I have got probably rather silly question here.
We have a new installation of CUCM 6.1(3) with Extension Mobility configured. For security reasons the customer wants to enforce end-users to change their PINs after the first login. So in the End-User PIN Credential Policy we are specifying "User Must Change at the Next Login".
As the result we have the following. The user is trying to log into his IP Phone with his default PIN (which is definitely valid) and gets the prompt (on the phone screen) to change the PIN. He keys in a new PIN but it is not accepted and he gets the "Authentication Error" message instead. As the result he can not login.
We have tried different setting on the Credential Policy but nothing helped - the system simply does not accept PIN changes from an IP Phone. I have searched the web but could not find any trace of the same issue.
Has anybody seen this before? Is there some additional settings to enable changing PINs from IP Phones? Is it actually possible in CUCM 6.1(3)?
Thanks a lot for any help!