Both the identity and CA cert should be in the Phone-VPN-trust store. Also make sure the VPN Gateway config has the certs associated with it. If the URL contains a hostname, make sure the ip phone has DNS configured so it can resolve the hostname to ip.
In the VPN Profile, is "Enable Auto Network Detect" checked. If so try unchecking that, save, and reset the phone. I've seen issues in the past with the button being grayed out and this procedure seems to do the trick. Everything else in your config looks OK.
If none of this works, browse to the phone's IP using your favorite web browser and look at the Console Logs. It should give us some ideas as to what's going on.
SIP traces provide key information in troubleshooting SIP Trunks, SIP
endpoints and other SIP related issues. Even though these traces are in
clear text, these texts can be gibberish unless you understand fully
what they mean. This document attempts to br...
Please find the attached HTML document, download and open it on your PC.
This provides an easy to use form where you simply answer a few
questions and it will render the proper jabber-config.xml file for you
to copy/paste. There is built in logic to verif...
CUCM Database Replication is an area in which Cisco customers and
partners have asked for more in-depth training in being able to properly
assess a replication problem and potentially resolve an issue without
involving TAC. This document discusses the bas...