• ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
The HP Community is where owners of HP products, like you, volunteer to help each other find solutions.
HP Recommended

Hi,

 

I've sucessfully provisioned some Polycom phones securely using HTTPS and a self signing CA uploaded on the phone. As this would require an extra step (unsecure) to upload stuff on the phone (and not suitable for mass deployments) I'd be interested in what certificates does a phone accept by default. (I mean what CAs are uploaded by default on a phone.) Also it would be interesting to find out if the phones require some particular trust level.

 

Do all phone models accept the same certificates?

 

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions
HP Recommended

Hello ciuc,

 

as I am unaware of the phones used in the question below and the current Software Version I quote from the UCS 4.1.0 Admin Guide page 353:

 

Trusted Certificate Authority List

 

• AAA Certificate Services by COMODO
• ABAecom (sub., Am. Bankers Assn.) Root CA
• Add Trust Class1 CA Root by COMODO
• Add Trust External CA Root by COMODO
• Add Trust Public CA Root by COMODO
• Add Trust Qualified CA Root by COMODO
• ANX Network CA by DST
• American Express CA
• American Express Global CA
• BelSign Object Publishing CA
• BelSign Secure Server CA

• COMODO CA Limited
• COMODO Certificate Authority
• Deutsche Telekom AG Root CA
• Digital Signature Trust Co. Global CA 1
• Digital Signature Trust Co. Global CA 2
• Digital Signature Trust Co. Global CA 3
• Digital Signature Trust Co. Global CA 4
• Entrust Worldwide by DST
• Entrust.net Premium 2048 Secure Server CA
• Entrust.net Secure Personal CA
• Entrust.net Secure Server CA
• Equifax Premium CA
• Equifax Secure CA
• Equifax Secure eBusiness CA 1
• Equifax Secure eBusiness CA 2
• Equifax Secure Global eBusiness CA 1
• GeoTrust Primary Certification Authority
• GeoTrust Global CA
• GeoTrust Global CA 2
• GeoTrust Universal CA
• GeoTrust Universal CA 2
• GTE CyberTrust Global Root
• GTE CyberTrust Japan Root CA
• GTE CyberTrust Japan Secure Server CA
• GTE CyberTrust Root 2
• GTE CyberTrust Root 3
• GTE CyberTrust Root 4
• GTE CyberTrust Root 5
• GTE CyberTrust Root CA
• GlobalSign Partners CA
• GlobalSign Primary Class 1 CA
• GlobalSign Primary Class 2 CA
• GlobalSign Primary Class 3 CA

• GlobalSign Root CA
• Go Daddy Class 2 Certification Authority Root Certificate
• Go Daddy Class 2 Certification Authority Root Certificate – G2
• National Retail Federation by DST
• RSA 2048 v3 Root CA
• Secure Certificate Services by COMODO
• TC TrustCenter, Germany, Class 1 CA
• TC TrustCenter, Germany, Class 2 CA
• TC TrustCenter, Germany, Class 3 CA
• TC TrustCenter, Germany, Class 4 CA
• Thawte Personal Basic CA
• Thawte Personal Freemail CA
• Thawte Personal Premium CA
• Thawte Premium Server CA
• Thawte Server CA
• Thawte Universal CA Root
• Trusted Certificate Services by COMODO
• UTN-DATA Corp SGC by COMODO
• UTN-USER First-Client Authentication and Email by COMODO
• UTN-USER First-Hardware by COMODO
• UTN-USER First-Object by COMODO
• UPS Document Exchange by DST
• ValiCert Class 1 VA
• ValiCert Class 2 VA
• ValiCert Class 3 VA
• Verisign 2048 Root CA
• VeriSign Class 4 Primary CA
• Verisign Class 1 Public Primary Certification Authority
• Verisign Class 1 Public Primary Certification Authority - G2
• Verisign Class 1 Public Primary Certification Authority - G3
• Verisign Class 2 Public Primary Certification Authority
• Verisign Class 2 Public Primary Certification Authority - G2
• Verisign Class 2 Public Primary Certification Authority - G3

 

If you require more Information please follow up via the Admin Guide and other available technical documentation and/or raise a Support ticket via your Polycom reseller.

 

Best Regards

 

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

View solution in original post

4 REPLIES 4
HP Recommended

Hello ciuc,

 

as I am unaware of the phones used in the question below and the current Software Version I quote from the UCS 4.1.0 Admin Guide page 353:

 

Trusted Certificate Authority List

 

• AAA Certificate Services by COMODO
• ABAecom (sub., Am. Bankers Assn.) Root CA
• Add Trust Class1 CA Root by COMODO
• Add Trust External CA Root by COMODO
• Add Trust Public CA Root by COMODO
• Add Trust Qualified CA Root by COMODO
• ANX Network CA by DST
• American Express CA
• American Express Global CA
• BelSign Object Publishing CA
• BelSign Secure Server CA

• COMODO CA Limited
• COMODO Certificate Authority
• Deutsche Telekom AG Root CA
• Digital Signature Trust Co. Global CA 1
• Digital Signature Trust Co. Global CA 2
• Digital Signature Trust Co. Global CA 3
• Digital Signature Trust Co. Global CA 4
• Entrust Worldwide by DST
• Entrust.net Premium 2048 Secure Server CA
• Entrust.net Secure Personal CA
• Entrust.net Secure Server CA
• Equifax Premium CA
• Equifax Secure CA
• Equifax Secure eBusiness CA 1
• Equifax Secure eBusiness CA 2
• Equifax Secure Global eBusiness CA 1
• GeoTrust Primary Certification Authority
• GeoTrust Global CA
• GeoTrust Global CA 2
• GeoTrust Universal CA
• GeoTrust Universal CA 2
• GTE CyberTrust Global Root
• GTE CyberTrust Japan Root CA
• GTE CyberTrust Japan Secure Server CA
• GTE CyberTrust Root 2
• GTE CyberTrust Root 3
• GTE CyberTrust Root 4
• GTE CyberTrust Root 5
• GTE CyberTrust Root CA
• GlobalSign Partners CA
• GlobalSign Primary Class 1 CA
• GlobalSign Primary Class 2 CA
• GlobalSign Primary Class 3 CA

• GlobalSign Root CA
• Go Daddy Class 2 Certification Authority Root Certificate
• Go Daddy Class 2 Certification Authority Root Certificate – G2
• National Retail Federation by DST
• RSA 2048 v3 Root CA
• Secure Certificate Services by COMODO
• TC TrustCenter, Germany, Class 1 CA
• TC TrustCenter, Germany, Class 2 CA
• TC TrustCenter, Germany, Class 3 CA
• TC TrustCenter, Germany, Class 4 CA
• Thawte Personal Basic CA
• Thawte Personal Freemail CA
• Thawte Personal Premium CA
• Thawte Premium Server CA
• Thawte Server CA
• Thawte Universal CA Root
• Trusted Certificate Services by COMODO
• UTN-DATA Corp SGC by COMODO
• UTN-USER First-Client Authentication and Email by COMODO
• UTN-USER First-Hardware by COMODO
• UTN-USER First-Object by COMODO
• UPS Document Exchange by DST
• ValiCert Class 1 VA
• ValiCert Class 2 VA
• ValiCert Class 3 VA
• Verisign 2048 Root CA
• VeriSign Class 4 Primary CA
• Verisign Class 1 Public Primary Certification Authority
• Verisign Class 1 Public Primary Certification Authority - G2
• Verisign Class 1 Public Primary Certification Authority - G3
• Verisign Class 2 Public Primary Certification Authority
• Verisign Class 2 Public Primary Certification Authority - G2
• Verisign Class 2 Public Primary Certification Authority - G3

 

If you require more Information please follow up via the Admin Guide and other available technical documentation and/or raise a Support ticket via your Polycom reseller.

 

Best Regards

 

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
HP Recommended

Argh,  I surely missed that info in the UCS admin guide, thanks for pointing it out to me. Cheers!

HP Recommended

Hi there,

I am not finding any documentation on using FTPS provisioning, except some old engineer advisory doc that only applies to provisioning with MTLS and Microsoft IIS6.0.

Can you advise?

HP Recommended

Hello Doke,

welcome to the Polycom Community.

Please check the community's VoIP FAQ post => here <=

It explains HTTPS but FTPS is just the same.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.