HTTPS Provisioning Problem

[Anonymous]

I am trying to setup provisioning server using HTTPS, I have tested HTTP which is working fine. I am using Go-Daddy G2 certificate for my server and I have tried PolycomRootCA, as well as other recognize RootCA which Polycom allows. I don't want to install certificate manually on phone because I am going to deploy more then 200 phones.

I am using VVX410 for My test purpose, If works I would be using VVX150, VVX250, VVX450 for deployment.

Phone Info

MAC : 0004f29188d0

BootROM 5.1.6.4828

SIP Version 4.1.6.5734

Device Factory certificate is installed

Please Help

Thank you

[SteffenBaierUK]

Hello @Mijal ,

Welcome to the Poly Community.

Setting up a HTTPS provisioning server is documented in detail here:

Oct 7, 2011 Question: How can I setup my Phone / Provisioning / Download / Upgrade / Update / Downgrade Software?
Resolution: Please check => here <=

In addition, we detail what Certificates we include in our software here:

Jan 27, 2015 Question:How can I verify the certificate validity period used with the Poly VVX / CCX / Trio Phone software?

Resolution: Please check this post => here <=

If the certificate provider used is not already in the built-in certificate store in the currently used software then either update to a later version which includes this and/or use a different provider.

To my own personal knowledge, you cannot use the certificates from here http://pki.polycom.com/pki  to provision a phone using HTTPS.

You could use a so-called staging server with a DHCP option 160 to point to a provisioning server which would then contain a master configuration file aka 00000000000.cfg which loads a new configuration with the following content:

• New certificate
• New HTTPS provisioning server address holding the rest of the configuration

Using the above way you would not need to manually touch every single phone and could fully automate this.

If this is not what you are after and/or any other volunteer can help you please go ahead and open a ticket.

In order to raise a support ticket, you need to work with your Poly reseller as they may need to do this for you.

End Customers are usually unable to open a ticket directly with Poly support. Available End User Poly services offerings are detailed here

The Mac shared is from a device sold back in 21/03/2015 via SCANSOURCE INC. They are your Tier and as the unit is no longer within the warranty please be prepared to Pay Per Incident / PPI.

This is all outlined in detail here

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier