06-06-2016 05:32 AM - edited 03-17-2019 07:08 AM
I'm upgrading my phones (8861s) from a 10.2 firmware to 11.5. Same cluster and TFTP servers. For some reason the upgrade failed until I "Reset Security Settings" which I assume on the 88xx is the way to delete ITL.
I thought that was only required when migrating from different CUCM clusters? Why would I need to do that just for an upgrade?
And next question is, is there any way to prep that in advance or push it out? Rather than visiting every phone.
Thanks!
06-06-2016 05:43 AM
Hi Bill,
You should first make sure that the latest device for your cucm version is applied. It is a mandatory requirement as per the release notes
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cuipph/8800-series/firmware/releasenotes/p881_b_cisco-ip-phone-8800-series.html
Yes, the error does point to some ITL/CTL issue , please check if the issue still persists after confirming the latest device pack is applied on the cucm cluster.
HTH
Manish
06-07-2016 07:58 AM
Thank you all, +5.
Manish -- I installed the firmware using the cop.sgn files on all pub/subs (not individual firmware zip files). Is that what you mean by latest device pack? Or is there sometihng else?
06-07-2016 08:10 AM
Bill, both the Device Packs and FW files are cop.sgn only. Naming convention for DP is something like cmterm-devicepack10.5.2.13049-1.cop.sgn whereas for FW, it is like cmterm-88xx-sip.11-0-1-11.k3.cop.sgn
Link for downloading Device Package is below. Change the CM version as per your requirements. Reboot of all the servers in cluster is mandatory after the installation of Device Package
https://software.cisco.com/download/release.html?mdfid=285963825&softwareid=282074299&release=10.5%282.14068%29&relind=AVAILABLE&rellifecycle=&reltype=latest
Regards
Deepak
06-06-2016 07:15 AM
Your understanding is correct that you need to remove the ITL files in case of moving phones between different CUCM clusters. However, there can be situation wherein certificate information had been changed on the existing cluster causing the private key to get changed and hence the phones are not able to trust the new ITL (usually happens when the certificate regeneration process had not been carried properly). Refer below in order to know the process of doing a bulk removal
http://docwiki.cisco.com/wiki/Endpoints_FAQ#How_can_I_bulk_remove_ITL_.2F_CTL_files_from_phones.3F.3F
Regards
Deepak
03-26-2019 10:22 AM
Is there another link that can be used to get the information for mass ITL file delete and update?
We are having this issue, but the Cisco WIKI site has been decommissioned as of 25 Jan 2019.
06-07-2016 12:37 AM
According to the release notes for the latest (11.5) firmware for the 88xx, this is supposed to be available with the latest firmware & device pack. I've got that all loaded on my system and the options aren't there.
GTG
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide