CAPF Cert - Update
Sometimes IP Phones seem to be holding onto the old Certification Authority Proxy Function (CAPF) Cert... and each of these phones will need to have the CAPF installed / Upgraded.
In the IP Phone configuration page, just below the PROTOCOL SPECIFIC INFORMATION box, is the Certification Authority Proxy Function (CAPF) Information box...
- First Option = Certificate Operation = No Pending Operation, Change that to INSTALL/UPGRADE
- Second Option = Authentication Mode = By Existing Certificate, (I used the 1st option to test and it worked)
SAVE configuration / Apply Config / RESET wait for phone to re-register using that CAPF CERT String in the Device Security Profile.
Change that Device Security Profile from that Cert Sting to Cisco 7841 - Standard SIP SECURE PROFILE and SAVE configuration / Apply Config / RESET - then wait for the phone to re-register with the Standard SIP SECURE Profile.
This update has worked with some phones that would not previously register using the SIP SECURE Profile after the CERT RENEWAL IP Phones; both are now registered on SIP SECURE.