Troubleshooting Cisco Unified IP Phone Security
Modify DHCP and IP settings:
Step 2
a.
b.
c.
Step 3
On the Cisco Unified Communications Manager server, verify that the local host files have the correct
Cisco Unified Communications Manager server name mapped to the correct IP address.
Step 4
From Cisco Unified Communications Manager, choose System > Server and verify that the server is
referred to by its IP address and not by its DNS name.
From Cisco Unified Communications Manager, choose Device > Phone > Find and verify that you have
Step 5
assigned the correct MAC address to this Cisco Unified IP Phone. For information about determining a
MAC address, see the
page
Power cycle the phone.
Step 6
Checking Power Connection
In most cases, a phone will restart if it powers up by using external power but loses that connection and
switches to PoE. Similarly, a phone may restart if it powers up by using PoE and then gets connected to
an external power supply.
Troubleshooting Cisco Unified IP Phone Security
Table 9-1
For information relating to the solutions for any of these issues, and for additional troubleshooting
information about security and encryption, refer to Cisco Unified Communications Manager Security
Guide.
Table 9-1
Cisco Unified IP Phone Security Troubleshooting
Problem
Device authentication error.
Phone cannot authenticate CTL file.
Phone cannot authenticate any of the
configuration files other than the CTL file.
Phone reports TFTP authorization failure.
Phone does not register with Cisco Unified
Communications Manager.
Cisco Unified IP Phone 7962G and 7942G Administration Guide for Cisco Unified Communications Manager 7.0
9-8
Disable DHCP. See the
"Network Configuration Menu" section on page 4-5
Assign static IP values to the phone. See the
instructions. Use the same default router setting used for other functioning Cisco Unified IP Phones.
Assign a TFTP server. See the
Use the same TFTP server used for other functioning Cisco Unified IP Phones.
"Determining the MAC Address for a Cisco Unified IP Phone" section on
2-13.
provides troubleshooting information for the security features on the Cisco Unified IP Phone.
Possible Cause
CTL file does not have a Cisco Unified Communications Manager certificate or
has an incorrect certificate.
The security token that signed the updated CTL file does not exist in the CTL
file on the phone.
Bad TFTP record.
•
The TFTP address for the phone does not exist in the CTL file.
•
If you created a new CTL file with a new TFTP record, the existing CTL
file on the phone may not contain a record for the new TFTP server.
The CTL file does not contain the correct information for the Cisco
Unified Communications Manager server.
"Network Configuration Menu" section on page 4-5
"Network Configuration Menu" section on page 4-5
Chapter 9
Troubleshooting and Maintenance
for instructions.
for instructions.
for
OL-15483-01