Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Avaya Workplace on iOS stopped working through SBCE

pontim

Programmer
Aug 18, 2021
31
AR
Hi Everyone,

I've been dealing with a issue on the workplace app for iOS.
I deployed a solution with an Ip Office Server Edition + Session Border Controller, and everything worked fine until around one or two weeks the users that have iOS stopped registering and have a certificate warning.
The same happens when i try to auto-configure a new device. "invalid certificate" comes up. Meanwhile everything works fine on Android.

Some years ago i had a similar problem where Apple decided to lower the accepted certificate logevity to a maximum of 820 days... But back then i found a document that clearified that. Now i can´t find anything similar.

Is anyone else experiencing the same issue?

Thanks in advance.
 
Maybe the certificate is outdated? Or sundering in the IPO configuration changed? Or the phone loads the wrong CA certificate?
 
Last edited:
But neither IPO nor Workplace Client nor the SBC directly connected to Apple‘s Push service. The connection is made to Avaya Spaces and Avaya Spaces connected to Apple‘s push service.

If Avaya Spaces wouldn’t trust the new Apple certificate, all IPO users with Apple Push would have been affected.

For me it looks more like on of the issues mentioned in my previous answer.
 
? In which universe do iOS Workplace clients not connect to APN in order to use APN ?

iOS devices make outgoing connections to push.apple.com and receive incoming notifications from that service.

So its not beyond the bounds of possibilities that some iOS devices, and services on those devices, have not loaded an update that contained the new certificate. Apple changed the certificate required for APN two weeks ago and that coincides with the OPs suspected timescale for their issue.

Your entitled to your guesses but I don't how min is any less likely than "Maybe the certificate is outdated"?
 
I can’t imagine this os the reason as it would affect all services on iPhone then like WhatsApp, Facebook, LinkedIn that all get push notifications through Apples APN. As the OP only is affected (or seems to), I would see it as an issue between the client and the IPO.
 
What's the emoticon for clearing one's throat to draw attention, and then merrily whistling as one turns and walks away...


I suspect that the frequency with which Avaya's part of the APN service keeps breaking may be why it hasn't been reported by more people. They're just used to it.

I wouldn't be holding my breath for the IP Office version of the support notice appearing soon, so worth trying to manually create and upload the new certificate yourself if you have this issue (see the Aura section of the PSN).
 
Thanks for sharing.

I was told by one from avaya that the extra step through Avaya Spaces as push service ‚proxy‘ instead of using a direct connection is intended to be able to react to adjustments in Apples push service without having to adjust the IPOs. But for me it feels like if the IPOs have to be adjusted to be able to connect to Avaya‘s Push service much more often than Apple changes their service.
 
"the extra step through Avaya Spaces as push service ‚proxy‘ instead of using a direct connection is intended to be able to react to adjustments in Apples push service without having to adjust the IPOs" - Nice theory, except it assumed that there would be some live body at Avaya regularly reading Apple developer bulletins and finding ways to handle changes or at least warn the downstream teams (its not just IPO that is affected by this as the PSN shows). I think we can all guess with Avaya's headcount changes what has happened to that idea.
 
The PSN for IP Office systems has now been released: https://support.avaya.com/css/public/documents/101092613

Much as expected, copy the text for the certificates* to a file, then upload that file to the IP Office system's trusted certificate store.

*The PSN says 2 certificates but then provides text for 3 certificates?
 
All of my IPOSE with SBC and Workplace iOS are still working - and I have several customers with hundreds of Users. The PSN stated that it will not change until April 1st.
I don't believe that is the issue... Now I am not saying that it is not something Apple-related and specific to @pontim, but the PSN issue doesn't jive as my phone and email would be blowing up.
 

Part and Inventory Search

Sponsor

Back
Top