About Jason Burns

Jason Burns · 10-04-2011

PurposePhone Security and CTL OverviewConfiguration1. Obtain USB eTokens2. Activate CTL Provider and CAPF Services3. Download and Install the CTL Client4. Run the CTL Client using eTokens5. Restart Required Servers6. Install LSCs on Phones7. Create a...

Jason Burns · 09-26-2011

PurposeSIP TLS on Inter Cluster Trunk ConfigruationLab Network OverviewDownload CallManager.pem CertificatesUpload CallManager.pem CertificatesCreate SIP Trunk Security ProfilesCreate SIP TrunksCreate Route PatternsTroubleshootingCollect Packet Captu...

Jason Burns · 07-27-2011

PurposeSBD Overview (Why?)TFTP Download AuthenticationTFTP Configuration File EncryptionTrust Verification Service (Remote certificate and signature verification)SBD Detail and Troubleshooting Information (How?)ITL Files and Certificates Present on C...

Jason Burns · 03-24-2011

PurposeBackgroundSymptomsMigration Options PurposeCUCM 8 introduced the new Security By Default feature and the use of ITL (Initial Trust List) files. (More documentation here). With this new feature, care must be taken when moving phones between di...

Jason Burns · 02-24-2011

PurposeConfigurationTroubleshooting PurposeThis document is intended as a supplement to the official configuration guide. The configuration and troubleshooting of JTAPI using SSL will be covered with examples and diagrams. Please reference the follo...

Jason Burns · 09-15-2014

Thanks for the keen observation. You're right that the TVS service does get activated on every installed node. However, this service will only be accessed on the nodes that are in the CUCM CallManager Group of the phone (and in some cases TFTP). The ...

I had this problem and fixed · 06-10-2014

I had this problem and fixed it. We were absolutely positive that the FQDN configuration on the OpenAM server was correct. Certainly verify that first on your server, but it's not the ONLY thing that throws this error.Looking at the OpenAM debug logs...

Jason Burns · 11-12-2013

SBD only provides the three functions mentioned above:Security By Default provides these three functions for supported IP Phones:Default authentication of TFTP downloaded files (configuration, locale, ringlist, etc) using a signing key.Optional encry...

Jason Burns · 10-25-2013

We encountered this same issue with CUCILync redirecting to cucm-uds and then subsequently getting a 404 error message.We resolved the problem by configuring the following setting on OpenAM and then restarting Tomcat on the CUCM servers:J2EE Agent ->...

Jason Burns · 06-24-2013

Carlos,The 7975 and 9971 will work without any problem.The 7940 will need to have the CTL deleted OR you will need to update their CTL file to add in the new address of the TFTP server in the old cluster's CTL file.This is because the older 7940 and ...

Member Since	‎10-29-2006 11:43 AM
Date Last Visited	‎08-28-2017 10:45 PM
Posts	48
Total Helpful Votes Received	606

User Statistics

User Activity

IP Phone Security and CTL (Certificate Trust List)

CUCM SIP Trunk TLS Configuration and Troubleshooting

Communications Manager Security By Default and ITL Operation and Troubleshooting

Migrating IP Phones Between Clusters with CUCM 8 and ITL Files

Configuring and Troubleshooting Secure JTAPI / CTI

Thanks for the keen

I had this problem and fixed

Re: Communications Manager Security By Default and ITL Operation and Troubleshooting

CUCILync SSO scenario

Re: IP Phone Security and CTL (Certificate Trust List)