Issue with 7960/7940 registration with CCM (Error: Registration Rejected)

Unanswered Question
Apr 21st, 2009

Version on CCM is 5.1.2.3122-1

===============================

7960 Phones - Rejistration Rejected

====================================

The problem is related to secured communication between IP Phones and CCM. Basically, when CCM is installed, it installs a Self Signed Certificate and uses this certificate to communicate with phones in a secure way. So, when an IP phone is configured with a pre-configured profile (SCCP profile with security) setting on CCM, a certificate needs to be present on the phone as well. It could be an LSC (Locally Significant Certificate) or MIC (Manufacture Install Certificate). If there is one such certificate on both CCM and Phone, then they both communicate with each other successfully and the phone gets registered with the CCM and thereby operational. On the other hand, if the phone does not already have a certificate in it and we configure a secure phone profile in the CCM, then the registration fails.

Infact, the phones 7940/7960 support only the Manual Key Distribution. So, they receive signed and encrypted files from CCM but ignore the signing information which results in registration errors. Whereas, 7941/7961 support Symmetric Key Encryption with phone public key. These phones support file signing, establish communication with CCM and finally the registration will be successful.

The resolution is to configure a non-secured SCCP phone profile and get the 7960 phone registered with the CCM first. Having done that, troubleshoot LSC or MSC on CAPF following the steps given in Cisco website in the following link.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/5_0_1/secuphne.html

But the steps are quite complex at the above link.

So I thought before spending too much time troubleshooting this problem, if anyone else has seen this problem before and what the fix was?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
Loading.
gogasca Tue, 04/21/2009 - 23:40

hi...

do u have the ctl client?

have u follow the steps in the guide?

without following the steps how u expect to configure it?

Actions

This Discussion