<div dir="ltr">It is running 12.8... it has been locally reg'd before...</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Nov 11, 2021 at 10:44 AM Matthew Huff <<a href="mailto:mhuff@ox.com">mhuff@ox.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-1422203158652585524WordSection1">
<p class="MsoNormal"><span>In the lab, have you tried setting up the phone without MRA and get the firmware uploaded first? Depending on how old the firmware
is, you may have issues with onboarding. Our 8861 wouldn’t onboard until at least 12.5.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-GB" style="font-family:Arial,sans-serif;color:rgb(31,73,125)">Matthew Huff</span></b><span lang="EN-GB" style="font-family:Arial,sans-serif;color:rgb(31,73,125)">
| Director of Technical Operations | OTA Management LLC<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:4pt;font-family:Arial,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:Arial,sans-serif;color:rgb(31,73,125)">Office: 914-460-4039<u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><a href="mailto:mhuff@ox.com" target="_blank"><span style="color:rgb(5,99,193)">mhuff@ox.com</span></a>
| </span></i><i><span lang="EN-GB" style="font-family:Arial,sans-serif"><a href="http://www.ox.com" target="_blank"><span style="color:rgb(5,99,193)">www.ox.com</span></a><span style="color:rgb(31,73,125)"><u></u><u></u></span></span></i></p>
<p class="MsoNormal"><b><span style="font-size:7.5pt;font-family:Arial,sans-serif;color:gray">...........................................................................................................................................<u></u><u></u></span></b></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal" style="margin-left:0.5in"><b><span>From:</span></b><span> cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>>
<b>On Behalf Of </b>Jonathan Charles<br>
<b>Sent:</b> Thursday, November 11, 2021 11:10 AM<br>
<b>To:</b> Brian Meade <<a href="mailto:bmeade90@vt.edu" target="_blank">bmeade90@vt.edu</a>><br>
<b>Cc:</b> cisco-voip voyp list <<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br>
<b>Subject:</b> Re: [cisco-voip] MRA Onboarding via activation code... phone trust list?<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in">On the phone, we see TLS connection failed... the E's cert is signed by Let's Encrypt... <u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">On the Expressway E we see some certificate exchange and then resets in the connection...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">MRA works fine for Jabber.... just 8845 Activation Code onboarding is failing...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Jonathan<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">On Tue, Nov 9, 2021 at 5:57 PM Brian Meade <<a href="mailto:bmeade90@vt.edu" target="_blank">bmeade90@vt.edu</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-left:0.5in">What's the console logs show?<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">The Expressway needs to be signed by one of the trusted CAs listed that are part of the phone firmware.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">The Expressway cert authenticates the phone with the MIC.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Do you have activation code onboarding enabled under the MRA config on the Expressway-C?<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">On Fri, Nov 5, 2021, 5:30 PM Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-left:0.5in">So, I set up activation code MRA for an 8845 (lab first)...<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Cloud onboarding worked, got an activation code, tried it out...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Phone kicks back 'check internet connectivtity' and on the status on the phone says:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">GDS Handshake Succeeded <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">A TLS connection failed...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">GDS is Cisco's cloud onboarding thingy.... I am assuming it didn't like the TLS connection the expressway, but I don't see anything in the Expressway logs...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">There is a bug and it says we need to load a Hydrant cert back into the trust store...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><a href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt67257?rfs=iqvred" target="_blank">https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt67257?rfs=iqvred</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">But where do we need to load it? Tomcat Trust? On the Expressways? The bug doesn't say... it needs to be pushed to the phone's trust list, how do you do that?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Thanks!<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Jonathan<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:0.5in">_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</blockquote>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote></div>