Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CUCM security Problem

Hi all,

I had a problem while I was changing the background images of the IP phones. I did it many times before, but this time it is a little bit different. I created the List.xml file but the phone is not able to download it, I used sniffer and I found that the phone asking for .xml.sgn rather than .xml

I did not enable any security service in CUCM, I browsed the security settings for one phone and I deleted the settings like MIC, LCS, and Trust List; but no luck.

I have no problem to enable the security settings, if no need to change the configuration that I did. I do not have enough knowledge about CUCM security so I started reading about it, but I found that there is some certificates and Security token and a lot of issues.

Could you please guide me what I should do to allow the creation of xml.sgn file in TFTP server.

Is it a bug in firmware? I am using SCCP42.9-0-3S.

Thanks in advanced.

9 REPLIES

CUCM security Problem

All I can find on your issue is the link below:

http://onlinestudylist.com/archives/ccie_voice/2011-January/071999.html

HTH Regards, Yosh

CUCM security Problem

The TFTP server creates the .sgn version of the file automaticaly. You just have to place the file into the correct directory on your server and restart the TFTP process.

GTG

Please rate all helpful posts.
New Member

CUCM security Problem

Thank you for your help,

+5 for both.

yahsiel:

I don't need to downgrade the firmware.

Gordon:

I know that TFTP server will create the .sgn file automatically, and I am sure I placed the files in the correct directory. but what I need to know, what I should do to make the TFTP server able to create the .sgn files.

shall I enable the service only?

shall I use USB Token?

or what exactly?

I did not configure security parameters for CUCM before and I have to solve this problem ASAP. I tried to read about it but it is not clear to me.

Thanks in advanced

CUCM security Problem

I know that TFTP server will create the .sgn file automatically, and I am sure I placed the files in the correct directory. but what I need to know, what I should do to make the TFTP server able to create the .sgn files.

Just restart the TFTP process.

GTG

Please rate all helpful posts.
New Member

CUCM security Problem

Do you mean to enable the security services first then restart the TFTP service?

As I said before all security services are deactivated

CUCM security Problem

JustForVoice wrote:

Do you mean to enable the security services first then restart the TFTP service?

No. No need to enable anything. Just restart the TFTP service.

GTG

Please rate all helpful posts.
New Member

CUCM security Problem

I restarted the TFTP service many times before. It is not the normal behavior.

then if I did not enable security services CUCM will not generate the .sgn file.

Am I right??

CUCM security Problem

Just out of curiosity did you upload the List.xml file to all your Call Managers and restarted the TFTP service on the Call Managers? I think what Gordon was trying to say was that the Call Manager automatically signs the List.xml file when you restart the TFTP service.

Regards,

Yosh

HTH Regards, Yosh
New Member

CUCM security Problem

Yes, I did.

I uploaded the files for all CUCM servers. and I restarted TFTP services on all CUCM servers.

but CUCM will not generate the .sgn file unless I configured the CUCM to do this. otherwise CUCM will leave it as .xml file.

In my case the phone is trying to find .xml.sgn file rather than .xml only.

861
Views
10
Helpful
9
Replies
CreatePlease login to create content