Expressway MRA - IP Phone failing authentication after password change

[sean Riley]

Scenario: User has an MRA IP phone at home logged into Expressway.  They come into the office and change their password.  Shortly after I start getting RTMT alerts for authentication failures for the user with the Expressway-C IP address as the log in from address.  They keep coming every 10 minutes or so until the user is able to put in the new password on the ip phone.

I do not remember this happening when we first deployed expressway in the middle of 2018.  I remember the phone would try to login with the cached (old password) and fail, but would not keep trying.  However, we have upgraded the expressways since as well as a firmware update on the ip phones.

Any way to keep the ip phone from retrying after failed attempts?

Expressway v. 8.11.2

CUCM 10.5(2) SU3a

IP Phones are 7821 with firmware load sip78xx.12-5-1-16

[Shalid Kurunnan Chalil]

Hi Sean,

Did you manage to look into the User Credentials Persistent for Expressway Sign at the device level ? disable this and try.

If it Enabled, the endpoint will cache the end user credentials (encrypted on the device) and the user will not be prompted to authenticate again.

Regards,
Shalid
Please remember to rate useful posts, by clicking on the stars below.

[sean Riley]

Thanks for your suggestion.  However, I would prefer to keep the credential setting the way it is so users do not need to enter their password each time the phone powers on.  Entering a password into the phone is cumbersome and caching the credentials makes this less of a burden. 

What I would like to see is the phone bump out to the authentication screen after a failed attempt and not try to authenticate again until the user manually attempts a login, hopefully after the user updates the password.  I could have sworn it worked this way in the past.