Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Issue with 7960/7940 registration with CCM (Error: Registration Rejected)

Version on CCM is 5.1.2.3122-1

===============================

7960 Phones - Rejistration Rejected

====================================

The problem is related to secured communication between IP Phones and CCM. Basically, when CCM is installed, it installs a Self Signed Certificate and uses this certificate to communicate with phones in a secure way. So, when an IP phone is configured with a pre-configured profile (SCCP profile with security) setting on CCM, a certificate needs to be present on the phone as well. It could be an LSC (Locally Significant Certificate) or MIC (Manufacture Install Certificate). If there is one such certificate on both CCM and Phone, then they both communicate with each other successfully and the phone gets registered with the CCM and thereby operational. On the other hand, if the phone does not already have a certificate in it and we configure a secure phone profile in the CCM, then the registration fails.

Infact, the phones 7940/7960 support only the Manual Key Distribution. So, they receive signed and encrypted files from CCM but ignore the signing information which results in registration errors. Whereas, 7941/7961 support Symmetric Key Encryption with phone public key. These phones support file signing, establish communication with CCM and finally the registration will be successful.

The resolution is to configure a non-secured SCCP phone profile and get the 7960 phone registered with the CCM first. Having done that, troubleshoot LSC or MSC on CAPF following the steps given in Cisco website in the following link.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/5_0_1/secuphne.html

But the steps are quite complex at the above link.

So I thought before spending too much time troubleshooting this problem, if anyone else has seen this problem before and what the fix was?

2 REPLIES
Green

Re: Issue with 7960/7940 registration with CCM (Error: Registrat

hi...

do u have the ctl client?

have u follow the steps in the guide?

without following the steps how u expect to configure it?

New Member

Re: Issue with 7960/7940 registration with CCM (Error: Registrat

Hello,

I am new to Secure IP telephony.

Still trying to read and understand the information at the link:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/5_0_1/secuphne.html

Any additioanl help - most welcome.

1561
Views
3
Helpful
2
Replies