Signed ITL File 9971 Phone

[Juan Gerardo Hernandez]

Hello everyone!

If a 9971 phone that I bought in ebay, arrives with a signed ITL file, could you please let me to understand why it is impossible to recover it?

Assuming I cannot enter to the administration settings inside the Phone.

I want it to register with CUCM or CME.

I can recall Mark Snow from INE, he told a method to proceed for a password-recovery of an 9971 IP Phone "If it does not have signed ITL" (Or signed image, I cannot remember) he told "if it has that, good luck, keep guessing the password"

I don't understand why/

[Wilson Samuel]

The default password should be Cisco (case sensitive) or CISCO (case sensitive).

HTH

[Adarsh Chauhan]

Hi Juan,

if the phone has arrived with an ITL file then may be it was configured before.

The ITL file would have signatures and the phone would accept configuration only from sources 

that has the corresponding public keys.

I would suggest that you factory reset the phone in order to use it in your environment.

Please rate and mark correct if helpful

Regards,

Adarsh Chauhan

[Juan Gerardo Hernandez]

Hi Ardash,

What happen if the Administrator Settings ask me for a username and password that are difficult to guess? The phone is be still recovered?

[Adarsh Chauhan · Accepted solution]

Hi Juan,

When you factory reset a phone, all the settings/password are erased and the phone comes up

with blank configuration.

It would not ask you for any kind of password.

Please rate and mark correct if helpful

Regards,

Adarsh Chauhan

[Juan Gerardo Hernandez]

Yes actually it was helpful, so I will assume the factory reset will erase everything no if the Config File is encrypted or not. All the docs I have read state that 9971s where just normal phones with ITL files and Admin passwords.

Now what I want is to test this...
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/11_5_1/secugd/CUCM_BK_SEE2CFE1_00_cucm-security-guide-1151/CUCM_BK_SEE2CFE1_00_cucm-security-guide-1151_chapter_01011.pdf

and try then, the factory reset.

If you have done that before (specifically), or do you know someone, could you please tell?

Thank you.

Juan.