The timing of this pointed to when we recently updated both our internal and external Lync certificates to Sha2. New phones and phones that were hard reset while troubleshooting issues would no longer register with Lync.As we were troubleshooting through log files on the phone, we noticed the following error – 0x2F0D/0 on phone = ERRORWINHTTPSECUREINVALIDCA. These phones are much more powerful in terms of configurability and thus the reset process can be a bit more complicated to understand.Auto Updating Polycom CX Model Phones – A Lesson Learned Dave LightRecently, we discovered an issue with Polycom CX500, CX600, and CX3000 model phones in our environment. The larger range of Open SIP and Lync Compatible/Qualified Polycom IP phones in the SoundPoint IP, SoundStation IP, and VVX model lines all utilize the same Polycom-designed UCS firmware.
Polycom Cx700 Firmware Lync Download The VersionThere should be bunch of update files appeared for Polycom CX series devices. Also, whenever we performed a hard reset of the phone, it reverted back to an older version of the firmware that then prevented the phone from registering with Lync.This reminded me of the old adage, “Which came first?I have Lync 2010 and have just ended up with some CX700's running 1.0.522.0 (1.23), when I try to get these devices to update i see them download the version 4 software and never install it, they do not seem to make any attempt to download the interim software (1.0.522.103).To import the update files in to the Lync Server 2013 web server platform and go in to the Lync Server Control Panel and check the Device Updated in Clients tab. However, any phone that we tried to deploy out of the box was using an older firmware that did not have these certificates. This method kept connected phones up-to-date automatically and included the new intermediate certificates.If it finds DNS records that match, the phone will attempt to connect to this address to perform a firmware update. During the boot up and connection process, the phones check for a record in your Lync environment called ucupdates-r2 based off your domain’s FQDN.For example, if your internal domain is ragnar.lothbrok.local, the phone searches for both ucupdates-r2 and ucupdates-r2.ragnar.lothbrok.local. The phone needs a new firmware in order to register to Lync, but we cannot receive the update unless the phone is registered to Lync.This presents a bit of a problem.Luckily, we discovered there is a little known feature on the phones. Rights with respect to the software contained within its products.The chicken or the egg?”. User Guide for the Polycom CX700 IP Phone Microsoft Lync 2010 Edition September. I was able to register the phone with Lync using both the pin authentication method, as well as tethering a CX600 model phone to my PC and registering using the Lync soft client.The next day I took some phones to our satellite office and attempted to register them as well. I grabbed a Polycom phone out of the box, booted it up, and waited for a few minutes.The phone rebooted on its own and updated itself with the new firmware. The update seemed to go well and Lync soft clients on Windows and Apple registered normally. Looking at DHCP options, they all seemed to be set correctly. The phones would not register with Lync.Digging in to the logs on the phone, I found an error stating that it could not find the SIP server FQDN. Rebooted again and waited a few more minutes. Intuit quicken for mac 2010Polycom Cx300 UpdateThe next morning, I returned to our satellite office and booted up one of the phones. During evening hours, I rebooted the domain controller running DHCP. This returned everything as expected, except the SIP FQDN was missing! I reset the DHCP options several times, but it would not return the FQDN. I then realized that when I updated the Lync front end certificates, they were issued using a new CA. I tested with my response group and some others.They all worked normally.Searching through log files on both the Lync front end server and edge servers, I found errors in the edge server logs pointing to certificates. Phone calls to these response groups did not ring through to clients, but instead went directly to the voice mail set up for the response group. DHCP options also returned the correct SIP FQDN setting.All seemed to be going well until we started receiving reports of trouble with some Lync response groups. Tech Talk Live Blog Comment Guidelines:One of our main goals at Tech Talk Live is to build a community. I installed the new CA chain on the edge servers, rebooted the entire Lync environment overnight, and the response groups began working again.As a side note, if there are other child domains that are part of the Lync environment using Polycom CX phones, DNS records must be set up for the ucupdates-r2 record, as well as added to the list of SANs on the Lync front end certificate.For example, ucupdates-r2.bjorn.lothbrok.local. Because the edge servers are not domain bound, they never received the new CA certificate. Respect counts.We believe you can disagree without being disagreeable. It allows everyone to participate, contribute, connect, and share relevant personal experience that adds value to the conversation. We see commenting as an integral part of this community. We welcome links that help further the conversation and reserve the right to delete those we deem unnecessary. Firmware Update Lg Phone Not WorkingThis is considered self-promotion. Please do not link to personal blog posts, websites, or social media accounts that are irrelevant to the conversation. Comments should keep to the topic at hand, and not be promotional or commercial in nature. ![]()
0 Comments
Leave a Reply. |
Details
AuthorMarcus ArchivesCategories |