Avaya 1120E SIP on Avaya IP Office - Security Certificate expiry warning & Time Sync

[tac84]

System: Avaya IP Office Essential Edition R9.1.12 (213)

Hi guys,
Recently tried out the 1100 series Nortel/Avaya SIP phones on Avaya IP Office and the following message is displaying on the screen of the 1120E. The phone still works and is functional but the message keeps coming up. Does anyone have experience with the 1100 SIP handsets and preventing this message from displaying?

I've also noticed that the time is on in sync with the IPO, which uses a Time Server?

See attached pic re the security certificate expiry.

Thanks in advance for any assistance you can provide. I usually use Avaya H.323 IP Phones so not as familiar with the Nortel/Avaya SIP ones.

Thanks, Tim
Adelaide, Australia

 

[budbyrd]

Not sure if you meant the system time was off. But if the time is not correct you can get this sort of warning. You may also need to regenerate the certificate in security settings.

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'

 

[tac84]

@budbyrd
Hi, The IPO itself has the correct time as does the H.323/Digital handsets, but the Nortel SIP handset will keep its own time and appears to be stuck in GMT time zone.

I will have a go re-generating the certificate in security settings.

Thanks.

Thanks, Tim
Adelaide, Australia

 

[derfloh]

The certificate warning is discussed here:

https://www.tek-tips.com/viewthread.cfm?qid=1798723

IP Office remote service

https://www.fwilke.com/home

Fixed price SIP trunk configuration:

https://www.fwilke.com/en/ip-office-sip-trunk-en/

CLI based cale blocking:

https://blog.fwilke.com/ip-office-block-calls-from-specific-cli/

SCN fallback over PSTN:

https://blog.fwilke.com/ip-office-scn-fallback/

 

[telecomtekperson]

Could be this?

https://support.avaya.com/kb/index?page=content&id=SOLN346495

After i posted, i see others had also...

 

[tac84]

Sorry @telecomtekperson I'm unable to access the link you provided because it needs a username and password.

Thanks, Tim
Adelaide, Australia

 

[tac84]

It's really strange. This is a screenshot of the certificates page on the IPO (R9.1.12). None of these certificates are due to expire, yet the Nortel 1120E SIP handset says the certificate expiry is 3/5/2018?

Also I'm still unsure why the Nortel handset displays its own time and not the system time like all of the H.323 Avaya handsets...

Thanks, Tim
Adelaide, Australia

 

[tac84]

Thanks @derfloh the trick with removing the certificates works as per the other post. No security certificates actually restore though however I'm yet to see that being an issue - system appears to be working fine and functions well.
I'll just have to wait and see if the 1120E displays a security certificate warning message again.



Thanks, Tim
Adelaide, Australia

 

[derfloh]

If the certificate comes back the phones will show the warning.

Do they have system phone rights?

IP Office remote service

https://www.fwilke.com/home

Fixed price SIP trunk configuration:

https://www.fwilke.com/en/ip-office-sip-trunk-en/

CLI based cale blocking:

https://blog.fwilke.com/ip-office-block-calls-from-specific-cli/

SCN fallback over PSTN:

https://blog.fwilke.com/ip-office-scn-fallback/

 

[Firebird Scrambler]

We have been seeing the same issue in System Status and it seems to only be present on systems running version 10 or 11. The certificate was taken out of service a few years ago as its no longer required and the steps to remove it doesn't work. I understand that Avaya will be bringing out an update to resolve it in the spring of 2020.

The main thing to remember is that even if the time out happens that it won't affect the Avaya phone system.

I have attached a guide of the problem and the process involved.

Firebird Scrambler

Nortel & Avaya Meridian 1 / Succession & BCM / Norstar Programmer

Website =

http://somertel.myfreesites.net

linkedin

 

[Firebird Scrambler]

I've updated the word doc file to include the updated certificate that can still be applied although it will probably not be needed. I've tested it and it does upload OK if you copy and paste the details as per instructions.

Firebird Scrambler

Nortel & Avaya Meridian 1 / Succession & BCM / Norstar Programmer

Website =

http://somertel.myfreesites.net

linkedin

 

[tac84]

Thanks @Firebird Scrambler and all.

So I've followed the process to delete certificates from my IPO R9.1.12(213) and all certificates have been deleted after a restart.

I have no and never did have any System Status warning, it was just the Nortel 1120E SIP handset warning message: 'Cert. will expire Contact your admin Expiry 3/5/18 CN: Avaya 1-X(tm) Deskphone SIP 2.1 SN#: 0x26' just keeps displaying on the 1120E.

What would you do? Should I re-upload the certificates that I deleted and just not bother with the 1120/1140E handsets moving forward? (I downloaded all of the certificates that I deleted)

From what I can see it doesn't matter what I do, the 'Cert. will expire Contact your admin Expiry 3/5/18 CN: Avaya 1-X(tm) Deskphone SIP 2.1 SN#: 0x26' just keeps displaying on the 1120E.

Thanks, Tim
Adelaide, Australia