EAP-TLS and Polycom VVX

[Anonymous]

Hello everyone,

I'm currently trying to authenticate Polycom VVX 410 using certificates (EAP-TLS) and I'm having a hard time.

I have a couple of questions and hope someone here can help 🙂

- We currently have a Root CA and an Intermediate CA, do I need to import both chained together (.p7b) in the CA Certificate page and then import a regular .crt file (PEM formatted) signed by the CA for this specific user phone on the Device Certificate page ?

- Say I want to use the MIC (Manifacture Installed Certificate), is there any process ? I currently see on the phone "Factory installed Certificate", I added polycom root and intermediate to RADIUS server's trust list. I just don't see any requests coming in on the RADIUS server when I leave it with EAP-TLS enabled and no other CA.

I can authenticate laptops fine through EAP-TLS and phones through EAP-PEAP also, So I know the issue is not with the RADIUS/Server Cert.

Thank you !

[Anonymous]

You can use the MIC but the server EAP certificate needs to be issued by one of the CA’s on this list below, the polycom device root certificates also need to be trusted on the radius server.

http://supportdocs.polycom.com/PolycomService/support/global/documents/support/technical/products/vo...

[Anonymous]

Hello guys,

I have yhe same problem with Polycom vvx 400. I've tried to register on hosted pbx with SIP TLS.

I've uploaded CA certificate that I have been given from hosted pbx guy and I still get these errors:

1206103201|sip |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=18
1206103201|sip |4|00|MakeTlsConnection: SSL_connect error 1
1206103201|sip |4|00|MakeTlsConnection: connection failed error -1

I'm using  UC Software Version 5.5.1.11526 and all I did it was on web GUI.

I have to mention that on simple SIP settings everything works fine, even if I autoprovisioned or manually configured it.

Thank you,

Nick

[SteffenBaierUK]

Hello Nick,

welcome to the Polycom Community.

The community's VoIP FAQ contains this post here:

Apr 17, 2013 Question: How can I setup a TLS connection for SIP signaling and / or troubleshoot this?

Resolution: Please check => here <=

Can you lower the SIP logging?

• Settings > Logging > Global Log Level Limit > Debug
• Settings > Logging > Module Log Level Limits > SIP set to Debug

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services