9611 IP Phone to CM Encryption

[wallot]

Good morning

I'm attempting to get 9611 IP phones 6.6 to connect encrypted to Avaya CM 6.3.11. I'm thinking that with all the steps that I've gone through unsuccessfully, that there is something relatively small but important to getting encryption going.

Media Encryption is enabled in display sys cus. CM has a certificate for the active IP and is loaded on both CMs as per the MUDG 4/2015. CM is accessible by the FQDN and has no certificate error upon browser access. IP phone MCIPADD is pointed to the FQDN and works. Encryption type in ip-codec 1 is 1-srtp-aescm128-hmac80 as per documents for government implementation.

I think that the 46xxsetting.txt should have an entry but any change I've done there had no useful effect.

Thanks!

 

[Mlck]

Page 22..
JITC security compliance mode configuration

https://downloads.avaya.com/css/P8/documents/101009361

Don't follow the cows

 

[wallot]

Thanks Mlck

I have this document along with a few others. Several of us have been going over it. I have to admit that some of it make little sense to me. Just how much of it is absolutely required? In other words, what is the minimum to get encryption working?

 

[wallot]

Issue is basically resolved. Seems GA release 6.6.0.29 for 96X1 IP phones was broke. Release 6.6.0.32 fixed the issue with encryption.