Mike's PBX Cookbook

CAPF Cert - Update

Sometimes IP Phones seem to be holding onto the old Certification Authority Proxy Function (CAPF) Cert... and each of these phones will need to have the CAPF installed / Upgraded.

In the IP Phone configuration page, just below the PROTOCOL SPECIFIC INFORMATION box, is the Certification Authority Proxy Function (CAPF) Information box...

  1. First Option = Certificate Operation = No Pending Operation, Change that to INSTALL/UPGRADE
  2. Second Option = Authentication Mode = By Existing Certificate, (I used the 1st option to test and it worked)

SAVE configuration / Apply Config / RESET wait for phone to re-register using that CAPF CERT String in the Device Security Profile.

Change that Device Security Profile from that Cert Sting to Cisco 7841 - Standard SIP SECURE PROFILE and SAVE configuration / Apply Config / RESET - then wait for the phone to re-register with the Standard SIP SECURE Profile.

This update has worked with some phones that would not previously register using the SIP SECURE Profile after the CERT RENEWAL IP Phones; both are now registered on SIP SECURE.