What software version is your IP 335 running? UCS 4.0.13 introduced some options allowing you to configure the lowest TLS/SSL version to use for handshake negotiation for various applications (including provisioning).
If you are running UCS 4.0.13 or later you can use the following parameter and value to configure your phone to negotiate a minimum of TLS 1.2 for provisioning:
If you want to configure this parameter via the WebUI (UCS 4.0.13 or later), navigate to Settings > Network > TLS, then expand TLS Applications, then change the TLS/SSL version for Provisioning to TLS 1.2:
Changing minimum TLS version for provisioning.
The full parameter description from the UCS 4.0.13 release notes: Configure the lowest TLS/SSL version to use for handshake negotiation between phone and provisioning. The phone handshake starts with the highest TLS version irrespective of the value you configure.