Trying to register my phone to a CUCM 5.x server. It was used on CUCM 4.x. When I changed the TFTP address and click save, it says " tftp not in ctl" and can not save the change. Does anybody know this?
It appears that you enabled Security on your CUCM Cluster? Were you running CAPF on version 4.x prior to the upgrade?
If you performed certificate operations before the upgrade to Cisco Unified CallManager 5.1 and CAPF ran on a subscriber server, you must copy the CAPF data to the 4.0 publisher database server before you upgrade the cluster to Cisco Unified CallManager 5.1.
Cisco advise a caution that the CAPF data on the Cisco Unified CallManager 4.0 subscriber server does not migrate to the Cisco Unified CallManager 5.1 database, and a loss of data occurs if you do not copy the data to the 5.1 database. If a loss of data occurs, the locally significant certificates that you issued with CAPF utility 1.0(1) remain in the phones, but CAPF 5.1 must reissue the certificates, which are no longer valid.
The CTL or Certificate Trust List (CTL) will exist on the IP Phone, and consequently if you change the TFTP address, this will undoubtedly not match the address in the certificate.
How is the phone configured within CCM, is the phone configured for non-secure profile? is their a CAPF operation pending? Removing the certificate maybe your only option.
Please review the following document regarding CUCM 5.1 Security for further information on this subject:-
Incidentally, it just occured to me that if this is a different cluster and you have simply taken the IP Phone from one cluster that was using CAPF to another that does not, then it is possible to erase the CTL certificate from the Phone.
On the 7940/7960 unlock the phone and go into the security settings and erase the CTL.
You have reached the Cisco Logistics Support Center.. To Check Status of
your RMA, visit Product Returns & Replacements (RMA). Need help? Contact
us by Phone or Email. North Americas Phone: 1800 553 2447 Option 4
Email: firstname.lastname@example.org Europe Phone: +3...
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...