Plantronics + Polycom. Now together as Poly Logo

IP5000 will not provision from my freepbx server

SOLVED
Flightline
Occasional Contributor

IP5000 will not provision from my freepbx server

hi, i am using dhcp option 66 to provide a url to the polycom to get its config. i have many other phones all working this way, but no other polycom. the polycom boots but gives this error

0516200947|cfg |4|03|Prov|Download of master configuration file failed

i have done a packet capture. the packet capture shows the polycom does try to connect to our pbx on the correct port but i think it is not accepting our ssl cert. We are using a wildcard cert issued by NetworkSolutions (NOT self-signed). I can provide the packet capture and phone logs.

why does the phone not accept our cert?

1 ACCEPTED SOLUTION

Accepted Solutions
SteffenBaierUK
Polycom Employee & Community Manager

Re: IP5000 will not provision from my freepbx server

Hello Flightline,

I corrected / updated the FA. I suggest you check the provisioning part for the Common Name Validation.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

View solution in original post

Message 4 of 6
5 REPLIES 5
SteffenBaierUK
Polycom Employee & Community Manager

Re: IP5000 will not provision from my freepbx server

Hello Flightline,

welcome to the Polycom Community. We do not officially support Wildcard Cerificates.

The community's VoIP FAQ contains this post here:

Mar 04, 2016 Question:Do Polycom phones support wildcard certificates?

Resolution: Please check this post => here <=

 

The next step would be to contact the WESTCON GROUP EUROPEAN OPERATIONS LTD as they sold this phone back in 04/01/2017 and are your Tier 1 support.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 2 of 6
Flightline
Occasional Contributor

Re: IP5000 will not provision from my freepbx server

hi, thanks for your quick response.  I am a little confused by your reply.  you say they are not officially supported, but the link you sent me to says that UC4.0.0 does support them.....so are they supported?  I am on UC 4.0.8, so that should work?

 

it is saying that settings need to be changed for it to work?  which ones?

 

thanks

 

Message 3 of 6
SteffenBaierUK
Polycom Employee & Community Manager

Re: IP5000 will not provision from my freepbx server

Hello Flightline,

I corrected / updated the FA. I suggest you check the provisioning part for the Common Name Validation.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

View solution in original post

Message 4 of 6
Flightline
Occasional Contributor

Re: IP5000 will not provision from my freepbx server

thanks, one other question, in  which config file are the following found, i do not see them

device.sec.TLS.prov.strictCertCommonNameValidation
sec.TLS.SIP.strictCertCommonNameValidation

thanks again

Message 5 of 6
SteffenBaierUK
Polycom Employee & Community Manager

Re: IP5000 will not provision from my freepbx server

Hello Flightline,

  • device.sec.TLS.prov.strictCertCommonNameValidation is part of the site.cfg file

  • sec.TLS.SIP.strictCertCommonNameValidation is also part of the site.cfg


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 6 of 6