Plantronics + Polycom. Now together as Poly Logo

Can the VVX Browser use the device certificate?

Dakota
Occasional Advisor

Can the VVX Browser use the device certificate?

Hi

 

I have a VVX 4XX phone that provisions using the device certificate correctly on an Apache service. In fact all of our VVX and polycom do so. This phone is a PolycomVVX-VVX_401-UA/5.5.0.20556 

 

I have been trying out the browser on the phone and wanted to secure the web server content using the device certifcate.

 

I have been unable to do this as the browser simply errors saying TLS/SSL Handshake error. The Apache server reports "SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate No CAs known to server for verification?"

 

I am using the same provisioning server with the same SSL configuration set to require the client certificates.

 

I have changed profiles but all seem to be almost the same and the device certificate is enabled on each anyway.

 

I am assuming that the browser is capable of doing this? The latest documentation implies it can and the fact the SSL profiles include a device certifiate option, it makes me think so.

 

Is there a different CA I should be using?

 

 

all the best

 

Dan

Message 1 of 6
5 REPLIES 5
Dakota
Occasional Advisor

Re: Can the VVX Browser use the device certificate?

This is a VVX401 so I have updated to the latest 5.5.2 firmware to ensure it is not that causing a problem.

 

I still have this issue.

Message 2 of 6
SteffenBaierUK
Polycom Employee & Community Manager

Re: Can the VVX Browser use the device certificate?

Hello Dan,

welcome to the Polycom Community.

What do you want to actually archive ?

 

Are you using the Microbrowser on the phone or are you talking about the Web Interface itself when you browse to the IP of the Phone ?

 

If the Web Browser via IP I suggest you check the "Use Digital Certificates" within the Admin Guide as it explains how to use http://pki.polycom.com/pki


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 3 of 6
Dakota
Occasional Advisor

Re: Can the VVX Browser use the device certificate?

Hi Stefan

 

As I said the VVX Browser. 

 

I already have read the 'Use Digital Certificates' document as I explained I already have a working Apache server that the phone communicates to for provisioning.

 

I want to develop an app that the 'VVX browser' will display. I want the App to be secured using the factory installed polycom device certificate.

 

So far I haven't been able to get it to work and I now need confirmation from someone that this is possible and/or if anyone else has tried this?

 

Dan

Message 4 of 6
Dakota
Occasional Advisor

Re: Can the VVX Browser use the device certificate?

Is there any way to get an answer to this question?

 

Dan

Message 5 of 6
SteffenBaierUK
Polycom Employee & Community Manager

Re: Can the VVX Browser use the device certificate?

Hello Dan,

welcome back to the Polycom Community.

I have tried to find this answer with no luck so far. The only official way would be to open a Support Ticket.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 6 of 6