I'm in CME 4.2 with 7942, 7911 and 7906 IP Phone and when I put the

ephone xxx

device-security-mode encrypted

command then the IP Phone could not register on the CME

=> Here is the message on the IP Phone " Registration Rejected : Max Phones ...3

and the one on the CME

Feb 15 19:31:09.091 UTC: %IPPHONE-6-REG_ALARM: 24: Name=SEP001EF7C2BC4D Load= SCCP42.8-3-2S Last=Phone-Reg-Rej

Feb 15 19:31:10.087 UTC: %IPPHONE-6-REG_ALARM: 22: Name=SEP001EF7C2BD1E Load= SCCP42.8-3-2S Last=Reset-Reset

when I remove the device-security-mode encrypted, the IP phone register immedialtly but without sRTP ?

any idea

thanks in advance for your help

Olivier

You have to do the steps mentioned in the doc in the other post. It's more then just enter the one command...

Phone Authentication

•Configuring the Cisco IOS Certification Authority (required)

•Authenticating Certificates for Server Functions (required)

•Configuring Telephony-Service Security Parameters (required)

•Configuring the CTL Client (required)

•Configuring the CAPF Server (required)

Media Encryption

•Configuring Secure Calls Between Cisco Unified CMEs Across an H.323 Trunk (required)

•Configuring Cisco Unified CME SRTP Fallback for H.323 Dial Peers (optional)

Good luck,

Martin

Has anyone found the solution for this ? I'm looking at exactly the same error when "device-security-mode encrypted" in CME7.

Regards.