Troubleshooting Cisco Unified IP Phone Security
Procedure
Use the Erase softkey to reset phone settings to their default values. See
Step 1
Unified IP Phone, page 9-13
Modify DHCP and IP settings:
Step 2
a.
b.
c.
On the Cisco Unified Communications Manager server, verify that the local host files have the correct
Step 3
Cisco Unified Communications Manager server name mapped to the correct IP address.
Step 4
From Cisco Unified Communications Manager, choose System > Server and verify that the server is
referred to by its IP address and not by its DNS name.
Step 5
From Cisco Unified Communications Manager, choose Device > Phone > Find and verify that you have
assigned the correct MAC address to this Cisco Unified IP Phone. For information about determining a
MAC address, see
Power cycle the phone.
Step 6
Checking Power Connection
In most cases, a phone will restart if it powers up by using external power but loses that connection and
switches to PoE. Similarly, a phone may restart if it powers up by using PoE and then gets connected to
an external power supply.
Troubleshooting Cisco Unified IP Phone Security
Table 9-1
For information relating to the solutions for any of these issues, and for additional troubleshooting
information about security and encryption, refer to Cisco Unified Communications Manager Security
Guide.
Table 9-1
Cisco Unified IP Phone Security Troubleshooting
Problem
Device authentication error.
Phone cannot authenticate CTL file.
Phone cannot authenticate any of the
configuration files other than the ITL file.
Phone cannot authenticate any of the
configuration files other than the CTL file.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.0 (SCCP and SIP)
9-8
Disable DHCP. See
Network Configuration Menu, page 4-5
Assign static IP values to the phone. See
Use the same default router setting used for other functioning Cisco Unified IP Phones.
Assign a TFTP server. See
TFTP server used for other functioning Cisco Unified IP Phones.
Determining the MAC Address for a Cisco Unified IP Phone, page
provides troubleshooting information for the security features on the Cisco Unified IP Phone.
Possible Cause
CTL file does not have a Cisco Unified Communications Manager certificate or
has an incorrect certificate.
The security token that signed the updated CTL file does not exist in the CTL
file on the phone.
The configuration file may not be signed by the corresponding certificate in the
phone's Trust List.
The configuration file may not be signed by the corresponding certificate in the
phone's Trust List.
for details.
Network Configuration Menu, page 4-5
Network Configuration Menu, page 4-5
Chapter 9
Troubleshooting and Maintenance
Resetting or Restoring the Cisco
for instructions.
for instructions.
for instructions. Use the same
2-13.
OL-21011-01