Extension Mobility CUCM 8.5 error 208

[blocksupport]

We have CUCM 8.6.1 upgraded from 8.5.1 (single Server)

Extension Mobility Service has been setup to the letter but when the Service key is pressed on a phone we get 'Login is unavailable (208)

here is the the Extension Mobility debug.

2011-08-15 19:32:04,351 INFO [http-8080-9         ] EMServiceCommunicator     - Posting to EM Query Service:https://localhost:8443/emservice/EMServiceServlet

2011-08-15 19:32:04,352 DEBUG [http-8080-9         ] EMServiceCommunicator     - postMsg: EMService URL is :

https://localhost:8443/emservice/EMServiceServlet

2011-08-15 19:32:04,355 ERROR [http-8080-9         ] EMX509TrustManager       - checkServerTrusted: BSCUCM001.blocksolutions.local Certificate not found in the keystore : the certificate chain is not trusted, Could not validate path.

2011-08-15 19:32:04,356 INFO [http-8080-9         ] EMUtil                   - sendNodeNotTrustedAlarm:Alarm NodeNotTrusted sent successfully

2011-08-15 19:32:04,357 DEBUG [http-8080-9         ] EMServiceCommunicator     - postMsgToQueryService: URL has some problems, trying alternate URLs

2011-08-15 19:32:04,357 INFO [http-8080-9         ] EMServiceCommunicator     - Trying alternate URL for ->https://localhost:8443/emservice/EMServiceServlet

2011-08-15 19:32:04,357 INFO [http-8080-9         ] EMData                   - Retrieving active service URLs...

2011-08-15 19:32:04,357 INFO [http-8080-9         ] EMData                   - Node localhost Activated: true

2011-08-15 19:32:04,357 INFO [http-8080-9        ] EMData                   - Node BSCUCM001 Activated: null

2011-08-15 19:32:04,358 INFO [http-8080-9         ] EMData                   - Node BSCUCM001 is the local node ... so skipping

2011-08-15 19:32:04,358 INFO [http-8080-9         ] EMServiceCommunicator     - Alternate URL not found

2011-08-15 19:32:04,360 INFO [http-8080-9         ] CMDatabase               - CMDatabase:getDeviceLoginStatus: SELECT logintime, fkenduser, fkdevice_currentloginprofile from extensionmobilitydynamic where fkdevice in (select pkid from device where my_lower(name) = my_lower('SEP503DE57D9B32'))

2011-08-15 19:32:04,362 INFO [http-8080-9         ] CMDatabase               - getDeviceInfo:DeviceLoginStatus query executed

2011-08-15 19:32:04,362 INFO [http-8080-9        ] CMDatabase               - getDeviceInfo:Result of the query: {logintime=, fkdevice_currentloginprofile=, fkenduser=}

2011-08-15 19:32:04,362 DEBUG [http-8080-9         ] CMDatabase               - returning device login status:false

2011-08-15 19:32:04,363 DEBUG [http-8080-9         ] EMUtil                   - returning LoginStatus in EMUtil:false

2011-08-15 19:32:04,363 ERROR [http-8080-9         ] EMAppServlet             - Error: Unable to establish connection with EM Service during initial request 208

2011-08-15 19:32:04,363 INFO [http-8080-9         ] EMUtil                   - Alarm EMServiceConnectionError sent successfully

2011-08-15 19:32:04,363 ERROR [http-8080-9         ] EMAppServlet             - javax.net.ssl.SSLException: Certificate not verified.

2011-08-15 19:32:04,363 INFO [http-8080-9         ] EMAppServlet             - findPreferredCharSet on utf-8,iso-8859-1;q=0.8

2011-08-15 19:32:04,364 INFO [http-8080-9         ] EMAppServlet             - token1 = utf-8

2011-08-15 19:32:04,364 INFO [http-8080-9         ] EMAppServlet             - token2 = utf-8

2011-08-15 19:32:04,364 INFO [http-8080-9         ] EMAppServlet             - charset with q value is 1 utf-8

2011-08-15 19:32:04,364 INFO [http-8080-9         ] EMAppServlet             - returning charset as q value is 1 utf-8

2011-08-15 19:32:04,364 INFO [http-8080-9         ] EMAppServlet              - my charset =utf-8

Any ideas

[vakkera · Accepted solution]

Hello,

This looks like a certificate issue based on the following error.

ERROR [http-8080-9         ] EMX509TrustManager       -  checkServerTrusted: BSCUCM001.blocksolutions.local Certificate not found  in the keystore : the certificate chain is not trusted, Could not  validate path.

1. Was the IPaddress/hostname changed at the time of upgrade.

2. Was EM working fine prior to upgrade

Please try the following and let me know if that helps.

1. Go to Certificat managent under security

2. Delete/Add Cisco Tomcat Cert

3. Restart Cisco Tomcat service

4. Try login to EM.

Regards,

Vajrender

[Atul Khanna · Accepted solution]

hi,

In addition to restarting Tomcat, also restart Cisco Trust verification service and EM service.

-Atul

Please rate, if this helps !!

[blocksupport]

Spot on this fixed my issue.

Not sure what happened but this was a fresh build to 8.5.1 and then to 8.6.1 without licensing so maybe thay was my issue.

I had been trying to do upgrade from within the install but as you now need to install the cop file this isn't possible.

Thanks alot 5 stars

[Miroslav Jasso]

Hi blocksupport,

     I have same problem, but it persist after re-creating certificates and restarting services (I even tried to restart CUCM at all). Can you be more specific what certificates I must delete/create/regenerate? I have 3 tomcat certificates: 2x tomcat-trust and 1x tomcat.

My CUCM installation is new and clear with demo licence. No upgrade, no IP change, etc.

Thanks

[Miroslav Jasso]

Hi found solution by myself

     It is neccessary to delete: 'tomcat-trust' and 'CallManager-trust' certificates related to my CUCM. And then regenerate 'tomcat' certificate. Then restart 'Cisco Trust Verification Service', 'EM Service' and 'Tomcat Service' in this order. It is not neccessary to re-create deleted certificates, there were created automatically when regenerating 'tomcat' certificate.