Field Notice: FN - 70047 - CP-8821 - IP Phone Displays "MIC not installed" Error Message - Workaround Provided

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	30-Nov-17	Initial Release

Products Affected

Affected OS Type	Affected Release	Affected Release Number	Comments
NON-IOS	SIP v.11	11.0(3)SR3, 11.0(2)SR2, 11.0(3)SR5, 11.0(3), 11.0(2), 11.0(3)SR2, 11.0(1), 11.0(3)SR1

Defect Information

Defect ID	Headline
CSCve44412	Concurrent access to secure storage causes MMC errors
CSCvg68954	Request to remove "MIC not installed" home screen message logic regardless of LSC status

Problem Description

The CP-8821 IP Phone displays the "MIC not installed" error message.

Background

The Manufacturer Installed Certificate (MIC) can be used for wireless authentication (for example, Extensible Authentication Protocol (EAP) - Transport Layer Security (TLS)) as well as other security features/interfaces:

• Cisco Unified Communications Manager (CUCM) Encrypted/Authenticated device security mode
• HTTPS
• Secure Shell (SSH)

The "MIC not installed" error message is displayed on the CP-8821 and is covered in Cisco bug IDs CSCve44412 and CSCvg68954.

The “MIC not installed” message will only show on the home screen either indefinitely (without a Locally Significant Certificate (LSC)) or for 10 seconds after power on (with LSC) with loads earlier than Release 11.0(3)SR6. However, a message will be logged to Status Messages for all loads.

Problem Symptom

The "MIC not installed" error message is displayed on the CP-8821 IP Phone.

Workaround/Solution

In order to troubleshoot the 8821 IP Phone when it displays "MIC not installed", complete these steps.

Step 1. Confirm the Error Message

Verify that the phone displays the "MIC not installed" error message on the screen as shown in this image:

If the error has disappeared, choose Settings > Admin settings > Status > Status messages in order to verify it is present as a status message.

Step 2. Restore Functionality

If not required for wireless authentication, the MIC can be replaced with an LSC with the use of CUCM Certificate Authority Proxy Function (CAPF) so the phone operates normally. Install an LSC on the phone once the error message is confirmed and test once more. Ensure By Null String or By Authentication String is selected for the Authentication Mode in order for the LSC to be installed successfully despite the fact that the MIC is not present.

In Release 11.0(3)SR3.2, the "MIC not installed" message in the status bar is suppressed when the LSC is installed on the phone. The message is displayed for the first 10 seconds after power on. For earlier loads an LSC can be installed on the phone and function, but the “MIC not installed” message continues to be displayed on the phone’s status bar.

Step 3. Prevent New Occurrences

Upgrade all Cisco 8821 phones to Release 11.0(3)SR3.2 or later as soon as possible, as the issue has been fixed from this version onwards. For devices that have already displayed this error message, an upgrade will not recover the MIC. The code that contains the fix for Cisco bug ID CSCvc65418 (resolved through the fix of Cisco bug ID CSCve44412) prevents disappearance of the MIC in the first place.

For further assistance or if the MIC is required for wireless authentication on an affected phone, contact the Cisco Technical Assistance Center for a Return Material Authorization (RMA).

Note: Cisco recommends that you use the latest 8821 firmware release available on Cisco.com.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email
• By telephone

Receive Email Notification For New Field Notices

Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.