Plantronics + Polycom. Now together as Poly Logo

Expired cert provisioning

Highlighted
Occasional Visitor

Expired cert provisioning

Hello everyone,

 

I have strange issue with my provisioning system. I have built FTP server to deploy configuration to my VVX phones. A couple of days ago the phones have logged out and couldn't log in again. We have figured out that our ROOT cert has expired. After all the maintenance the phones didn't start working. It turned out the new Root cert has been deployed as CA certificate 6 but the old one as CA certificate 5.

 

0906115030|tls |*|00|Custom application CA certificate 6 has been removed from config
0906115030|tls |*|00|Saving new Custom application CA certificate 6 
0906115030|tls |*|00|New Certificate Common Name XXXXX' Fingerprint 'BE:FE:6E:39:75:48:95:E7:AD:14:CD:B3:2E:20:13:07:F0:2B:46:CE'
0906115030|tls |*|00|Old Certificate Common Name 'XXXXX' Fingerprint 'BE:FE:6E:39:75:48:95:E7:AD:14:CD:B3:2E:20:13:07:F0:2B:46:CE'
0906115030|tls |*|00|Custom application CA certificate 5 has been removed from config
0906115030|tls |*|00|Saving new Custom application CA certificate 5 
0906115030|tls |*|00|New Certificate Common Name 'XXXXX' Fingerprint '17:0F:2C:8F:84:08:7F:46:4E:EA:6C:84:CA:7B:9D:E4:FF:2A:CE:9E'
0906115030|tls |*|00|Old Certificate Common Name 'XXXXX' Fingerprint '17:0F:2C:8F:84:08:7F:46:4E:EA:6C:84:CA:7B:9D:E4:FF:2A:CE:9E'

As soon as the 5th cert is deleted everything starts working.

 

How can I avoid the expired cert deployment??

 

BR
Marcin

Message 1 of 2
1 REPLY 1
Polycom Employee & Community Manager

Re: Expired cert provisioning

Hello @MarcinM ,

 

Welcome to the Poly Community.

Both the communities Must Read First and the FAQ reference the basic minimum information a new or follow up post should contain.

This ensures the questions having to be asked are limited and any new or follow up post contains the right amount of details to ensure any voluntary participant within the community does not spend additional time chasing basic information.

As a reminder the basic information asked for:

 

  • Provide the exact Software Version of your Phone
  • Provide the Phone Model
  • Provide the Call Platform (aka openSIP,Teams, Skype for Business Online, Skype for Business on Premise, Lync)
  • Provide details if UC / SIP or ObiEdition
  • Additional Poly Infrastructure (RPRM,PDMS or BToE)
  • If applicable provide a backup of the phone in question

UC Software 4.0.0 or later via the Web Interface Utilities > Phone Backup & Restore > Phone Backup > Phone Backup. Please rename into .TXT or Zip the file to attach.
Since UC Software 5.9.0 simply provide this via the Web Interface Diagnostics > Download Support Information Package

  • If possible provide a Log and either attach them or use the Code Tag.Consult the Troubleshooting Section found within the FAQ if applicable
  • If possible provide the MAC Address or Serial of the device
  • Provide details for example if the issue is a day 1 issue or only happened after an upgrade or any other relevant details
  • For questions around Support please check here

 

Whilst providing some of these details may not directly impact any possible answer the community can provide, it does enable Poly to have an overview of the current software used. In addition, providing all details at the same time allow us to check logs or look up potential support partners if an issue needs to come into support. It also enables us to verify the entitlement for using features.

 

A couple of simple additional questions:

 

  • couldn't log in again?
    Log into what? A SIP Server, the FTP Server?
    Please clarify
  • How is the configuration done? Attach some example so we can understand and comment
  • Who deployed the old and the new certificate?


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier




<======== Signature / Disclaimer ========>
Please be aware:For questions about the type of support to expect please check here

Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

The title Polycom Employee & Community Manager is an automatic setting within the community and any forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Poly employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and maybe answered on weekends, bank holidays or personal holidays.
Message 2 of 2