Cisco IP Phones 7800/8800 Series fails to register over MRA if phone has expired Sectigo/Addtrust root certificate

Available Languages

Download Options

PDF (209.1 KB)
View with Adobe Reader on a variety of devices
ePub (265.0 KB)
View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle) (215.5 KB)
View on Kindle device or Kindle app on multiple devices

Updated:June 3, 2020

Document ID:215573

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Introduction

This document describes the solution for Cisco IP Phones 7800/8800 Series registration failure over MRA (Mobile Remote Access) if phone has expired Sectigo/Addtrust root certificate which expried on 30th May 2020.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Problem

Cisco IP Phones 7800/8800 Series fails to register over MRA if phone has expired Sectigo/Addtrust root certificate which expried on 30th May 2020 and Expressway has signed it certfictate from Sectigo/Addtrust CA.

Per 12.7 firmware Certificate Authority Trust List, Trust list has expired Sectigo/Addtrust certificate on IP phone trust store.

https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/cuipph/all_models/ca-list/CA-Trust-List.pdf

To verify the certificate validity copy the fingerprint mentioned in document for certificate trust store and browse to https://crt.sh/ paste the fingerprint in the white box and click search