Occasional Advisor
Posts: 8

Issues provisioning HDX units, RPRM

RPRM 10.0.1_25, HDX 7000('s), 3.0.


We are able to dynamically provision Group Series endpoints. Both Admin and Network profiles.


Trying to provision an HDX 7000 endpoint and recieving failure notices on the HDX and RPRM. Have attempted both Machine Account on RPRM and an Active Directory room account (preferred for us). The AD account approach does seem to work somewhat. The AD account info and attributes we are using do seem to show up in RPRM (phone attribute and .164 number, etc) but the provisioning status shows 'failed'. So clearly the command from the HDX with the user/pass/domain is hitting the RPRM. Under Rooms in RPRM, after an attempt to provision the HDX is associated with the Room Account (with details coming from the AD account).


On the HDX, the endpoint logs show a failure:

2017-02-22 22:55:00 ERROR jvm: pc[0]: UI: fcgi/0: ProvisionUpdater: There was a fatal error in parsing the profile, abandoning provisioning 
2017-02-22 22:55:00 ERROR jvm: pc[0]: UI: fcgi/0: ProvisionUpdater:  Provisioning had fatal error on: enablesecureprofile 

I have reset the profiles for the HDX (Group Series has their own profiles), applied just network profile or just admin profile, setup simplified profiles that don't change much (if anything at all) and the HDX still throws an error. The provisions page shows the same default error, something to the affect of checking user, pass, domain, etc.


Looking through the RPRM logs but not sure where to be looking exactly. Is there a particular log with the provisioning details?


RPRM has a self-signed cert, all the provisioning is happening behind a central firewall and manually pointing the HDX at the DMA, etc all seems to work fine.


Any ideas?




Polycom Employee & Community Manager
Posts: 12,563

Re: Issues provisioning HDX units, RPRM

Hello scotteredu,

welcome back to the Polycom Community.

The only issue internally I could find with the same error message was SSGSE-11866 and goes back to the days of the CMA.


Is your HDX some kind of JITC aka a secure installation?


The "old" issue was that the HDX did not understand the security profile of NONE as it should be Off instead. You can double check this on your profile but the old case was from back in 2011


The next step would be a Polycom service ticket via your reseller.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

Please be aware:

The purpose of these forums is to allow community members collaborate and help each other.
Questions posted here do not follow Polycom’s SLA guidelines.
If you require assistance from Polycom technical support, please open a
web service request or call us .

The above is necessary in order to track issue internally within Polycom.

You are welcome to post more questions or configuration or logs for other community members to look at but if your issue requires a fix via Polycom you must go via the official support structure.

Please ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

This forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Polycom employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and may be answered on weekends, bank holidays or personal holidays.
Occasional Advisor
Posts: 8

Re: Issues provisioning HDX units, RPRM

Working with our reseller and Polycom on this.


I figured out something that got a bit further. The HDX takes the Provisioning information and reboots. RPRM Status for that particular endpoint is 'in progress' - which is an improvement.


This particular issue - which we have seemed to get past, but have got caught on the next conflicting setting - is related to the Security Profile and Enable Secure Mode on the RPRM network profile settings when provisioning HDX units.


RPRM 10.+ seems to be catered to Group Series, especially the Dynamic provisioning. The profile language and what gets sent to the endpoints, especially with security, is centered on the Group Series. In this case the Security profile (in my experience) needs to be set to NONE and Enable Secure Mode [unchecked].


We are not out of the woods on our particular deployment (I got 30+ HDX units and can't abandon them) but I'll document what I find here, to help someone in the future.


We plan to use (with HDX):

Dynamic Provisioning from RPRM 10

Directory services

Calendaring/One Touch Dialing (OTD)

Enterprise Integration (AD OU's to set local account access, etc on each endpoint).


I'll try and come back and summarize what works and doesn't for us when we come to some conclusion.