• ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
The HP Community is where owners of HP products, like you, volunteer to help each other find solutions.
HP Recommended

Where exactly does this config change needs to be made? in 000000000.cfg? or overrides?

HP Recommended

@mudit

In out inviroment I placed the 

feature.validate.peer.cert="0"

in the 000000000.cfg file as the issue appeared accross all phones/ subnets on our network. Idon't know if it is considered bestpractices but I reserve changes to the overide file for phone specfic changes. I've seen in the past people placing simular changes in a location file if a problem is isolated to a single office.

 

Unfortuantly I was given a lot of this information second hand, as it was the consultant in charge of the Skype demo who was able to contact Polycom support and not myself. So what I say may have been changed though the game of teliphone I got it though. "This line should skip the certificate validation test. We needed this because the root store which the phone comes preinstalled with could not validate the cert our skype servers were providing them."

There was a second workaround which was adding a certificate to the phone using the lines below 

<lyncShared>
   <TLS sec.TLS.profileSelection.SIP="ApplicationProfile1" sec.TLS.customCaCert.1="-----BEGIN CERTIFICATE-----
<Enter certificate here>
...
<Several lines of certificate later>
-----END CERTIFICATE-----"/>
</lyncShared>

I was able to create some situations which neither of this solutions worked. However at this time the Proof of Concept work has been haulted, I'll try to update this if I get any more clarification on why I can still get these phones to fail a PIN auth.

† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.