Plantronics + Polycom. Now together as Poly Logo

VVX 500/600 Client certificate expiring

SOLVED
Highlighted
Advisor

VVX 500/600 Client certificate expiring

We are using Extension/PIN authetication for phones and the expiration date for our certifactes is coming near. When the web ticket expires how does the polycom stay logged in? Does it automatically log out and log back in to grab a new certificate on its own?

 

We are using a cert provisioning service for ceritfcation. No cert is kept in the config file or uploaded to the phone. If I manually sign out and back in I get a new certificate with the current time stamp with the Skype max of 1 year. Rebooting doesnt trigger the new cert unless it is already expired. Also it seems that the phone freezes when the certificate expires and a phyiscal reboot is neccessary. I don't want to have to do that to 700 phones.

 

All phones are running FW 5.7.0.11768

Message 1 of 5
4 REPLIES 4
Polycom Employee & Community Manager

Re: VVX 500/600 Client certificate expiring

Hello @magicmike,

welcome back to the Polycom Community.

Our phones do have ‘User certificate renewal process built in i.e. ‘At a suitable time, prior to the certificate expiry (e.g. 25% or 30 days, whichever is less), the certificate gets renewed.

 

So, there is no question of user getting signed out since the devices gets new User certificate.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services




<======== Signature / Disclaimer ========>
Please be aware:For questions about the type of support to expect please check here

Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

The title Polycom Employee & Community Manager is an automatic setting within the community and any forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Poly employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and maybe answered on weekends, bank holidays or personal holidays.
Message 2 of 5
Advisor

Re: VVX 500/600 Client certificate expiring

Hi Stephen,

 

Thabks for responding.

 

The auto renewal doesn't happen though if the root certifacte has also changed correct? In that case i would have to make sure the phone has the new root certificate, sign out, sign in, and then i'm good until the root also changes.

 

Is there a way to change the auto renewal time frame? 

Message 3 of 5
Polycom Employee & Community Manager

Re: VVX 500/600 Client certificate expiring

Hello @magicmike,

No, there is no Auto renewal for the Root certificate.

 

There is no way for the customers to change the auto renewal time frame.

 

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services




<======== Signature / Disclaimer ========>
Please be aware:For questions about the type of support to expect please check here

Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

The title Polycom Employee & Community Manager is an automatic setting within the community and any forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Poly employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and maybe answered on weekends, bank holidays or personal holidays.
Message 4 of 5
Advisor

Re: VVX 500/600 Client certificate expiring

Hello Steffen,

sorry to reopen this thread, and sorry if, as i guess , this has been aready asked an replied in somewhere else, but I have sopradic issue with VVX phones around the world (e.g. common area phoned (pin-auth) found signed out, users's phones (credential-auth via BToE) locking out user's account due to authentication failures, etc.) and I never well understood this point.

 

When you say: "Our phones do have ‘User certificate renewal process built in i.e. ‘At a suitable time, prior to the certificate expiry (e.g. 25% or 30 days, whichever is less), the certificate gets renewed."

 

Can you please clarify how the phone does the certificate renewal ? Is it using the certificate itself (still valid) to authenticate against the lync/skype4b server and have a new cert or is it using cached credentials (e.g. ext/pin for pin-auth or user/pass for cred-auth) ?

 

Many thanks in advance for you patience in clarifing this (i guess) again.

 

Regads,

Enrico.

Message 5 of 5