I have some demo gear from Cisco, and am trying to set up our demo environment, prior to ordering our production IPT gear. I've installed CUCM 7.1 as standalone (publisher only) and am able to register some of my demo gear IP phones, but others get this error when trying to register:
Registration rejected : security error
Things I've checked:
I've done some searching on CCO, and am not able to find any good guidance on what I could try next....
Any help would be appreciated.
I was getting the same error.
Resolution for me was to reset to factory default following procedure in this thread, then I noticed it wasn't showing in Call Manager. I did a super copy of a user and then added the mac manually to the system and this registered the phone and corrected the problem.
Thanks for all the great posts,
Glad it helped; please remember to rate useful posts, even if they are old!
I had a similar fault
I tried factory resetting a handset using the '123456789*0#' described above
The phone returned with that error
Registration rejected: Security Error
Went into security settings
went into 5: Trust List
Noticed a ITL File
selected the ITL File
erased the ITL File
The phone rebooted straight away and downloaded the latest firmware.
Thanks for the help - my solution was a combination of a few mentioned above.
If you have auto assign extension enabled when you add a new phone to the system you may also look to see if the directory number range pool is full. From menu Call Routing>Directory Number Then remove numbers as needed.
It could be a CTL or ITL file stored on the phone that is preventing this... I've seen this before when moving phones from secure clusters (CTL file), and when moving phones from my beta 8.0 system (new ITL file, even on non-secure clusters).
Go into settings/security settings, look for CTL, hit **# to unlock the settings, then look for erase.
You may have to select the CTL file, then hit more/erase or something along those lines...
Please rate helpful posts...
That put me on the right track, it has MIC installed under security (not sure if that needs to be deleted) and has CA signed for an SRST router. I tried to erase that. I get the security features unlocked, select the CA signed, and it doesn't give me any additional tabs, so no erase. Then registration tries to kick in again, and bumps me out.
I thought the factory reset would have cleared this?
Here's the process I used to factory reset it:
I've done that on all the phones.
I was having the same error.
CUCM, CAPF and CTL service was running which i turned off. After deleting the Phones when i tried to re-register the phones they started to give me this error. "Registeration Rejected : Security Error" . I also switched the tftp from Publisher to a subscriber server.
Solution : I manually added each phone to the system since they were few phones. You can Use BAT to add the phones if you too many phone having the same problem.
Hope that helps
If any one figure out why it happened please share it here.
Just been battling with exactly this, the error is a bit misleading as the cause was our DN pool of 100 DNs for autoregistration had filled up,
so we deleted the used up DNs and away we went.
I would just add to this thread that in the case where you are doing a new install and are using TAPS, if you exhaust the available pool of DNs this is the error you will get as well.
I just got the same error on a 7945. I have been testing from different sites with the phone for a week by chaning the phone settings and DN. Today I change the phone settings and when the phone resets it comes back with the "Registration Rejected: Security Error" notification. Tried the factory reset and am now getting the target so looks like the phone is a paperweight.
We are using CUCM 7.1(5b) SU2.
Try remove the CTL from the phone (do it from the phone's LCD screen).
Sounds like the phone was registered to some secure cluster before and got the CTL downloaded. When you try to register it to another cluster, you'll get this error because the servers in the new cluster was not on the CTL (trust list).
Neither one of the cluster here have ever used CTL.
However, the phone was connected to another phone and then powered with a brick. I plugged the bad phone directly into the and it booted properly. Plugged it back into the original phone and now it is working like a champ. Had some other phones that had done the same thing as well, but they were plugged into a mini-switch and then powered with a brick. Did the factory reset and had them do the target thing. Plugged those directly into the POE switch and they cam up fine. So it has something to do with the phones ending up on the Data VLAN, but why it would wait a week with 15 - 20 reconfigs and resets of the phone per day and then all of a sudden quit is a mystery.
Anyway, fix for me was to plug the phone directly into the POE switch.