Hello community,
I need some advice to resolve an issue involving Corporate Directory on CUCM.
Topology is CUCM cluster has 2 servers,MCS 7825I5.
The problem is that no one can access Corporate Directory from their phones but I made a test connecting an IP Communicator from my desktop registering at their CUCM and for me it worked flawless.
I asked them to do the same test with IP Communicator and it have worked too.
Voice VLAN are 10.20.x.x
Data VLAN are 10.10.x.x
Phones can't access corporate directory but IPCs can. Why?
Servers are configured with hostname at System -> Server
Enterprise Parameters has Secured URLs using IP Address.
I have tried to erase ITL file from one phone just for a test purpose but nothing changes, the issue remains.
In another thread with similar problems, an user said that:
"
Since your phones already have ITL file downloaded. These ITL files were signed by the old TVS certs before you regenerated them. Now the phone tries to verify the signature of the ITL files, but it cant because none of your TVS servers have the old signature. Hence you are locked out and your only solution will be to delete the ITL files.
NB: your phones may still register at this point but certain things will be broken. One of which is your directory services. This requires https connection and hence the phone needs to validate the cert been exchanged and since there is no TVS trust store available to do this, this connection fails. There are other features that could also be affected"
This is a real possibility?
The TVS certificate is now expired:
Validity From: Fri May 25 12:15:48 BRT 2012
To: Wed May 24 12:15:47 BRT 2017
callmanager.pem certificate is also expired:
Validity From: Fri May 25 12:14:44 BRT 2012
To: Wed May 24 12:14:43 BRT 2017
What I have to do?
