• ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
The HP Community is where owners of HP products, like you, volunteer to help each other find solutions.
Locked

‎05-01-2012 02:10 AM

HP Recommended

Hi,

 

I am trying to confiure an IP650 for use with a hosted IP solution, specifically BT IPVS.  However after the phone downloads and updates the bootrom and firmware on the phone, I simply get a 'Config Error 0x4020'. 

 

I have been told by the provider they are seeing a '403" Forbidden - ".7" SSL client certificate is required' when it attempts to update with an auto-config file.  I assume this means the phone is missing an SSL certificate, so my question is how can I get one, and install it into the phone? Is this even possible or am I simply out of luck?

 

I have tried reflashing the bootrom/firmware of the phone with various versions and nothing seems to to work?!?

3 REPLIES 3

‎05-01-2012 02:18 AM

HP Recommended

Hello rsfrontier,

welcome to the Polycom Community.

We encourage all users to read the Welcome Post, the FAQ and use the Forum Search.

 

The answer to your query can be found => here <=


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
Was this reply helpful? Yes No

‎05-01-2012 02:36 AM

HP Recommended

Ok thanks, so can I just confirm then, according to that document if there is no certificate on there already, it is impossible for me to put a new one?

 

Can you tell me the reason why there wouldn't be a certicate on there in the first place?  Is it possible to accidentally remove/delete them?

Was this reply helpful? Yes No

‎05-01-2012 03:10 AM

HP Recommended

Hello rsfrontier,

 

I would advise you to study the document in the link provided and read the Admin Guide matching your Software Version.

 

For example the UCS 4.0.1. Admin Guide mentions:

 

Trusted Certificate Authority List


The phone trusts the following certificate authorities by default:


• AAA Certificate Services by COMODO
• ABAecom (sub., Am. Bankers Assn.) Root CA
• Add Trust Class1 CA Root by COMODO
• Add Trust External CA Root by COMODO
• Add Trust Public CA Root by COMODO
• Add Trust Qualified CA Root by COMODO
• ANX Network CA by DST
• American Express CA
• American Express Global CA
• BelSign Object Publishing CA
• BelSign Secure Server CA
• COMODO CA Limited
• COMODO Certificate Authority
• Deutsche Telekom AG Root CA
• Digital Signature Trust Co. Global CA 1
• Digital Signature Trust Co. Global CA 2
• Digital Signature Trust Co. Global CA 3
• Digital Signature Trust Co. Global CA 4
• Entrust Worldwide by DST
• Entrust.net Premium 2048 Secure Server CA
• Entrust.net Secure Personal CA
• Entrust.net Secure Server CA
• Equifax Premium CA
• Equifax Secure CA
• Equifax Secure eBusiness CA 1
• Equifax Secure eBusiness CA 2
• Equifax Secure Global eBusiness CA 1
• GeoTrust Primary Certification Authority
• GeoTrust Global CA
• GeoTrust Global CA 2
• GeoTrust Universal CA
• GeoTrust Universal CA 2
• GTE CyberTrust Global Root
• GTE CyberTrust Japan Root CA
• GTE CyberTrust Japan Secure Server CA
• GTE CyberTrust Root 2
• GTE CyberTrust Root 3
• GTE CyberTrust Root 4
• GTE CyberTrust Root 5
• GTE CyberTrust Root CA
• GlobalSign Partners CA
• GlobalSign Primary Class 1 CA
• GlobalSign Primary Class 2 CA
• GlobalSign Primary Class 3 CA
• GlobalSign Root CA
• National Retail Federation by DST
• Secure Certificate Services by COMODO
• TC TrustCenter, Germany, Class 1 CA
• TC TrustCenter, Germany, Class 2 CA
• TC TrustCenter, Germany, Class 3 CA
• TC TrustCenter, Germany, Class 4 CA
• Thawte Personal Basic CA
• Thawte Personal Freemail CA
• Thawte Personal Premium CA
• Thawte Premium Server CA
• Thawte Server CA
• Thawte Universal CA Root
• Trusted Certificate Services by COMODO
• UTN-DATA Corp SGC by COMODO
• UTN-USER First-Client Authentication and Email by COMODO
• UTN-USER First-Hardware by COMODO
• UTN-USER First-Object by COMODO
• UPS Document Exchange by DST
• ValiCert Class 1 VA
• ValiCert Class 2 VA
• ValiCert Class 3 VA
• VeriSign Class 4 Primary CA
• Verisign Class 1 Public Primary Certification Authority
• Verisign Class 1 Public Primary Certification Authority - G2
• Verisign Class 1 Public Primary Certification Authority - G3
• Verisign Class 2 Public Primary Certification Authority
• Verisign Class 2 Public Primary Certification Authority - G2
• Verisign Class 2 Public Primary Certification Authority - G3
• Verisign Class 3 Public Primary Certification Authority
• Verisign Class 3 Public Primary Certification Authority - G2
• Verisign Class 3 Public Primary Certification Authority - G3
• Versign Class 3 Public Primary Certification Authority – G5
• Verisign Class 4 Public Primary Certification Authority - G2
• Verisign Class 4 Public Primary Certification Authority - G3
• Verisign/RSA Commercial CA
• Verisign/RSA Secure Server CA
• Windows Root Update by COMODO

 

Quote:

 

Downloading Certificates to a Polycom Phone
You can download certificates to a Polycom phone by specifying a URL where the certificate is currently stored. You can install up to eight CA certificates and eight device certificates on the phone. You can refresh certificates when they expire or are revoked. You can delete any CA certificate or device certificate that you install

 

There are plenty of post dealing with certificates already in this community.

 

Please work with your resller and/or Polycom Support (PPI may occur)

 

Best Regards

 

Steffen Baier

 

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
Was this reply helpful? Yes No
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.

Didn't find what you were looking for? Ask the community

† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.