07-09-2020 10:46 AM
I ran into an issue with CTL and ITL problem once CA-signed certs are updated on CUCM servers.
On the phones, i get the trust list update failed. phones's CTL hash does match with new CTL file but ITL is blank.
Cluster is running on v11.5.1 and cluster is set to true on prepare cluster for rollback.
07-09-2020 11:24 AM - edited 07-09-2020 11:26 AM
What is your question? Your not really asking for anything specific that we can help you with. You list what you have seen and what you have done, but not what you want help with. Would you mind to be a little more specific?
With the rollback option set to true you would get an empty ITL file. That’s expected.
07-09-2020 06:36 PM
Thank you for your response and I know i would get the empty ITL as cluster is set to rollback mode. But I'm not sure why phones are getting that "trust list update failed" error and need some suggestion what can be checked next.
07-09-2020 10:21 PM
Make a test with a setting change for something that would require the phones to get the new configuration for it to show up. Any time I’ve worked on this with TAC they have used enable/disable web service on the phone to check if the phone gets the updated configuration.
First verify on a phone if the web service is either enabled or disabled, then make a change for this and reset the phone. When it comes back online check the same to see if you can or cannot access the web page of the phone. If this change from your initial test the phone have got the new configuration.
My guess is that the error message is cosmetic as the ITL is really empty and the phones are not expecting this.
07-09-2020 10:47 PM
The trust list is empty, hence why the error. I don't see an issue here
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide