Plantronics + Polycom. Now together as Poly Logo

VVX 410 and ssl certificates

SOLVED
Highlighted
Occasional Advisor

VVX 410 and ssl certificates

Hello all,

I have been testing the Polycom VVX line in my lab (310, 410, 500) and I am noticing these phones don't seem to like the ssl certificate I am using from Comodo (2048 Root cert). I am testing the 410 at the moment and it will not pull down its config from our provisioning server (Metaswitch) when tftp option 66 directs it to an HTTPS server. However it will download the config if I simply use HTTP. I turned syslog on and the phone shows the following:

 

0731222618|cfg  |4|00|Prov|Download of master configuration file failed

 

I can see the TLS messges getting passed back and forth between my phone and the provisioning server indicating the handshake is taking place. The phone is currently using the following:  5.1.4.0844 - updater; 4.1.4.7430 version. My  provisioning server will be setting the firmware version to 4.1.6_revH. Any suggestions? Am I able to get more specific details using syslog in order to narrow down the problem?

Message 1 of 2
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Polycom Employee & Community Manager

Re: VVX 410 and ssl certificates

Hello calebg,

welcome to the Polycom Community.

 

How are you adding the certificate to the phone as it will not be able to communicate via HTTPS if it does not already have your certificate downloaded.

The community's VoIP FAQ contains these post's here:

 

Jun 25, 2012 Question: How can I add a 802.1x EAP-PEAPv0/MSCHAPv2 Certificate?

Resolution: Please check => here <=

 

Apr 17, 2013 QuestionHow can I setup a TLS connection for SIP signaling and / or troubleshoot this?

Resolution: Please check => here <=

 

Apr 23, 2013 Question: How can I setup SRTP / Secure RTP?

Resolution: Please check => here <=

 

All of the above are dealing with some sort of security and explain how to troubleshoot this.

 

I suggest to set your CURL and COPY to debug level and then check syslog again.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

View solution in original post

Message 2 of 2
1 REPLY 1
Highlighted
Polycom Employee & Community Manager

Re: VVX 410 and ssl certificates

Hello calebg,

welcome to the Polycom Community.

 

How are you adding the certificate to the phone as it will not be able to communicate via HTTPS if it does not already have your certificate downloaded.

The community's VoIP FAQ contains these post's here:

 

Jun 25, 2012 Question: How can I add a 802.1x EAP-PEAPv0/MSCHAPv2 Certificate?

Resolution: Please check => here <=

 

Apr 17, 2013 QuestionHow can I setup a TLS connection for SIP signaling and / or troubleshoot this?

Resolution: Please check => here <=

 

Apr 23, 2013 Question: How can I setup SRTP / Secure RTP?

Resolution: Please check => here <=

 

All of the above are dealing with some sort of security and explain how to troubleshoot this.

 

I suggest to set your CURL and COPY to debug level and then check syslog again.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

View solution in original post

Message 2 of 2