8 Troubleshooting the Cisco IP Phone

Chapter 8 Troubleshooting the Cisco IP PhoneTroubleshooting Cisco IP Phone SecurityTable 8-1Cisco IP Phone Security TroubleshootingProblemLSC fails on the phone.Device authentication error.Phone cannot authenticate CTL file.Phone cannot authenticate any of the Bad TFTP record.configuration files other than theCTL file.Phone reports TFTP authorization • The TFTP address for the phone doesfailure.not exist in the CTL file.Phone does not register withCisco CallManager.Phone does not interact with thecorrect CAPF server to obtain thelocally-significant certificate.Phone does not request signedconfiguration files.Possible CauseCAPF configuration error.CTL file does not have aCisco CallManager certificate or has anincorrect certificate.The security token that signed theupdated CTL file does not exist in theCTL file on the phone.• If you created a new CTL file with anew TFTP record, the existing CTLfile on the phone may not contain arecord for the new TFTP server.The CTL file does not contain the correctinformation for the Cisco CallManagerserver.• The CAPF utility runs on a differentworkstation/server than is specifiedin the CTL file.• The CAPF certificate has changedsince the last update of the CTL file.• The CTL file does not contain anyTFTP server entry.• The CTL file does not contain anyTFTP entries with certificatesOL-4825-02Cisco IP Phone Administration Guide for Cisco CallManager 4.18-13