cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2019
Views
3
Helpful
2
Replies

Issue with 7960/7940 registration with CCM (Error: Registration Rejected)

astanislaus
Level 2
Level 2

Version on CCM is 5.1.2.3122-1

===============================

7960 Phones - Rejistration Rejected

====================================

The problem is related to secured communication between IP Phones and CCM. Basically, when CCM is installed, it installs a Self Signed Certificate and uses this certificate to communicate with phones in a secure way. So, when an IP phone is configured with a pre-configured profile (SCCP profile with security) setting on CCM, a certificate needs to be present on the phone as well. It could be an LSC (Locally Significant Certificate) or MIC (Manufacture Install Certificate). If there is one such certificate on both CCM and Phone, then they both communicate with each other successfully and the phone gets registered with the CCM and thereby operational. On the other hand, if the phone does not already have a certificate in it and we configure a secure phone profile in the CCM, then the registration fails.

Infact, the phones 7940/7960 support only the Manual Key Distribution. So, they receive signed and encrypted files from CCM but ignore the signing information which results in registration errors. Whereas, 7941/7961 support Symmetric Key Encryption with phone public key. These phones support file signing, establish communication with CCM and finally the registration will be successful.

The resolution is to configure a non-secured SCCP phone profile and get the 7960 phone registered with the CCM first. Having done that, troubleshoot LSC or MSC on CAPF following the steps given in Cisco website in the following link.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/5_0_1/secuphne.html

But the steps are quite complex at the above link.

So I thought before spending too much time troubleshooting this problem, if anyone else has seen this problem before and what the fix was?

2 Replies 2

gogasca
Level 10
Level 10

hi...

do u have the ctl client?

have u follow the steps in the guide?

without following the steps how u expect to configure it?

Hello,

I am new to Secure IP telephony.

Still trying to read and understand the information at the link:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/5_0_1/secuphne.html

Any additioanl help - most welcome.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: