Cisco IP Phone 8941 - trust list updated fail

[subash cobi]

Hi,

I'm tried to register a 8941 phone to CUCM version 7.1(5).

Have already uploaded the firmware and device enabler, as following:

cmterm-894x-sccp.9-2-3-5.cop

cmterm-894x-qed.9-2-2-0.cop

cmterm-894x-sip.9-2-3-5.cop

And did a cluster reboot after that.

Now i'm noticing, on the status meesage of the phone:

"trust list updating fail" follow by "trust list updated fail"

This is not a new phone and was previously used on a different CUCM.

I can't perform a factory reset on the phone, cause the network the phone is no right now does not have the option 150 on.

I did reset the security setting and also all the setting but it is still the same.

Any idea why the phone is showing "trust list updated fail".

[Gajanan Pande]

Subash,

You will need to delete the CTL file stored in phone flash. Is the setting button disabled which is stopping you from doing factory reset ? Sorry couldnt understand your explaination about inability to do that.

GP.

Pls rate helpful posts by clicking on stars below the post !!

[subash cobi]

Hi Gajanan,

The setting button is not disable, i can select to reset the security setting and also reset all setting. But after perform these reset there are no difference. I still get this error "trust list updated fail".

The reason why i can't do a factory reset is, currently the network the phone is connected to doesn't have the option 150 which point to CUCM TFTP ip address on its DHCP pool. Hence i can't do a factory reset cause a factory reset would require option 150 on the dhcp pool. Without this the phone wouldn't be able to get the firmware after the factory reset.

Correct me if i'm wrong.

[etamminga]

Go into the trust list security setting on the phone, unlock it (**#) and delete it.

Sent from Cisco Technical Support iPad App

[subash cobi]

Hi etamminga,

I tried that already. But it still remains the same.

After erase and reboot, on the status message it still shows "trust list updated fail" and the phone is still unregistered.

[Joseph Martini · Accepted solution]

Since you're on 7.1.5 there are no ITLs on your call manager so you can ignore that message.  The firmware version on your phone being 9.x will try and download an ITL file just as older firmware versions will always look for a CTL whether you are using it or not.  If the phone does not find a CTL or ITL it will carry on and request it's configuration file. 

I see that you mentioned that the phone was previously on another CUCM, which means it could have downloaded a CTL or ITL file but you've already gone through the steps to delete it so if you go into your security configuration settings you should see not installed under the CTL and ITL sections.

A few questions, how many CUCM nodes are in the cluster?  Was the QED file installed on all nodes (it needs to be)? 

[subash cobi]

Hi Joe,

You were absolutely right.. Apparently after checking it seems that we forgot to upload the firmware to the CUCM

subscriber. And the phone was righting to register to the subscriber. Hence it could not.

Also notice after the phone succesfully register to the CUCM, the message "trust list updated fail" still appear in the phone status. So i assume meesage only applying if your CUCM is using trust list security.

Thanks man.

[Joseph Martini]

You're welcome.  The trust list update failed message only applies if you're using security correct.  It's built in to CUCM 8.x or you could have run the CTL client on earlier versions to enable security.  If you're not using either you don't have to worry about that message, it can be ignored.