Hi all,   I try to update and install LSC certificates on my CUCM 11.5, but there are 2 types of issues :   1/ after the csr have signed by the external CA, the CUCM import the LSC, extract and parse the .der, then when installing on the phone, still stay in "install/upgrade" and pending. on the trace I have : ERROR : get peername return -1 ERROR :: capfSSLrecvMsg System call error 110: ERROR : error:00000000:lib(0):func(0):reason(0) 4: SEPXXXXXXXXXXXX : Error reading phone, fd=9 4: SEPXXXXXXXXXXXX : capfReleaseSession : cause: 1 ERROR : get peername return -1 ERROR :: capfSSLSendMsg System Call error 32   Thanks Gilles ... View more

Hello all,   I try to regenerate the LSC certificates on 7841 and 8831, but it fails. When I troubleshhot LSC, the result is "troubleshoot suceess", I get the LSC in the activelog. so no network problem (Fw...) When I renew the LSC, I change to Install/upgrade, I change the authentication to null string, change the hour (date + 2h), click save and apply config. Then I go in the ssh callmanager but in the utils capf csr count, Valid CSR =0.....no csr is in the CUCM ( mixed mode, external CA). On the phone log message I have (I have truncate because toot long) : SECUREAPP-RSA Keygen done ! 2048 bit, in 48 second SECUREAPP-RSA PKCS1 keys, pri-key:1191 bytes, pub-key : 254 Byte SECUREAPP-CAPF_KEY_GEN Done : CAPF Key-gen done SECUREAPP-CAPF Clnt : in key handler SECUREAPP-tx KEY-GEN-RES 305 Byte SECUREAPP-CAPF Clnt: sending capf_clnt_send_keyGenRes SECUREAPP-CAPF Clnt: FSM event 14 (END-SESSION_REQ), state 5 (Active) SECUREAPP-CAPF Clnt:Internal error status 10 (FAILED) SECUREAPP-Return status of CAPF Session is <-1> SECUREAPP-CAPF Clnt: get ClientContext Clientcontext is null SECUREAPP-SEC-CAPF_OP_F : CAPF operation failed, ret -1 SECUREAPP-cert not installed SECUREAPP-....................................LSC : Failed   Before (on november), I had no problem to renew the LSC.....If anybody have an idea about the problem ? CUCM is in 11.5.1 7841 is in 11-7-1 8831 is in 10.3-1 CAPF is signed CA OK, the chain CA is OK (in the trust store) Thanks for any help in advance! ... View more

Hi all,   I have 7841 ipphones on a CUCM 11.x standalone server. We changed the CA root authority (so upload the tomcat, callmanager, CAPF and CTL certificates) and the new certificates are ok on the phones (CTL, ITL). The ipphones are registered, but there were still a problem with LSC installation, so I decided to make a factory reset to see....and when the ipphone cames back, it was written 'Error uploading user locale ; Error updating network locale'. I don't know where it came from and how to solve it..... Thanks Gilles     ... View more