VVX411 Skype for Business not downloading CA Certs

[Anonymous]

Hi, 

We have an on-prem skype environment, and are in the process of deploying VVX411 devices into some of our meeting rooms/hotdesk areas, but im having some serious issues getting them to actually sign into the service.

The problem seems to be related to them pulling down the trusted root CA's from our Skype environment, i have configured DHCP options 161 to point to our provisioning service, and have spent a good portion of today messing around with option 43 to try and get the phone to pull from the Certificate Provisioning Service URL. Alas im hitting a brick wall.

The phone does show the Certificate Provisioning Service URL correctly in the Diagnostics > Skype for Business status parameters page, but refuses to log into the service.

Details of Device

Phone Model VVX 411

Part Number 3111-48450-001 Rev:A

MAC Address 64:16:7F:31:0E:01

IP Mode IPv4

IP Address 192.168.1.50

UC Software Version 5.8.0.12848

Updater Version 5.9.5.13643

Log of attempted login attached.

[SteffenBaierUK · Accepted solution]

Hello @Aaron Smith,

welcome to the Polycom Community.

Thanks for providing the minimum requested details.

Looking at your log we can see the phone fails to download or verify a certificate:

0110183728|nisvc|2|00|HTTP SEND:: DestUrl(https://skypeinternalweb.int.domain.co.uk/WebTicket/WebTicketService.svc/pin), HttpResCode(0), curlRetCode(60) retVal(0)
0110183728|nisvc|2|00|ErrorBuffer::SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Please ensure you always check the FAQ's and/or utilize the community search before posting any new topics or follow up post’s.

The next step would be a support ticket.

In order to raise a support ticket you need to work with your Polycom reseller as they need to do this for you.

End Customers are unable to open a ticket directly with Polycom support.

Siphon Networks Ltd sold this unit 07/03/2018 so they are your Tier 1 contact.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services