Solution
Install a correct certificate.
Phone Cannot Authenticate CTL File
Problem
Phone cannot authenticate the CTL file.
Cause
The security token that signed the updated CTL file does not exist in the CTL file on the phone.
Solution
Change the security token in the CTL file and install the new file on the phone.
CTL File Authenticates but Other Configuration Files Do Not Authenticate
Problem
Phone cannot authenticate any configuration files other than the CTL file.
Cause
A bad TFTP record exists, or the configuration file may not be signed by the corresponding certificate in the
phone Trust List.
Solution
Check the TFTP record and the certificate in the Trust List.
ITL File Authenticates but Other Configuration Files Do Not Authenticate
Problem
Phone cannot authenticate any configuration files other than the ITL file.
Cause
The configuration file may not be signed by the corresponding certificate in the phone Trust List.
Solution
Re-sign the configuration file by using the correct certificate.
TFTP Authorization Fails
Problem
Phone reports TFTP authorization failure.
Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager
10.0 (SIP)
274
Troubleshooting and Maintenance
Cisco Unified IP Phone Security Problems
REVIEW DRAFT - CISCO CONFIDENTIAL
