Hello, Great video! I am trying to implement this on 11.5 SU6. I noticed you did not configure TLS 1.2 in your video. The documentation I read talked about doing that and generating a CSR to be signed by a CA and then installed on the CUCM. I am confused on exactly what is needed for the certificate part. What version of cucm is this?
How about when adding the SIP Profiel Secure and the CAPF Certificate, it gives me the following: Certificate Operation Status: Operation Pending And my IPComms appear as REJECTED Testing in CUCM v12.5 Any other parameter to change?
Hi @@FatihErikci I solved the problem, the LSC certificate is not installed on the phone and for this reason the security did not work. I had to change the hostname of the CUCM to IP from System - Server and with that it was solved. Tks for you video.
@@FatihErikci Hi Sir thank you.. Sir i have a question, when migrating CUCM version 10.5 to mixed mode is it the same steps with this video? I do have an upcoming project regarding encryption of calls i really appreciated it thanks man.
@@FatihErikci sir can you tell me about the requirements need to consider for call encryption?? 1. mixed mode etc. sir i really appreciate this thank you in advance.
Hello Fatih again! I completed the process you showed, my 9971 phone has no problem. My 8841 and CIPC will not register! 8841: 1. shows non-secure mode 2. LSC installed 3. CTL file installed 4. ITL is blank I performed factory reset on 8841 but the CTL files are still there. I restored 8841 to non-secure phone profiles, then back to secure, no luck phones still won't register.
Found my issue after more Googling....had to run this commandd on the PUB: admin:utils ctl update after that i restarted Call Manager and tftp services and the new CTL certs were pushed to the phones. All is working now!! thanks so much for these awesome CMS video series. I will now work on clustering and work on CallBridge groups, Outbound Calls, and other misc configurations.
so easy to follow thank u!
thanks alot for your efforts
Hi I have a question, this change carry some type of problem with communication with h323 or cube connected by sip trunk against CUCM?
It will not cause any roblems since you define encryption on SIP trunk security profile.
Hello, Great video! I am trying to implement this on 11.5 SU6. I noticed you did not configure TLS 1.2 in your video. The documentation I read talked about doing that and generating a CSR to be signed by a CA and then installed on the CUCM. I am confused on exactly what is needed for the certificate part. What version of cucm is this?
Hello Joshua, I am using CUCM 11.5 SU3 in that video which supports TLS 1.2
How about when adding the SIP Profiel Secure and the CAPF Certificate, it gives me the following:
Certificate Operation Status: Operation Pending
And my IPComms appear as REJECTED
Testing in CUCM v12.5
Any other parameter to change?
Did you configure directory number on phone line 1?
Hi @@FatihErikci I solved the problem, the LSC certificate is not installed on the phone and for this reason the security did not work.
I had to change the hostname of the CUCM to IP from System - Server and with that it was solved. Tks for you video.
Hello @Fatih Sir i would to ask if what is the sfreli that you choose on Device Security Mode?
Hello Jerson, sorry for that, it is a locale issue. It means "Encrypted" in Turkish.
@@FatihErikci Hi Sir thank you.. Sir i have a question, when migrating CUCM version 10.5 to mixed mode is it the same steps with this video?
I do have an upcoming project regarding encryption of calls i really appreciated it thanks man.
Yes exactly, you can follow this video tutorial.
@@FatihErikci hello sir do i need a encryption license to run mixed mode on cucm 10.5
@@FatihErikci sir can you tell me about the requirements need to consider for call encryption??
1. mixed mode
etc.
sir i really appreciate this thank you in advance.
Hello Fatih again! I completed the process you showed, my 9971 phone has no problem. My 8841 and CIPC will not register!
8841:
1. shows non-secure mode
2. LSC installed
3. CTL file installed
4. ITL is blank
I performed factory reset on 8841 but the CTL files are still there. I restored 8841 to non-secure phone profiles, then back to secure, no luck phones still won't register.
Hello Bobby, did you do the Certificate Installation in phone CAPF settings?
Found my issue after more Googling....had to run this commandd on the PUB:
admin:utils ctl update
after that i restarted Call Manager and tftp services and the new CTL certs were pushed to the phones. All is working now!! thanks so much for these awesome CMS video series. I will now work on clustering and work on CallBridge groups, Outbound Calls, and other misc configurations.
Very good, keep up the good work! :)
the command wont work at cucm 8.6.2
It is introduced in CUCM version 10