Plantronics + Polycom. Now together as Poly Logo

VVX411 Skype for Business not downloading CA Certs

SOLVED
Highlighted
Occasional Contributor

VVX411 Skype for Business not downloading CA Certs

Hi, 

We have an on-prem skype environment, and are in the process of deploying VVX411 devices into some of our meeting rooms/hotdesk areas, but im having some serious issues getting them to actually sign into the service.

 

The problem seems to be related to them pulling down the trusted root CA's from our Skype environment, i have configured DHCP options 161 to point to our provisioning service, and have spent a good portion of today messing around with option 43 to try and get the phone to pull from the Certificate Provisioning Service URL. Alas im hitting a brick wall.

 

The phone does show the Certificate Provisioning Service URL correctly in the Diagnostics > Skype for Business status parameters page, but refuses to log into the service.

 

Details of Device

Phone Model VVX 411

Part Number 3111-48450-001 Rev:A

MAC Address 64:16:7F:31:0E:01

IP Mode IPv4

IP Address 192.168.1.50

UC Software Version 5.8.0.12848

Updater Version 5.9.5.13643

Log of attempted login attached.

 

Message 1 of 2
1 REPLY 1
Polycom Employee & Community Manager

Re: VVX411 Skype for Business not downloading CA Certs

Hello @Aaron Smith,

 

welcome to the Polycom Community.

Thanks for providing the minimum requested details.

 

Looking at your log we can see the phone fails to download or verify a certificate:

 

0110183728|nisvc|2|00|HTTP SEND:: DestUrl(https://skypeinternalweb.int.domain.co.uk/WebTicket/WebTicketService.svc/pin), HttpResCode(0), curlRetCode(60) retVal(0)
0110183728|nisvc|2|00|ErrorBuffer::SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed


Please ensure you always check the FAQ's and/or utilize the community search before posting any new topics or follow up post’s.

 

 

The next step would be a support ticket.


In order to raise a support ticket you need to work with your Polycom reseller as they need to do this for you.

End Customers are unable to open a ticket directly with Polycom support.

 

Siphon Networks Ltd sold this unit 07/03/2018 so they are your Tier 1 contact.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services




<======== Signature / Disclaimer ========>
Please be aware:For questions about the type of support to expect please check here

Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

The title Polycom Employee & Community Manager is an automatic setting within the community and any forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Poly employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and maybe answered on weekends, bank holidays or personal holidays.
Message 2 of 2