×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Equinox setup
3

Equinox setup

Equinox setup

(OP)
Server Edition 11.0 build 4.

I have the equinox setup and working if I use the URL (http://ipofficefqdn/46xxsettings.txt). The client wants to be able to have the users enter their email address to download the config file. I have created and verified their domain in Spaces. I have added the app "equinox Cloud Client". My question is the JSON config. I have found online notes on it but they do not seem to work. Here is what I have entered.

{{

“Client_Settings_File_Address”: [

{

“Profile_Name”: “Configuration for production users”,

“Client_Settings_File_Url”: “http://ipofficefqdn/46xxsettings.txt”}

What am I missing?

When I save the JSON file I receive the following error.



Here is the what the client sees when they enter their email.





RE: Equinox setup

Also using angled ˝ quotes rather than straight " quotes is a concern

Stuck in a never ending cycle of file copying.

RE: Equinox setup

I think the problem comes from the weird double quotes
Below an example in production and functional, modified with your fqdn :

{
  "Client_Settings_File_Address" : [
    {
      "Profile_Name": "Configuration for production users",
      "Client_Settings_File_Url": "https://ipofficefqdn/46xxsettings.txt"
    }
  ]
} 

Make sure you can access the 46xxsettings with the url https://ipofficefqdn/46xxsettings.txt

RE: Equinox setup

(OP)
Thanks! I'll try that tonight. I am able to access the txt file using the link I have.

RE: Equinox setup

(OP)
bdtp, that fixed the auto config. Thank You!!

Now I am getting an certificate error. Where can I create that? I did have a certificate that expired on 2-7-2020 but everything I read said I wouldn't need it anymore.

RE: Equinox setup

The certificate you are talking about is an old certificate that is no longer used today.
Look here

You have to generate identity certificate in 7071 interface according to you SIP Domain, and then inject root-ca.pem in you several devices

RE: Equinox setup

Your certificate in the trusted store is out of date. Delete the old one and update it to the latest one. You should be able to connect then. You should also switch over to HTTPS rather than HTTP

RE: Equinox setup

bahmonkeys
Must not be the Server certificate. I guess the expired certificate is the old CA certificate.

Without the needed information it's hard to say what's wrong with the certificate.

If you are on 11.0.4 (not SP1 or SP2) the certificate generated by IP Office will not be valid. Check this post: https://blog.fwilke.com/create-certificates-for-iphone-with-ip-office/

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

RE: Equinox setup

@derfloh
If you change an IP Address DNS or any major routes this will generate a certificate. All previous certificates are now obsolete

RE: Equinox setup

(OP)
2 more questions for Equinox. I am able to enter an email address and it downloads the correct config and I am not getting any errors using a PC.

1)I would like to modify the dialing rules automatically as well. Is this done in the JSON string or do I have to create a specials txt file on the server?

2) I have installed and enabled the certs on my iPhone and able to log in using email but getting a "VoIP Certificate Problem" still?

RE: Equinox setup

While the iPhone certificate store is used to validate the server certificate during download of 46xxsettings.txt for all other TLS connection the certificate downloaded from IPO (WebRootCA.pem) is used.

So you have to ensure that WebRootCA.pem contains the root certificate of the CA that issued the IPO certificate. If it's a root CA and an intermediate CA you have to merge them into an own WebRootCA.pem.

Regarding the dial rules... IX Workplace doesn't load 46xxspecials.txt.

Is recommended to copy the autogenerated 46xxsettings.txt with a web browser as ixsettings.txt (for example) and point the app to load that file through Spaces. Within the new file you can adjust any settings you need like dial plan rules or FNE settings as well.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

RE: Equinox setup

(OP)
Derfloh, creating a new txt file and pointing Spaces to it worked perfect. Thank you for that!!

I am still struggling with the iPhone cert though. I have downloaded the root-ca.pem cert, installed and enabled. Reinitialized equinox client but still getting the error. Attached is the cert I am downloading.



Is that the correct one? I believe I will need to merge them like you mentioned. How is that done? I am not that familiar with certs yet. Thank you for your help on this.

RE: Equinox setup

(OP)
Derfloh, I did a search in my 46xxsettings.txt file for SET MYTRUSTCERT and it is not there. Is this something I can manually add to my xisettings.txt file?

RE: Equinox setup

(OP)
I have a ticket opened with Avaya on this and they are thinking it might be an ios issue running version 13. Has any one had any success running this on ios 13?


Derfloh, I do see SET TRUSTCERTS WebRootCA.pem in the 46xxsettings.txt file and the one I created ixsettngs.txt. I have created the new pem file by merging the root and cert files together. I used notepad++ to do this using the link below.

https://support.vidyocloud.com/hc/en-us/articles/1...

I downloaded the cert.pem file and the root-ca.pem file, and pasted the root-ca.pem file to the bottom of the cert.pem on a new tab to merge them. I did a file save as and saved it as WebRootCA.pem. I emailed that cert to my cell phone. Downloaded and installed. Once it was installed I enabled it in the certificate trust settings. I then tried to setup the app and I still get the VoIP Cert error. Is there a problem with IOS 13 or am I doing something wrong? Again, everything works on the PC (inside or outside of the network)

RE: Equinox setup

I did this on iOS 13.

Be aware that IX Workplace loads the WebRootCA.pem and uses it and not the certificates from the iPhone cert store. Certificate store is only used during download of the settings file.

You can check them in the IX Workplace app under Settings - Advanced - Certificates

You should see both certificates from your PEM file.


IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

RE: Equinox setup

(OP)
I am only seeing the 1 certification that I installed in IX.

RE: Equinox setup

(OP)
I have tried it both ways with the cert.pem on top and the root-ca.pem on the bottom. I have then tried it with root-ca.pem on top and cert.pem on the bottom. Enabled both and I get the same error.

RE: Equinox setup

derfloh is right in what he is saying but there is a different way to solve this.
My original post "Your certificate in the trusted store is out of date. Delete the old one and update it to the latest one. You should be able to connect then. You should also switch over to HTTPS rather than HTTP"
Delete the certificate in your TRUSTED STORE of the Avaya IP Office. Download the latest certificate for your Avaya IP Office, add this back into your trusted store of the IP Office. Reboot the Phone system, try logging in with https://IP Address/46xxsettings.txt and then if this works try https://FQDN of PBX/46xxsettings.txt

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close