so in which should i set it if not using security

Hi,

As per the most from j.schulenberg, 'CTL update failed' means the phone could not get the CTL file.

Now, let me ask you this, is you CUCM cluster in secure/mixed mode?

You can verify that by going to Enterprise Paramters page and look for 'Cluster Security Mode' if its anything but 0 than your cluster is in secure(2) or mixed(1) mode.

Now, do you want your cluster to be in secure/mixed mode or not? If not, that you need to change the cluster security mode to unsecure(0) using the CTL client. If you want it to be in secure mode, you need to make sure that the TFTP server that the above mentioned phone connects to is in the list of servers in the CTL client.

Thanks,

if the phone is not updating the trust list then you have to erase it manually beacuse some time even after factory default reset it doesnt work.

Reseting the IP Phone CTL manually#

press settings ==> then **# to unlock the settings => then go to security configuration => Trust list => select the CTL file and press erase

The phone will reset and wait for downloading the new CTl files from the tftp server.

Reference Link #

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7975G_7971g-ge_7970g_7965g_7945g/8_0/english/administration/guide/7970oip.html

Troubleshooting Cisco IP Phone Registration Problems with Cisco CallManager

http://www.cisco.com/en/US/products/hw/phones/ps379/products_tech_note09186a008009485a.shtml