811 shipped with 10.3.1.-20 firmware, CUCM 12 and CUCM 10.5 both have default load for 8811 phones set to 12-1-1SR1-4.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Customer acquired some new 8811 phones with super old firmware. Unboxed them and attached to the network where other IP phones (8851,8861) are up and registered to CUCM 12.0.1.22900-11. The 8811 would
not upgrade code. It had an error in the phone log about the default xml config file. Tried resetting security settings, full factory reset, etc.. Nothing worked. I was suspecting the old "2-hop upgrade" might be needed, but that didn’t work either.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">I then erased the phone again and connected it to a CUCM 10.5.2 SU2 system with the latest device pack. The default phone load on this CUCM 10.5 was the same as CUCM 12.0 and the 8811 phone was still at
firmware 10.3.1-20. The phone upgraded code no problem.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Once the phone was on firmware 12.1.1SR1-4, it registered fine to CUCM 12.0.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">My current working theory is that CUCM 12 seems to use an EC certificate on the HTTPS service that newer phones use to download firmware (<a href="https://%3ccucm%3e:6972" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://<cucm>:6972</a>)
, and the old firmware doesn’t support it. But if this was true, why didn’t the 8811 phone fall back to plain-old TFTP over UDP 69.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">I have a TAC case open, but not making much headway yet.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">The big issue is that I have 100's more of these 8811 phones in boxes and having to unbox each of them and temporally connecting to a CUCM 10.5 to get firmware upgraded is not a task I'm looking forward
to.<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Recap:<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">8811 phone at firmware 10.3.1-20 firmware will directly upgrade to firmware 12-1-1SR1-4. on CUCM 10.5 but won't do the exact same thing on CUCM 12.0-SU2<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Any thoughts on this issue ? <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Brian Van Benschoten<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class="">Presidio<o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 15.399999618530273px;" class="">
<span style="font-family: Arial, sans-serif;" class=""> <o:p class=""></o:p></span></div>
</div>
</div>
<span style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">cisco-voip
mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a></span><br style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: ArialMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" class="">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>