VVX411 Skype for Business not downloading CA Certs

Highlighted
Occasional Visitor

VVX411 Skype for Business not downloading CA Certs

Hi, 

We have an on-prem skype environment, and are in the process of deploying VVX411 devices into some of our meeting rooms/hotdesk areas, but im having some serious issues getting them to actually sign into the service.

 

The problem seems to be related to them pulling down the trusted root CA's from our Skype environment, i have configured DHCP options 161 to point to our provisioning service, and have spent a good portion of today messing around with option 43 to try and get the phone to pull from the Certificate Provisioning Service URL. Alas im hitting a brick wall.

 

The phone does show the Certificate Provisioning Service URL correctly in the Diagnostics > Skype for Business status parameters page, but refuses to log into the service.

 

Details of Device

Phone Model VVX 411

Part Number 3111-48450-001 Rev:A

MAC Address 64:16:7F:31:0E:01

IP Mode IPv4

IP Address 192.168.1.50

UC Software Version 5.8.0.12848

Updater Version 5.9.5.13643

Log of attempted login attached.

 

Message 1 of 2
1 REPLY
Polycom Employee & Community Manager

Re: VVX411 Skype for Business not downloading CA Certs

Hello @Aaron Smith,

 

welcome to the Polycom Community.

Thanks for providing the minimum requested details.

 

Looking at your log we can see the phone fails to download or verify a certificate:

 

0110183728|nisvc|2|00|HTTP SEND:: DestUrl(https://skypeinternalweb.int.domain.co.uk/WebTicket/WebTicketService.svc/pin), HttpResCode(0), curlRetCode(60) retVal(0)
0110183728|nisvc|2|00|ErrorBuffer::SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed


Please ensure you always check the FAQ's and/or utilize the community search before posting any new topics or follow up post’s.

 

 

The next step would be a support ticket.


In order to raise a support ticket you need to work with your Polycom reseller as they need to do this for you.

End Customers are unable to open a ticket directly with Polycom support.

 

Siphon Networks Ltd sold this unit 07/03/2018 so they are your Tier 1 contact.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

Please be aware:

The purpose of these forums is to allow community members collaborate and help each other.
Questions posted here do not follow Polycom’s SLA guidelines.
If you require assistance from Polycom technical support, please open a
web service request or call us .

The above is necessary in order to track issue internally within Polycom.

You are welcome to post more questions or configuration or logs for other community members to look at but if your issue requires a fix via Polycom you must go via the official support structure.

Please ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

This forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Polycom employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and may be answered on weekends, bank holidays or personal holidays.
Message 2 of 2