Unable to get Polycom phone to authenticate to LAN

[MrChiefLuis]

Looking for help with a Polycom C60-M phone.

We are trying to add the phone to our LAN using 802.1x, and for some reason every time we enable AAA on our switch the phone will not authenticate. Below are the steps we’ve taken to no avail:

On the web interface for the phone, we uploaded the Root-CA certificate, the intermediate certificate and the device’s certificate.

The TLS profiles were also set on the phone’s web interface to ensure that the generated certificates were used in authenticating the phones to our network.

We set rules on our NPS to allow the device to access the network if the device authenticates using EAP/PEAP/MSCHAPv2 (this failed, so we also changed it to EAP-TLS). We downloaded the Polycom root CA and uploaded it to the RADIUS server trusted certificate store.

The error on Windows NPS was “The certificate chain was issued by an authority that is not trusted.” We used our ROOT CA that is trusted and the intermediate CA which is also trusted. Constantly seeing this error after multiple changes and generated certificates, we decided to use a different RADIUS server.

We tested this with Packetfence and are getting the error “eap_tls: (TLS) Alert read:fatal:unknown CA”.

We have tried MANY different NPS rules, AD changes, and phone configurations with no success. Any help would be appreciated.

[SteffenBaierUK]

Hello @MrChiefLuis ,

Welcome to the HP community.

Unfortunately, your post does not contain the currently used Software version for the HP Poly product you use. 

This is important especially in the future when someone finds this post in days, months, or years to come. Please do not simply edit the original post but reply with the versions.

This is stated in the FAQ or the Read 1st section, explaining why this is important.

From our VoIP FAQ:

Jun 25, 2012 Question: How can I add an 802.1x EAP-PEAPv0/MSCHAPv2 Certificate or use Dot.1x?

Resolution: Please check => here <=

Volunteers would need some logs to look at but if an issue like this cannot be resolved via a public community post, please work with our support organization in your region. Details on how to contact us are in my signature

Best regards

Steffen Baier

[MrChiefLuis]

The current software version we are using on the Polycom C60-M phone is as shows:

Phone Model	Trio C60
Part Number	3111-86240-001 Rev:A

Software Version

9.0.0.10315

[Meghana_10]

Hello @MrChiefLuis Welcome to the Poly HP Support Community. 

Due to limited support, I would request that you contact HP Support, and our support engineers should be able to sort this out. HP Support can be reached by clicking on the following link:

https://support.hp.com/us-en/poly

Please feel free to contact us here anytime you need any further assistance.

I hope this helps! Keep me posted for further assistance. If you find the information provided useful or solves your problems, help other users find the solution more easily by giving Kudos/Thumbs Up and marking my post as an Accepted Solution.

Regards,
Meghana

Have a great day!